Metadados SAML 2.0 SP

De seguida pode encontrar os metadados gerados pelo SimpleSAMLphp. Pode enviar este documento de metadados aos seus parceiros para configurar uma federação.

Pode obter os metadados em XML num URL dedicado:

https://brnoid.cz/identity/module.php/saml/sp/metadata.php/sp-brnoid

Metadados

Metadados no formato XML SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://brnoid.cz/identity/module.php/saml/sp/metadata.php/sp-brnoid">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://brnoid.cz/identity/module.php/saml/sp/saml2-logout.php/sp-brnoid"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://brnoid.cz/identity/module.php/saml/sp/saml2-acs.php/sp-brnoid" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://brnoid.cz/identity/module.php/saml/sp/saml1-acs.php/sp-brnoid" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://brnoid.cz/identity/module.php/saml/sp/saml2-acs.php/sp-brnoid" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://brnoid.cz/identity/module.php/saml/sp/saml1-acs.php/sp-brnoid/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:odehnal@inqool.cz</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Metadados no formato ficheiro de configuração do SimpleSAMLphp. Use esta alternativa se usar uma entidade SimpleSAMLphp no outro extremo:

$metadata['https://brnoid.cz/identity/module.php/saml/sp/metadata.php/sp-brnoid'] = [
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://brnoid.cz/identity/module.php/saml/sp/saml2-logout.php/sp-brnoid',
        ],
    ],
    'AssertionConsumerService' => [
        [
            'index' => 0,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
            'Location' => 'https://brnoid.cz/identity/module.php/saml/sp/saml2-acs.php/sp-brnoid',
        ],
        [
            'index' => 1,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
            'Location' => 'https://brnoid.cz/identity/module.php/saml/sp/saml1-acs.php/sp-brnoid',
        ],
        [
            'index' => 2,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
            'Location' => 'https://brnoid.cz/identity/module.php/saml/sp/saml2-acs.php/sp-brnoid',
        ],
        [
            'index' => 3,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
            'Location' => 'https://brnoid.cz/identity/module.php/saml/sp/saml1-acs.php/sp-brnoid/artifact',
        ],
    ],
    'contacts' => [
        [
            'emailAddress' => 'odehnal@inqool.cz',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
    'certData' => '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',
];