SAML 2.0 IdP - Metadane
Tutaj sa metadane, które SimpleSAMLphp wygenerował dla Ciebie. Możesz je wysłać zaufanym partnerom w celu stworzenia zaufanej federacji.
Możesz pobrać metadane w formacie xml:
https://brnoid.cz/identity/saml2/idp/metadata.php
Metadane
W formacie SAML 2.0 Metadata XML
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://brnoid.cz/identity/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>MIIFqzCCA5OgAwIBAgIJALOQe0Rj35/0MA0GCSqGSIb3DQEBCwUAMGwxCzAJBgNVBAYTAkNaMQ0wCwYDVQQHDARCcm5vMRQwEgYDVQQKDAtpblFvb2wgYS5zLjEWMBQGA1UEAwwNd3d3LmJybm9pZC5jejEgMB4GCSqGSIb3DQEJARYRb2RlaG5hbEBpbnFvb2wuY3owHhcNMjEwODE2MTI1NDAxWhcNMjIwODE2MTI1NDAxWjBsMQswCQYDVQQGEwJDWjENMAsGA1UEBwwEQnJubzEUMBIGA1UECgwLaW5Rb29sIGEucy4xFjAUBgNVBAMMDXd3dy5icm5vaWQuY3oxIDAeBgkqhkiG9w0BCQEWEW9kZWhuYWxAaW5xb29sLmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvGtU8WsvoLM00QyD4EaoMdsCP6MGNDZcgBtZF2gHFodOitmBJ0q1kw3VMZ/ozzgz8I50xUFhTl+3WZ9F++GRNbMq3ZB8cuSS/jPxA/eLDNwRVruu6RmAZnEieWdQ+/sMB9iIGMqwOan6wR+oh5PciWGM1DXNd6FeNy4luO4OdKQljfnQnJF+Vid1aWgjtFQiNMqoKY2gyf0OwXYDqts3xhTfhNvrRp52AMRQs7WjsjqsP2YZKtUehyi+K1wjDA5LXDrikIdgqdDzzrYSSGFTKr1V9LKQHhoYG2A+XdXQO6tZ7YnuBd/wf4i4MLTrQBPlEOdDAJ3CdHn4YCJOQBskFmFUoW5CtkIgsxo+RunC6KKVc/GwH4/5oCueRc2k5wZZpEGEo5ty7D92bNJ0aubyrNgV1SLny+N/USrLpz+iCST4XvuGQ7M9Q+F4J7ROQWC0MptEzSLemhRVn6DwabkJ9D8tqpinBDuG/9y14RpYKtM1dxQtM3Cd0tGhKU8GrxDxawto3r/94wPWv2IgcvW3hoyf5Bjc15Jx/BsRqKvORCoB+U1O0XShXZX5cjnxsmpSl0ikjqCH9f9SzHPDb3Sf6bE7tZEsaMXgkaCsU9k4q0sWTS/kSaCBj7ycnZuWLg7JeyE/Vv8EkgCJrYnDb0J0IAc5eKaKp6A/PEU3ZOucLkUCAwEAAaNQME4wHQYDVR0OBBYEFFmTAVWgId5NvYq8RU5u1s30vmUKMB8GA1UdIwQYMBaAFFmTAVWgId5NvYq8RU5u1s30vmUKMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAKNTXutsAS6xnDwQl1tbsSN3g+TpNGMC8kRi2F+cEbKlKyIj/wX6TErlmHPPfI2H04YIgxRziaifOFJ2LCqMMPajkDEg0Zck8Tv+o4HkNbhzICN1+3UTTMO2HjYJM72nGKRaBSJnaZdF09T+7SzVaxLeX1oEQFPcAHc0oDMMlj82m8Ai7p37SdC5XLvwJSFJ83Rw/OIshuPj43654c2G0R58zQP2tznvHn1UaO1PjjVbO4yTwMFc3lA0Uxf/7NxuCmpF8V2YGMyB1A9YEHEysOFfwyHNrpoVkf+WLBWhGU9qXne49NIz+lNZURKrM89gDi38Pf9IuLFNYkhZssnCegdELe1J0eD4OGQB+gcVBbKkf8QOvMeZTUxEksPlaWWW0OWAAvSOA3eKaZahabsNpQnRyLLpvaa1KikrhSrocPJyaFxOD+5fzryeQWATRny7Xw0OEoS6slU9vMRLveq/6hi5jeOiW4en53m1gRXNgFGQp9rpSGG3b8rPbPSMpKzhW5FTH+c6GsnDbMYfaoxWJTOHblfm4RgbnSQE4WboiRg/g1vGpEfjyhmOkFOzMbI5iZhvinKVaaI7BiZkOHrQl6EGbyB3dEZ1twoZqILPxo5ZC43zQJcCx44OufWcBqPmoX9aHlmQ7pDEpLt360EH4zRH4uVeogalahpXemo7M1t3</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://brnoid.cz/identity/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://brnoid.cz/identity/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Administrator</md:GivenName> <md:EmailAddress>mailto:odehnal@inqool.cz</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['https://brnoid.cz/identity/saml2/idp/metadata.php'] = [ 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://brnoid.cz/identity/saml2/idp/metadata.php', 'SingleSignOnService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://brnoid.cz/identity/saml2/idp/SSOService.php', ], ], 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://brnoid.cz/identity/saml2/idp/SingleLogoutService.php', ], ], 'certData' => 'MIIFqzCCA5OgAwIBAgIJALOQe0Rj35/0MA0GCSqGSIb3DQEBCwUAMGwxCzAJBgNVBAYTAkNaMQ0wCwYDVQQHDARCcm5vMRQwEgYDVQQKDAtpblFvb2wgYS5zLjEWMBQGA1UEAwwNd3d3LmJybm9pZC5jejEgMB4GCSqGSIb3DQEJARYRb2RlaG5hbEBpbnFvb2wuY3owHhcNMjEwODE2MTI1NDAxWhcNMjIwODE2MTI1NDAxWjBsMQswCQYDVQQGEwJDWjENMAsGA1UEBwwEQnJubzEUMBIGA1UECgwLaW5Rb29sIGEucy4xFjAUBgNVBAMMDXd3dy5icm5vaWQuY3oxIDAeBgkqhkiG9w0BCQEWEW9kZWhuYWxAaW5xb29sLmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvGtU8WsvoLM00QyD4EaoMdsCP6MGNDZcgBtZF2gHFodOitmBJ0q1kw3VMZ/ozzgz8I50xUFhTl+3WZ9F++GRNbMq3ZB8cuSS/jPxA/eLDNwRVruu6RmAZnEieWdQ+/sMB9iIGMqwOan6wR+oh5PciWGM1DXNd6FeNy4luO4OdKQljfnQnJF+Vid1aWgjtFQiNMqoKY2gyf0OwXYDqts3xhTfhNvrRp52AMRQs7WjsjqsP2YZKtUehyi+K1wjDA5LXDrikIdgqdDzzrYSSGFTKr1V9LKQHhoYG2A+XdXQO6tZ7YnuBd/wf4i4MLTrQBPlEOdDAJ3CdHn4YCJOQBskFmFUoW5CtkIgsxo+RunC6KKVc/GwH4/5oCueRc2k5wZZpEGEo5ty7D92bNJ0aubyrNgV1SLny+N/USrLpz+iCST4XvuGQ7M9Q+F4J7ROQWC0MptEzSLemhRVn6DwabkJ9D8tqpinBDuG/9y14RpYKtM1dxQtM3Cd0tGhKU8GrxDxawto3r/94wPWv2IgcvW3hoyf5Bjc15Jx/BsRqKvORCoB+U1O0XShXZX5cjnxsmpSl0ikjqCH9f9SzHPDb3Sf6bE7tZEsaMXgkaCsU9k4q0sWTS/kSaCBj7ycnZuWLg7JeyE/Vv8EkgCJrYnDb0J0IAc5eKaKp6A/PEU3ZOucLkUCAwEAAaNQME4wHQYDVR0OBBYEFFmTAVWgId5NvYq8RU5u1s30vmUKMB8GA1UdIwQYMBaAFFmTAVWgId5NvYq8RU5u1s30vmUKMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAKNTXutsAS6xnDwQl1tbsSN3g+TpNGMC8kRi2F+cEbKlKyIj/wX6TErlmHPPfI2H04YIgxRziaifOFJ2LCqMMPajkDEg0Zck8Tv+o4HkNbhzICN1+3UTTMO2HjYJM72nGKRaBSJnaZdF09T+7SzVaxLeX1oEQFPcAHc0oDMMlj82m8Ai7p37SdC5XLvwJSFJ83Rw/OIshuPj43654c2G0R58zQP2tznvHn1UaO1PjjVbO4yTwMFc3lA0Uxf/7NxuCmpF8V2YGMyB1A9YEHEysOFfwyHNrpoVkf+WLBWhGU9qXne49NIz+lNZURKrM89gDi38Pf9IuLFNYkhZssnCegdELe1J0eD4OGQB+gcVBbKkf8QOvMeZTUxEksPlaWWW0OWAAvSOA3eKaZahabsNpQnRyLLpvaa1KikrhSrocPJyaFxOD+5fzryeQWATRny7Xw0OEoS6slU9vMRLveq/6hi5jeOiW4en53m1gRXNgFGQp9rpSGG3b8rPbPSMpKzhW5FTH+c6GsnDbMYfaoxWJTOHblfm4RgbnSQE4WboiRg/g1vGpEfjyhmOkFOzMbI5iZhvinKVaaI7BiZkOHrQl6EGbyB3dEZ1twoZqILPxo5ZC43zQJcCx44OufWcBqPmoX9aHlmQ7pDEpLt360EH4zRH4uVeogalahpXemo7M1t3', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', 'contacts' => [ [ 'emailAddress' => 'odehnal@inqool.cz', 'contactType' => 'technical', 'givenName' => 'Administrator', ], ], ];
Certificates
Download the X509 certificates as PEM-encoded files.