Metadati SAML 2.0 SP
Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.
Si possono ottenere i metadati in XML dall'URL dedicata:
https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/metadata.php/default-sp
Metadati
Metadati SAML 2.0 in formato XML:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/metadata.php/default-sp"> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="0"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp" index="1"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="2"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp/artifact" index="3"/> </md:SPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Library</md:GivenName> <md:SurName>Systems</md:SurName> <md:EmailAddress>mailto:lbsys@polyu.edu.hk</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp
$metadata['https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/metadata.php/default-sp'] = array ( 'SingleLogoutService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp', ), ), 'AssertionConsumerService' => array ( 0 => array ( 'index' => 0, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', 'Location' => 'https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp', ), 1 => array ( 'index' => 1, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post', 'Location' => 'https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp', ), 2 => array ( 'index' => 2, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact', 'Location' => 'https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp', ), 3 => array ( 'index' => 3, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01', 'Location' => 'https://www.lib.polyu.edu.hk/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp/artifact', ), ), 'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified', 'contacts' => array ( 0 => array ( 'emailAddress' => 'lbsys@polyu.edu.hk', 'contactType' => 'technical', 'givenName' => 'Library', 'surName' => 'Systems', ), ), 'certData' => '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', );