SAML 2.0 SP metaandmed

Need on SimpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

https://aries.ujaen.es/simplesaml/module.php/saml/sp/metadata.php/salasvirtuales

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://aries.ujaen.es/simplesaml/module.php/saml/sp/metadata.php/salasvirtuales">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml2-logout.php/salasvirtuales"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml2-acs.php/salasvirtuales" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml1-acs.php/salasvirtuales" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml2-acs.php/salasvirtuales" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml1-acs.php/salasvirtuales/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrador de Aires</md:GivenName>
    <md:EmailAddress>mailto:sipd@ujaen.es</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab SimpleSAMLphp-d:

$metadata['https://aries.ujaen.es/simplesaml/module.php/saml/sp/metadata.php/salasvirtuales'] = [
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml2-logout.php/salasvirtuales',
        ],
    ],
    'AssertionConsumerService' => [
        [
            'index' => 0,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
            'Location' => 'https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml2-acs.php/salasvirtuales',
        ],
        [
            'index' => 1,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
            'Location' => 'https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml1-acs.php/salasvirtuales',
        ],
        [
            'index' => 2,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
            'Location' => 'https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml2-acs.php/salasvirtuales',
        ],
        [
            'index' => 3,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
            'Location' => 'https://aries.ujaen.es/simplesaml/module.php/saml/sp/saml1-acs.php/salasvirtuales/artifact',
        ],
    ],
    'contacts' => [
        [
            'emailAddress' => 'sipd@ujaen.es',
            'contactType' => 'technical',
            'givenName' => 'Administrador de Aires',
        ],
    ],
    'certData' => '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',
    'redirect.validate' => true,
];