Metadati SAML 2.0 SP

Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.

Si possono ottenere i metadati in XML dall'URL dedicata:

https://samlsp.avanzo.com/module.php/saml/sp/metadata.php/samlbenteler-sp

Metadati

Metadati SAML 2.0 in formato XML:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://samlsp.avanzo.com/module.php/saml/sp/metadata.php/samlbenteler-sp">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://samlsp.avanzo.com/module.php/saml/sp/saml2-logout.php/samlbenteler-sp"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://samlsp.avanzo.com/module.php/saml/sp/saml2-acs.php/samlbenteler-sp" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://samlsp.avanzo.com/module.php/saml/sp/saml1-acs.php/samlbenteler-sp" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://samlsp.avanzo.com/module.php/saml/sp/saml2-acs.php/samlbenteler-sp" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://samlsp.avanzo.com/module.php/saml/sp/saml1-acs.php/samlbenteler-sp/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>fernando.jaraba@avanzo.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp

$metadata['https://samlsp.avanzo.com/module.php/saml/sp/metadata.php/samlbenteler-sp'] = array (
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://samlsp.avanzo.com/module.php/saml/sp/saml2-logout.php/samlbenteler-sp',
    ),
  ),
  'AssertionConsumerService' => 
  array (
    0 => 
    array (
      'index' => 0,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
      'Location' => 'https://samlsp.avanzo.com/module.php/saml/sp/saml2-acs.php/samlbenteler-sp',
    ),
    1 => 
    array (
      'index' => 1,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
      'Location' => 'https://samlsp.avanzo.com/module.php/saml/sp/saml1-acs.php/samlbenteler-sp',
    ),
    2 => 
    array (
      'index' => 2,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
      'Location' => 'https://samlsp.avanzo.com/module.php/saml/sp/saml2-acs.php/samlbenteler-sp',
    ),
    3 => 
    array (
      'index' => 3,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
      'Location' => 'https://samlsp.avanzo.com/module.php/saml/sp/saml1-acs.php/samlbenteler-sp/artifact',
    ),
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'fernando.jaraba@avanzo.com',
      'contactType' => 'technical',
      'givenName' => 'Administrator',
    ),
  ),
  'certData' => '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',
);