SAML 2.0 SP metadata

Her er metadata som SimpleSAMLphp har generert for deg. Du må utveksle metadata med de partene du stoler på for å sette opp en føderasjon.

Du kan nå metadata i XML-format på en dedikert URL:

https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/metadata.php/entra-sso

Metadata

I SAML 2.0 Metadata XML Format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sprovider.utalca.cl/simplesaml/saml2/idp/metadata.php">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml2-logout.php/entra-sso"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml2-acs.php/entra-sso" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml1-acs.php/entra-sso" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml2-acs.php/entra-sso" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml1-acs.php/entra-sso/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Infraestructura-DTI</md:GivenName>
    <md:EmailAddress>mailto:plataforma@utalca.cl</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp format - bruk denne dersom du benytter SimpleSAMLphp i den andre enden:

$metadata['https://sprovider.utalca.cl/simplesaml/saml2/idp/metadata.php'] = array (
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml2-logout.php/entra-sso',
    ),
  ),
  'AssertionConsumerService' => 
  array (
    0 => 
    array (
      'index' => 0,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
      'Location' => 'https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml2-acs.php/entra-sso',
    ),
    1 => 
    array (
      'index' => 1,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
      'Location' => 'https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml1-acs.php/entra-sso',
    ),
    2 => 
    array (
      'index' => 2,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
      'Location' => 'https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml2-acs.php/entra-sso',
    ),
    3 => 
    array (
      'index' => 3,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
      'Location' => 'https://sprovider.utalca.cl/simplesaml/module.php/saml/sp/saml1-acs.php/entra-sso/artifact',
    ),
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'plataforma@utalca.cl',
      'contactType' => 'technical',
      'givenName' => 'Infraestructura-DTI',
    ),
  ),
  'certData' => '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',
);