Shib 1.3 IdP metaandmed

Need on SimpleSAMLphp poolt sulle genereeritud metaandmed. Võid saata need metaandmed usaldatavatele partneritele usaldatava föderatsiooni loomiseks.

Metaandmete XML-i on võimalik saada spetsiaalselt aadressilt:

https://idp.onedoesnotsimplyhide.com/simplesaml/shib13/idp/metadata.php?output=xml

Metaandmed

SAML 2.0 metaandmete XML-vormingus:

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.onedoesnotsimplyhide.com/simplesaml/shib13/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.onedoesnotsimplyhide.com/simplesaml/shib13/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:na@example.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp formaadis: kasuta seda siis, kui ka teine pool kasutab SimpleSAMLphp-d:

$metadata['https://idp.onedoesnotsimplyhide.com/simplesaml/shib13/idp/metadata.php'] = array (
  'metadata-set' => 'shib13-idp-remote',
  'entityid' => 'https://idp.onedoesnotsimplyhide.com/simplesaml/shib13/idp/metadata.php',
  'SingleSignOnService' => 'https://idp.onedoesnotsimplyhide.com/simplesaml/shib13/idp/SSOService.php',
  'certData' => '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',
  'NameIDFormat' => 'urn:mace:shibboleth:1.0:nameIdentifier',
);