Métadonnées de SP SAML 2.0
Voici les métadonnées générées par SimpleSAMLphp. Vous pouvez les envoyer à vos partenaires de confiances pour construire une fédération d'identité.
Vous pouvez obtenir ces métadonnées XML depuis une URL dédiée:
https://sp.svasu.cloud/simplesaml/module.php/saml/sp/metadata.php/default-sp
Métadonnées
Au format XML de métadonnées SAML 2.0
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sp.svasu.cloud/">
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>MIIE9zCCA1+gAwIBAgIJANfxOmzIxOXzMA0GCSqGSIb3DQEBCwUAMIGRMQswCQYDVQQGEwJJTjELMAkGA1UECAwCVVAxDjAMBgNVBAcMBU5PSURBMQ8wDQYDVQQKDAZLU1RFQ0gxDTALBgNVBAsMBFRFQ0gxFzAVBgNVBAMMDkRpZ2l0YWwgU2t1bmtzMSwwKgYJKoZIhvcNAQkBFh1yYWplc2hzQGtub3dsZWRnZXN5bm9ueW1zLmNvbTAeFw0yMzEyMjYxMjI0MDFaFw0zMzEyMjUxMjI0MDFaMIGRMQswCQYDVQQGEwJJTjELMAkGA1UECAwCVVAxDjAMBgNVBAcMBU5PSURBMQ8wDQYDVQQKDAZLU1RFQ0gxDTALBgNVBAsMBFRFQ0gxFzAVBgNVBAMMDkRpZ2l0YWwgU2t1bmtzMSwwKgYJKoZIhvcNAQkBFh1yYWplc2hzQGtub3dsZWRnZXN5bm9ueW1zLmNvbTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKpiz6VOkaf+kgxKdTGwq2uuxpwgC8yuorm1goZOD3sA7HYRIbIlJqHK7/SZoDm4/5G9lKZ4Z4oJ8Xm3W03wqJk5wdyG3r6YUwvFhTQrCv2xm5biLL0hzYPy8vOvZ9jBsZ6urabA4d/DQpgYvxgu9SdquAyBpWZV/esdyXiIcdpoR7qc8qXo3924DoJj6CtYZaMvVCQrf7N1C3l7LzLBp1mTArpyepP9mnrwWYcnarcwDq3ek8z/OcoiaF/JDmeYo+YsqJiaYdvqxYUOnyyvt6L/1Ew6C4+Q2bufWZSBiPj1/tnnwbBZYevrdNls9JlDvUH488mRc5LJuo7Fdlk1i7hlFYQ7BXvojnhLnM1e8zmO94Z4iyvSVp+hz2dmCbLboZUT1E3PGOPZHURC7F6drEBu9x7gM1QUcL1ArUT75lBAfpL0NSRESU1nwx8/uANRGYMTyGL6IhXv4iHTDKTKPMGZOGN7bmBW0ZxB/yHTNRWL3A9WvEmFAu8M/XC8FNeenQIDAQABo1AwTjAdBgNVHQ4EFgQUnLefgDmVVs70g7Bex/P1JkGnO9AwHwYDVR0jBBgwFoAUnLefgDmVVs70g7Bex/P1JkGnO9AwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAYEApHLWbL96gnGZsBlvlY4O92x8TWH5G+z6H1LwpN+9lXb5jZbp6yMwmSuju6RGhb9PY0wDPQDcftwQaHJMTjghqlqtTltP0DryAab9sO0Y4KbCsocE74vDJ7/lPEv0AWNFp09dX6aRAI68iSFshfcPYwDlv8qg7mzY31f4RGPhriurKkqBtbQ70+faI7lyr4Zn8md2o32R5MfX1FTMT6tl7GxWYTvwgCI3emqbsN8U1yBf451niC/nMEtrxHOQ1DeNOXirroRy+c5Y8zEeMCp7RhchfnRTFh1WpdpYalT/Kcc885MXjNo4kuUDuMNE9a/bDeS2RLz9Cb8d8L1gI44yJSqxtLdaKMpH+aCldUq0DIi5IWgflFdYHEEUC5qVzInRhH4U7jsxCUdzE140dzQWvedDWW5IKuPK/Uvq9OOK8hKXhGX7iIEZRqQ14vwPEpbsAPgHRVXksSlISNfXY69RpWmKprf4roCbs/F5Dq1AG/x5WLwqQs4cLr59gPerFwt1</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.svasu.cloud/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.svasu.cloud/testsp" index="0"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.svasu.cloud/testsp" index="1"/>
<md:AttributeConsumingService index="0">
<md:ServiceName xml:lang="en">A service</md:ServiceName>
<md:ServiceName xml:lang="no">En tjeneste</md:ServiceName>
<md:RequestedAttribute Name="urn:oid:x.x.x.x" FriendlyName="attrname" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>Rajesh</md:GivenName>
<md:EmailAddress>mailto:rajeshs@knowledgesynonyms.com</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
Au format à plat SimpleSAMLphp - à utiliser si vous avez une installation SimpleSAMLphp sur la partie adverse :
$metadata['https://sp.svasu.cloud/'] = [
'SingleLogoutService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://sp.svasu.cloud/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp',
],
],
'AssertionConsumerService' => [
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
'Location' => 'https://sp.svasu.cloud/testsp',
],
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
'name' => [
'en' => 'A service',
'no' => 'En tjeneste',
],
'attributes' => [
'urn:oid:x.x.x.x',
],
'attributes.required' => [
'urn:oid:x.x.x.x',
],
'contacts' => [
[
'emailAddress' => 'rajeshs@knowledgesynonyms.com',
'contactType' => 'technical',
'givenName' => 'Rajesh',
],
],
'certData' => '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',
];