Shib 1.3 IdP Metadata

Her er metadata generert av SimpleSAMLphp for deg. Du kan senda dette metadata-dokumentet til dine partnarar, slik at de kan setja opp ein tillitsføderasjon.

Du kan få metadata i XML på ein URL:

https://idp.ucv.ro/simplesaml/shib13/idp/metadata.php?output=xml

Metadata

På SAML 2.0 metadata XML-format

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.ucv.ro/simplesaml/shib13/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.ucv.ro/simplesaml/shib13/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:it@ucv.ro</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

På flat fil for SimpleSAMLphp. Bruk denne dersom du bruker SimpleSAMLphp på andre sida:

$metadata['https://idp.ucv.ro/simplesaml/shib13/idp/metadata.php'] = array (
  'metadata-set' => 'shib13-idp-remote',
  'entityid' => 'https://idp.ucv.ro/simplesaml/shib13/idp/metadata.php',
  'SingleSignOnService' => 'https://idp.ucv.ro/simplesaml/shib13/idp/SSOService.php',
  'certData' => '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',
  'NameIDFormat' => 'urn:mace:shibboleth:1.0:nameIdentifier',
);