SAML 2.0 IdP Metadata
SimpleSAMLphp har har genererat följande metadata. För att sätta upp en betrodd federation kan du skicka metadata till de parter du har förtroende för.
Du kan hämta metadata i XML-format på dedicerad URL:
https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php
Metadata
I SAML 2.0 Metadata XML-format:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">umlub.pl</shibmd:Scope>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">student.umlub.pl</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Pionier Consortium</mdui:DisplayName>
<mdui:DisplayName xml:lang="pl">Konsorcjum Pionier</mdui:DisplayName>
<mdui:Description xml:lang="en">Pionier Consortium Identity Provider</mdui:Description>
<mdui:Description xml:lang="pl">Dostawca Tożsamości Konsorcjum Pionier</mdui:Description>
<mdui:Logo width="379" height="96">https://umlub.pl/szablony/umlub/images/logo_pl.png</mdui:Logo>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>MIIEJzCCAw+gAwIBAgIUchJLymPSK7gCuUR6k94rSSNXyGQwDQYJKoZIhvcNAQELBQAwgaIxCzAJBgNVBAYTAlBMMRIwEAYDVQQIDAlsdWJlbHNraWUxDzANBgNVBAcMBkx1YmxpbjElMCMGA1UECgwcTWVkaWNhbCBVbml2ZXJzaXR5IG9mIEx1YmxpbjELMAkGA1UECwwCSVQxFTATBgNVBAMMDGlkcC51bWx1Yi5wbDEjMCEGCSqGSIb3DQEJARYUaW5mb3JtYXR5a2FAdW1sdWIucGwwHhcNMjEwNDA5MTgwMTM1WhcNMzEwNDA5MTgwMTM1WjCBojELMAkGA1UEBhMCUEwxEjAQBgNVBAgMCWx1YmVsc2tpZTEPMA0GA1UEBwwGTHVibGluMSUwIwYDVQQKDBxNZWRpY2FsIFVuaXZlcnNpdHkgb2YgTHVibGluMQswCQYDVQQLDAJJVDEVMBMGA1UEAwwMaWRwLnVtbHViLnBsMSMwIQYJKoZIhvcNAQkBFhRpbmZvcm1hdHlrYUB1bWx1Yi5wbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ6NI/zYaGr4FteLw+X2lWVyC2gR6jTpgz/cTGO8zaReFC+Na2sVtJA97IeXufNKv3OOg1aMqhMPJI3MjRp3TeiWNZ1OCJsf9ep9zreCfXrxBzjywMLmgPC5vnDBL1vfLTUZ42Vg0hRzfFiEt7sJRvuMqaSVdd6imri4bS7Qk5Kgt9mh5ex/1dUpFYhfWLqA2roWmJTPxQr146fn82GK0nFRtSssKRIUi7zk2u9XaE3z0mnFAEhB675btzi0CH8fzZMdg4YgF9OUO6sIxLRPer6TR2izVj4X/tTBvRvNmRYP/A4WNtiUFvfnSGNtwdEyQMuBLtqjbSiiJwD5+K9CRcCAwEAAaNTMFEwHQYDVR0OBBYEFGTJJJE0g91VvOId9YJ2Nvr1KTT/MB8GA1UdIwQYMBaAFGTJJJE0g91VvOId9YJ2Nvr1KTT/MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAAH3fkTuYni1CDIvOfIgfCWb11z1ZHKOidSsqPs2gINELaD1ERAQqK/UpQel5+depqn6AvqUg3nojGIN2NRfcJbBTgMl5PyS6XZJchNlDkQu1kNbIXPG7s1G0KDEomC1phZyPLMr2lZXxVCNeK4AdMhiI913nTyRFmTRVePS4mFMdrT9BSP828aaA9IzTEes6nn2Te5is5kO8VjTdD82lszaTYFSvuHcMjgp1MNGwOd5IJ+0dInyvg50u8MJrvDYv4th2L1GHs7Vc8RKL0X6tuhLOPulVcMaAIaxFvqXDVDAGtYwEMKd/ytTuO+JYwati4TcNKoZ43pxYdZFj88mn8E=</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.umlub.pl/simplesaml/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.umlub.pl/simplesaml/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="pl">Uniwersytet Medyczny w Lublinie</md:OrganizationName>
<md:OrganizationName xml:lang="en">Medical University of Lublin</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="pl">Uniwersytet Medyczny w Lublinie</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="en">Medical University of Lublin</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="pl">https://www.umlub.pl/</md:OrganizationURL>
<md:OrganizationURL xml:lang="en">https://www.umlub.pl/en/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Administrator</md:GivenName>
<md:EmailAddress>mailto:informatyka@umlub.pl</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
I filformatet för simpleSAML, använd detta detta format om SimpleSAMLphp används i mottagende sida:
$metadata['https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php'] = [
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php',
'SingleSignOnService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp.umlub.pl/simplesaml/saml2/idp/SSOService.php',
],
],
'SingleLogoutService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp.umlub.pl/simplesaml/saml2/idp/SingleLogoutService.php',
],
],
'certData' => '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',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
'OrganizationName' => [
'pl' => 'Uniwersytet Medyczny w Lublinie',
'en' => 'Medical University of Lublin',
],
'OrganizationDisplayName' => [
'pl' => 'Uniwersytet Medyczny w Lublinie',
'en' => 'Medical University of Lublin',
],
'OrganizationURL' => [
'pl' => 'https://www.umlub.pl/',
'en' => 'https://www.umlub.pl/en/',
],
'scope' => [
'umlub.pl',
'student.umlub.pl',
],
'UIInfo' => [
'DisplayName' => [
'en' => 'Pionier Consortium',
'pl' => 'Konsorcjum Pionier',
],
'Description' => [
'en' => 'Pionier Consortium Identity Provider',
'pl' => 'Dostawca Tożsamości Konsorcjum Pionier',
],
'Logo' => [
[
'url' => 'https://umlub.pl/szablony/umlub/images/logo_pl.png',
'height' => 96,
'width' => 379,
],
],
],
'contacts' => [
[
'emailAddress' => 'informatyka@umlub.pl',
'contactType' => 'technical',
'givenName' => 'Administrator',
],
],
];
Certifikat
Hämta X509-certifikaten som PEM-kodade filer.