SAML 2.0 IdP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">umlub.pl</shibmd:Scope>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">student.umlub.pl</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Pionier Consortium</mdui:DisplayName>
<mdui:DisplayName xml:lang="pl">Konsorcjum Pionier</mdui:DisplayName>
<mdui:Description xml:lang="en">Pionier Consortium Identity Provider</mdui:Description>
<mdui:Description xml:lang="pl">Dostawca Tożsamości Konsorcjum Pionier</mdui:Description>
<mdui:Logo width="379" height="96">https://umlub.pl/szablony/umlub/images/logo_pl.png</mdui:Logo>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.umlub.pl/simplesaml/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.umlub.pl/simplesaml/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="pl">Uniwersytet Medyczny w Lublinie</md:OrganizationName>
<md:OrganizationName xml:lang="en">Medical University of Lublin</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="pl">Uniwersytet Medyczny w Lublinie</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="en">Medical University of Lublin</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="pl">https://www.umlub.pl/</md:OrganizationURL>
<md:OrganizationURL xml:lang="en">https://www.umlub.pl/en/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Administrator</md:GivenName>
<md:EmailAddress>mailto:informatyka@umlub.pl</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php'] = [
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://idp.umlub.pl/simplesaml/saml2/idp/metadata.php',
'SingleSignOnService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp.umlub.pl/simplesaml/saml2/idp/SSOService.php',
],
],
'SingleLogoutService' => [
[
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://idp.umlub.pl/simplesaml/saml2/idp/SingleLogoutService.php',
],
],
'certData' => 'MIIEJzCCAw+gAwIBAgIUchJLymPSK7gCuUR6k94rSSNXyGQwDQYJKoZIhvcNAQELBQAwgaIxCzAJBgNVBAYTAlBMMRIwEAYDVQQIDAlsdWJlbHNraWUxDzANBgNVBAcMBkx1YmxpbjElMCMGA1UECgwcTWVkaWNhbCBVbml2ZXJzaXR5IG9mIEx1YmxpbjELMAkGA1UECwwCSVQxFTATBgNVBAMMDGlkcC51bWx1Yi5wbDEjMCEGCSqGSIb3DQEJARYUaW5mb3JtYXR5a2FAdW1sdWIucGwwHhcNMjEwNDA5MTgwMTM1WhcNMzEwNDA5MTgwMTM1WjCBojELMAkGA1UEBhMCUEwxEjAQBgNVBAgMCWx1YmVsc2tpZTEPMA0GA1UEBwwGTHVibGluMSUwIwYDVQQKDBxNZWRpY2FsIFVuaXZlcnNpdHkgb2YgTHVibGluMQswCQYDVQQLDAJJVDEVMBMGA1UEAwwMaWRwLnVtbHViLnBsMSMwIQYJKoZIhvcNAQkBFhRpbmZvcm1hdHlrYUB1bWx1Yi5wbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ6NI/zYaGr4FteLw+X2lWVyC2gR6jTpgz/cTGO8zaReFC+Na2sVtJA97IeXufNKv3OOg1aMqhMPJI3MjRp3TeiWNZ1OCJsf9ep9zreCfXrxBzjywMLmgPC5vnDBL1vfLTUZ42Vg0hRzfFiEt7sJRvuMqaSVdd6imri4bS7Qk5Kgt9mh5ex/1dUpFYhfWLqA2roWmJTPxQr146fn82GK0nFRtSssKRIUi7zk2u9XaE3z0mnFAEhB675btzi0CH8fzZMdg4YgF9OUO6sIxLRPer6TR2izVj4X/tTBvRvNmRYP/A4WNtiUFvfnSGNtwdEyQMuBLtqjbSiiJwD5+K9CRcCAwEAAaNTMFEwHQYDVR0OBBYEFGTJJJE0g91VvOId9YJ2Nvr1KTT/MB8GA1UdIwQYMBaAFGTJJJE0g91VvOId9YJ2Nvr1KTT/MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAAH3fkTuYni1CDIvOfIgfCWb11z1ZHKOidSsqPs2gINELaD1ERAQqK/UpQel5+depqn6AvqUg3nojGIN2NRfcJbBTgMl5PyS6XZJchNlDkQu1kNbIXPG7s1G0KDEomC1phZyPLMr2lZXxVCNeK4AdMhiI913nTyRFmTRVePS4mFMdrT9BSP828aaA9IzTEes6nn2Te5is5kO8VjTdD82lszaTYFSvuHcMjgp1MNGwOd5IJ+0dInyvg50u8MJrvDYv4th2L1GHs7Vc8RKL0X6tuhLOPulVcMaAIaxFvqXDVDAGtYwEMKd/ytTuO+JYwati4TcNKoZ43pxYdZFj88mn8E=',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
'OrganizationName' => [
'pl' => 'Uniwersytet Medyczny w Lublinie',
'en' => 'Medical University of Lublin',
],
'OrganizationDisplayName' => [
'pl' => 'Uniwersytet Medyczny w Lublinie',
'en' => 'Medical University of Lublin',
],
'OrganizationURL' => [
'pl' => 'https://www.umlub.pl/',
'en' => 'https://www.umlub.pl/en/',
],
'scope' => [
'umlub.pl',
'student.umlub.pl',
],
'UIInfo' => [
'DisplayName' => [
'en' => 'Pionier Consortium',
'pl' => 'Konsorcjum Pionier',
],
'Description' => [
'en' => 'Pionier Consortium Identity Provider',
'pl' => 'Dostawca Tożsamości Konsorcjum Pionier',
],
'Logo' => [
[
'url' => 'https://umlub.pl/szablony/umlub/images/logo_pl.png',
'height' => 96,
'width' => 379,
],
],
],
'contacts' => [
[
'emailAddress' => 'informatyka@umlub.pl',
'contactType' => 'technical',
'givenName' => 'Administrator',
],
],
];
Certificates
Download the X509 certificates as PEM-encoded files.