Metadate furnizor de identitate (IdP) SAML 2.0

Acestea sunt metadate generate de SimpleSAMLphp. Metadatele pot fi trimise către parteneri de încredere pentru a configura o federație de încredere.

Puteți accesa metadatele xml de la un URL dedicat:

https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/metadata.php

Metadate

În format metadate XML SAML 2.0:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>

În format fișier simplu SimpleSAMLphp - utilizați această variantă dacă în capătul celălalt folosiți o entitate SimpleSAMLphp:

$metadata['https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://sp-dev.ilc4clarin.ilc.cnr.it/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => 'MIIFCDCCA/CgAwIBAgISBMCN0XbI3feV1FvYiz4K7WSaMA0GCSqGSIb3DQEBCwUAMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTEwHhcNMjQxMDE2MDcwMzQ5WhcNMjUwMTE0MDcwMzQ4WjAnMSUwIwYDVQQDExxzcC1kZXYuaWxjNGNsYXJpbi5pbGMuY25yLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlwxp/TefiAnw0upMtYWTcegCsu5lOB77au73ZNWGclPTBCrAAiNJO0hBRwJccmW4broyd6TIGusaLvjFTj7y29dldZ5+QvwEo6wGLJWfhI4ebBMLpHpcD39n3WeZdfvJ5ZOks3xMTCuq2O1WNmGdvW2f/jCDA5/ic0lNPjj5E782dSAj6mnNRPw8EpkKZNyMKRjAtc1zXYa+T6gxf4BMyd/jhwStOuIMkdgJsxCZWwktYz7KnzWDMs9gAldbq6zMOnJZuWQ8lmqc5Q1l5cF2OuPeDKGgVhg1xpERW7Xmf8gMNvlJqm1C5Oi+K2eJ0fZEf2u3UC+rVhfkIG4qQmCMQIDAQABo4ICIDCCAhwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQWbole1WpxrOs1TfMQGW0E/x0tDTAfBgNVHSMEGDAWgBTFz0ak6vTDwHpslcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6Ly9yMTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEuaS5sZW5jci5vcmcvMCcGA1UdEQQgMB6CHHNwLWRldi5pbGM0Y2xhcmluLmlsYy5jbnIuaXQwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAZKUWWXsAAAEAwBIMEYCIQDOoFTmqI1eozEho4TdQMCbjvb9xkG2lGbKNnPnLLh9GgIhAORfK4/B22OUPR3HBe8+HxAR2+uf9Brbtp7B5EZyQEQ5AHUA4JKz/AwdyOdoNh/eYbmWTQpSeBmKctZyxLBNpW1vVAQAAAGSlFltzAAABAMARjBEAiB9MFu81IhmhbCE0Tvhv3jbWZGQIdeeZb9lqT9o68NK3wIgVda88qoE0wPe2ocWZC4GzXYlLVpAmuhraWQYG1AFFNUwDQYJKoZIhvcNAQELBQADggEBADrWZLIIGHUNZEmfEtuCAYeKv4uCLXghjcCSaEOQMGr+Na2PdoXUW/VtemC/L5s5v3DiV3D40keItHorakqdqk4oSoh0DfQi+CglOqL3LoClIzUh7L5Ygl8BwiTrGpXNxj20VqvmZLzKOKjwhD4Pi5D27xi+HNqSyOZlX3OkXY8cPXlaJpn4B8KxGOlEbutK+2W7rWu/gz4ozaAVj8dnwG10kQ1fh5sEXaFaKkG5NTqVYFfqrlCfHG4roa04hf7trZvQsm/KuZ+Tp+E/KGDi8HasXcMY1Iyl5mk/7YAyh9V8bDKHzswwMEVyT6FIl9fN0CsOY4ob05laN8MKWnFGl7c=',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
];

Certificate

Descărcați certificatele X509 ca fișiere PEM.

idp.crt