Metadati SAML 2.0 IdP

Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.

Si possono ottenere i metadati in XML dall'URL dedicata:

https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/metadata.php

Metadati

Metadati SAML 2.0 in formato XML:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDXTCCAkWgAwIBAgIJAKT0hqafrZynMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMTUwNTA3MDMxODQyWhcNMjUwNTA2MDMxODQyWjBFMQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QLjerH3CjEPBmQWy4kXYNLmTLsJzZ8A9b1DZKSzeeeEgiWJnkD/pzLx4DMkttgzsGY6X/4hEl6RgH7pX7TEd4Wg/M4OmnM2XuWCnGCXuynzsrwGDTaZ7K/JWrqkcYdmweqBcNfOGGeIFQuhshCJq7sYrggRj/kG6Iov8kdyZgD+LAbds+DvIaRmyKIx/0/1K5hOT8Mw21Odir5lcE0vyxU4wryj+jzYWsk9jr7jVrWZ95QknwEiMh3EYUKw/YVpe1hkDIRd67w0a+0GSlAP4vr9Bbkh2Xk4gSyu+i65KAZYoXbZiBuTqsCATFbTWtrs7Kmfo7Ayh7Jy3Bk89NwpDwIDAQABo1AwTjAdBgNVHQ4EFgQUraup3LwWZH+zHWpivuRK04saBD8wHwYDVR0jBBgwFoAUraup3LwWZH+zHWpivuRK04saBD8wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEARaPKbCGR8s8bI3LQdqsfkCQ4sZChu7n14ctj97hKqTDi0NobzOF2/z3ruJnPLjCipPUQRXLrUaqwJlyLDWpQ/TXJQ1lRQh3XnMwwLWTanERLhPI/Ynuqwm3unwAG+zeIr728poY7shSJeDw1GzXY3B+4UKasCPFXJHmd0Xy9xpryv7ijgUU3quFg0hRe5AgCYW07Bq2Z0OxzFcEAQv8G5aN/SlF4vRhdpOv8ONg6LDNXKN1XzXdtrXk8JJxyP9QjOUgJooJtzMU2bqDBa1Lev5HsjMpNnUiwY4v73xLsDcJct64wKaj34oTO2eR6am1RPACnCwCRytP+SAw6Ihkb2A==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:bruno.manzoni@manzoni.biz</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp

$metadata['https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://sso.ubiquitous-network.ch/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => 'MIIDXTCCAkWgAwIBAgIJAKT0hqafrZynMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMTUwNTA3MDMxODQyWhcNMjUwNTA2MDMxODQyWjBFMQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QLjerH3CjEPBmQWy4kXYNLmTLsJzZ8A9b1DZKSzeeeEgiWJnkD/pzLx4DMkttgzsGY6X/4hEl6RgH7pX7TEd4Wg/M4OmnM2XuWCnGCXuynzsrwGDTaZ7K/JWrqkcYdmweqBcNfOGGeIFQuhshCJq7sYrggRj/kG6Iov8kdyZgD+LAbds+DvIaRmyKIx/0/1K5hOT8Mw21Odir5lcE0vyxU4wryj+jzYWsk9jr7jVrWZ95QknwEiMh3EYUKw/YVpe1hkDIRd67w0a+0GSlAP4vr9Bbkh2Xk4gSyu+i65KAZYoXbZiBuTqsCATFbTWtrs7Kmfo7Ayh7Jy3Bk89NwpDwIDAQABo1AwTjAdBgNVHQ4EFgQUraup3LwWZH+zHWpivuRK04saBD8wHwYDVR0jBBgwFoAUraup3LwWZH+zHWpivuRK04saBD8wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEARaPKbCGR8s8bI3LQdqsfkCQ4sZChu7n14ctj97hKqTDi0NobzOF2/z3ruJnPLjCipPUQRXLrUaqwJlyLDWpQ/TXJQ1lRQh3XnMwwLWTanERLhPI/Ynuqwm3unwAG+zeIr728poY7shSJeDw1GzXY3B+4UKasCPFXJHmd0Xy9xpryv7ijgUU3quFg0hRe5AgCYW07Bq2Z0OxzFcEAQv8G5aN/SlF4vRhdpOv8ONg6LDNXKN1XzXdtrXk8JJxyP9QjOUgJooJtzMU2bqDBa1Lev5HsjMpNnUiwY4v73xLsDcJct64wKaj34oTO2eR6am1RPACnCwCRytP+SAw6Ihkb2A==',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'bruno.manzoni@manzoni.biz',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
];

Certificati

Scarica i certificati X509 come file PEM-encoded

idp.crt