SAML 2.0 IdP Metapodatki

Tu so metapodatki, ki jih je generiral SimpleSAMLphp. Dokument lahko pošljete zaupanja vrednim partnerjem, s katerimi boste ustvarili federacijo.

XML metapodatki se nahajajo na tem naslovu:

https://acceso.unach.mx/simplesamlphp/saml2/idp/metadata.php

Metapodatki

V SAML 2.0 Metapodatkovni XML format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://acceso.unach.mx/idp">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFDjCCA/agAwIBAgISBVoj2ReHZgXlkBPZyg05JLRZMA0GCSqGSIb3DQEBCwUAMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTIwHhcNMjYwNDA4MTgwODMyWhcNMjYwNzA3MTgwODMxWjAaMRgwFgYDVQQDEw9hY2Nlc28udW5hY2gubXgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4Je+5wzrcr6GGJ5P2hBgBBLAEVpogZg4pqShCMeW3q+t25qG/wef+X4Idi6WR3vTKfaGsgFTv4FoEgckdS+WrACE6LdOkhHAwcD1OAkuQYSKswzTHzCgK8nve0wYasWLzm3KYZQnC7alOt97FJwxAveuQKaAEramUAWxiXq7XXwvqq8/SsnI76BVy0jVc5EqTf0R4oCNsp6NXDc60X8CkKUVVzYIPVyNpo63B9lVtGi/MQBc3sZOdPghfTbTOp9TH5eVXfZwdBqv69MhovqKa9AF8TRK9cvPPFFS0cMekIw66KSTi9Y9DsE4OlACAPThkwN9KqQCSkIhmrz2GiddAgMBAAGjggIzMIICLzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqH8NXKgBQGPfGOFSy8YFNhqHrrIwHwYDVR0jBBgwFoAUALUp8i2ObzHom0yteD763OkM0dIwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEyLmkubGVuY3Iub3JnLzAvBgNVHREEKDAmgg9hY2Nlc28udW5hY2gubXiCE3d3dy5hY2Nlc28udW5hY2gubXgwEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy85MC5jcmwwggENBgorBgEEAdZ5AgQCBIH+BIH7APkAdgDIo8R/x7OtuTVrAT9qehJt4zpOQ6XGRvmXrTl1mR3PmgAAAZ1ufajIAAAEAwBHMEUCIQDEc4qxNNYel7k7Tg1rL/ch9jFTC19o2HwaUy6v2S6EHwIgMyI6e8FkHUOfJBVBVwbsjkKkwEPJHrucibgoWCc0FFYAfwAai51rD/6/gbR5OcbSMQqG1tEC1PBG4hgsneNfXiYl7wAAAZ1ufaqtAAgAAAUAB6MAngQDAEgwRgIhAPN3qxpSA2g1Z7apx6xDpvY6b1j/f+ySeJD5aZ1+4SQbAiEAg0RA/QJ35w4NdmNXQCXhldbee2r/iuBBwfUiwV9PtXYwDQYJKoZIhvcNAQELBQADggEBAFIKw47bDlGALuZ5LAuJpQN4oeD0o9TuKUXYKcfAJ5f6UNy6nhwtWZC5cTFV1wahnIkrUJtjA9Kpe7N4pnsu4r5GkGVONqH3UVJ4Yu7XQuNF5eoIDFn9Yv/ie4vTQnkmrGak9PUDRthooP5C61dwhlaeO9rDk3hS5PN2WgEv13k9RkwED2989Vb7t2EEA5CljyCh13dMGCOnjlyOERthLe5rfxZlGSbck6LPRxHPc8u2oykWiyJO8QsOP850pF5juuN5g919WOkLy2+RbodiMycr8k9ckoXGeXi0ndQyKSEPF0giqjGkyKA6/jomIBp7fW3mckzbFJlMFig3JDfu7iY=</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFDjCCA/agAwIBAgISBVoj2ReHZgXlkBPZyg05JLRZMA0GCSqGSIb3DQEBCwUAMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNSMTIwHhcNMjYwNDA4MTgwODMyWhcNMjYwNzA3MTgwODMxWjAaMRgwFgYDVQQDEw9hY2Nlc28udW5hY2gubXgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4Je+5wzrcr6GGJ5P2hBgBBLAEVpogZg4pqShCMeW3q+t25qG/wef+X4Idi6WR3vTKfaGsgFTv4FoEgckdS+WrACE6LdOkhHAwcD1OAkuQYSKswzTHzCgK8nve0wYasWLzm3KYZQnC7alOt97FJwxAveuQKaAEramUAWxiXq7XXwvqq8/SsnI76BVy0jVc5EqTf0R4oCNsp6NXDc60X8CkKUVVzYIPVyNpo63B9lVtGi/MQBc3sZOdPghfTbTOp9TH5eVXfZwdBqv69MhovqKa9AF8TRK9cvPPFFS0cMekIw66KSTi9Y9DsE4OlACAPThkwN9KqQCSkIhmrz2GiddAgMBAAGjggIzMIICLzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqH8NXKgBQGPfGOFSy8YFNhqHrrIwHwYDVR0jBBgwFoAUALUp8i2ObzHom0yteD763OkM0dIwMwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEyLmkubGVuY3Iub3JnLzAvBgNVHREEKDAmgg9hY2Nlc28udW5hY2gubXiCE3d3dy5hY2Nlc28udW5hY2gubXgwEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy85MC5jcmwwggENBgorBgEEAdZ5AgQCBIH+BIH7APkAdgDIo8R/x7OtuTVrAT9qehJt4zpOQ6XGRvmXrTl1mR3PmgAAAZ1ufajIAAAEAwBHMEUCIQDEc4qxNNYel7k7Tg1rL/ch9jFTC19o2HwaUy6v2S6EHwIgMyI6e8FkHUOfJBVBVwbsjkKkwEPJHrucibgoWCc0FFYAfwAai51rD/6/gbR5OcbSMQqG1tEC1PBG4hgsneNfXiYl7wAAAZ1ufaqtAAgAAAUAB6MAngQDAEgwRgIhAPN3qxpSA2g1Z7apx6xDpvY6b1j/f+ySeJD5aZ1+4SQbAiEAg0RA/QJ35w4NdmNXQCXhldbee2r/iuBBwfUiwV9PtXYwDQYJKoZIhvcNAQELBQADggEBAFIKw47bDlGALuZ5LAuJpQN4oeD0o9TuKUXYKcfAJ5f6UNy6nhwtWZC5cTFV1wahnIkrUJtjA9Kpe7N4pnsu4r5GkGVONqH3UVJ4Yu7XQuNF5eoIDFn9Yv/ie4vTQnkmrGak9PUDRthooP5C61dwhlaeO9rDk3hS5PN2WgEv13k9RkwED2989Vb7t2EEA5CljyCh13dMGCOnjlyOERthLe5rfxZlGSbck6LPRxHPc8u2oykWiyJO8QsOP850pF5juuN5g919WOkLy2+RbodiMycr8k9ckoXGeXi0ndQyKSEPF0giqjGkyKA6/jomIBp7fW3mckzbFJlMFig3JDfu7iY=</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://acceso.unach.mx/simplesamlphp/saml2/idp/ArtifactResolutionService.php" index="0"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://acceso.unach.mx/simplesamlphp/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://acceso.unach.mx/simplesamlphp/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Mesa de ayuda UNACH</md:GivenName>
    <md:EmailAddress>mesadeayuda@unach.mx</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

V SimpleSAMLphp "flat file" formatu - ta format uporabite, če uporabljate SimpleSAMLphp entiteto na drugi strani:

$metadata['https://acceso.unach.mx/idp'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://acceso.unach.mx/idp',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://acceso.unach.mx/simplesamlphp/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://acceso.unach.mx/simplesamlphp/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'ArtifactResolutionService' => 
  array (
    0 => 
    array (
      'index' => 0,
      'Location' => 'https://acceso.unach.mx/simplesamlphp/saml2/idp/ArtifactResolutionService.php',
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP',
    ),
  ),
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'mesadeayuda@unach.mx',
      'contactType' => 'technical',
      'givenName' => 'Mesa de ayuda UNACH',
    ),
  ),
);

Digitalna potrdila

Prenesi X509 digitalno potrdilo v PEM datoteki.

idp.crt