Metadados SAML 2.0 IdP

De seguida pode encontrar os metadados gerados pelo SimpleSAMLphp. Pode enviar este documento de metadados aos seus parceiros para configurar uma federação.

Pode obter os metadados em XML num URL dedicado:

https://login4sure.com/simplesaml/saml2/idp/metadata.php

Metadados

Metadados no formato XML SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://login4sure.com/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login4sure.com/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login4sure.com/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:k.post@hubbase.nl</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Metadados no formato ficheiro de configuração do SimpleSAMLphp. Use esta alternativa se usar uma entidade SimpleSAMLphp no outro extremo:

$metadata['https://login4sure.com/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://login4sure.com/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://login4sure.com/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://login4sure.com/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'k.post@hubbase.nl',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
];

Certificates

Download the X509 certificates as PEM-encoded files.

idp.crt