Metadati SAML 2.0 SP

Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.

Si possono ottenere i metadati in XML dall'URL dedicata:

https://samlsp.revize.com/simplesaml/module.php/saml/sp/metadata.php/revize

Metadati

Metadati SAML 2.0 in formato XML:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="revize_user2">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml2-logout.php/revize"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml2-acs.php/revize" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml1-acs.php/revize" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml2-acs.php/revize" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml1-acs.php/revize/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>mailto:ray@revize.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp

$metadata['revize_user2'] = [
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml2-logout.php/revize',
        ],
    ],
    'AssertionConsumerService' => [
        [
            'index' => 0,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
            'Location' => 'https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml2-acs.php/revize',
        ],
        [
            'index' => 1,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
            'Location' => 'https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml1-acs.php/revize',
        ],
        [
            'index' => 2,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
            'Location' => 'https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml2-acs.php/revize',
        ],
        [
            'index' => 3,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
            'Location' => 'https://samlsp.revize.com/simplesaml/module.php/saml/sp/saml1-acs.php/revize/artifact',
        ],
    ],
    'contacts' => [
        [
            'emailAddress' => 'ray@revize.com',
            'contactType' => 'technical',
            'givenName' => 'Administrator',
        ],
    ],
    'certData' => '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',
    'saml20.sign.assertion' => true,
    'redirect.validate' => true,
];