SAML 2.0 IdP Metaadatok

Ezeket a metaadatokat a SimpleSAMLphp generálta. Ezt a dokumentumot küldheti el föderációs partnerei számára.

A következő címről töltheti le a metaadatokat:

https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/metadata.php

Metaadatok

SAML 2.0 XML formátumban:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDaDCCAlCgAwIBAgIQMWDby57FxFadc+lhN44DsTANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlSVi1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MDkxMTEyMjE1MloXDTI3MDEwOTEyMjE1MlowFzEVMBMGA1UEAwwMcnYtdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGjyfHDqUufTvJxxf/ZQt4Jiql9yhWYCQQnQ4u8DsYQpwJA54cKqovTaH2bpc+h/W9rP+U+WIpqxlcHuXhYwzeNM1KRKCFSbdtuqIzfIAu1ksYIQHyWyLp/QmO5hzMicVtLksAqnITGOJ32921XHxxdF4qbpCCZsmPDvcHMvR4OmDV6EMmj/QlExbKEcIB8VI2NpumGsrl4ynKdc1rOBMR/b65yDAEZdqPXzcgW4bNQvTUOz/Q8eJQJZDGLu6P5jGis4xhjbQrazsJhqM9pEyVLNuuOZ4qEEG63+ryCcw1pVT4ZJFV9EROTqLEisTupG8TKn8nC4L08pcWLHQeu5wwIDAQABo4GiMIGfMAkGA1UdEwQCMAAwHQYDVR0OBBYEFP124oPPHKFF/CCO5iHK4fHgXhIoMFEGA1UdIwRKMEiAFOdxr37F7zjjbzm5WBAfuL8/zrXaoR6kHDAaMRgwFgYDVQQDDA9SVi1Ub29sIFRlc3QgQ0GCEBwkR2dW4m/eSsAO5Oxtg+swEwYDVR0lBAwwCgYIKwYBBQUHAwEwCwYDVR0PBAQDAgWgMA0GCSqGSIb3DQEBCwUAA4IBAQADZQKrgwvGKg39rAx3In0AUmByX63wU9njVTd8e8rYFbj7YbABVaVZ7yrrLtsEjSVy7lmigGOj/9nonMqKrefzV2uD4qhBVbXd5uLrqf17o6yKFnGfGYS1V/4C02X9e1lQZIayOudV8lF6dlkZVYnkbmHbr4q/ec+OPC+zZJa4PVuu3mMmzbAnFrymU3s3uzC/JngxqUaFIwlgoiDcXA4gunPPwLRk6cDgP2sCYUIp0gcRMBnA9ajT8hXm93SjPoLyqNaV/suuOEvs40JFGpW0u4d3GOGDdPppB5ofBXzn2ak9UUYtkaevGdBp3SIfnqTqo+Tq/Yr0RZEq2ou05uOb</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Kohnert</md:SurName>
    <md:EmailAddress>mailto:jan.kohnert@n4.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp fájl formátumban - akkor használható, ha a másik oldalon SimpleSAMLphp van:

$metadata['https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://rv-tool-sso.testing.ingress-team-elster.n4group.eu/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => 'MIIDaDCCAlCgAwIBAgIQMWDby57FxFadc+lhN44DsTANBgkqhkiG9w0BAQsFADAkMSIwIAYDVQQDDBlSVi1Ub29sIFRlc3QgSW50ZXJtZWRpYXRlMB4XDTI2MDkxMTEyMjE1MloXDTI3MDEwOTEyMjE1MlowFzEVMBMGA1UEAwwMcnYtdG9vbC1zYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGjyfHDqUufTvJxxf/ZQt4Jiql9yhWYCQQnQ4u8DsYQpwJA54cKqovTaH2bpc+h/W9rP+U+WIpqxlcHuXhYwzeNM1KRKCFSbdtuqIzfIAu1ksYIQHyWyLp/QmO5hzMicVtLksAqnITGOJ32921XHxxdF4qbpCCZsmPDvcHMvR4OmDV6EMmj/QlExbKEcIB8VI2NpumGsrl4ynKdc1rOBMR/b65yDAEZdqPXzcgW4bNQvTUOz/Q8eJQJZDGLu6P5jGis4xhjbQrazsJhqM9pEyVLNuuOZ4qEEG63+ryCcw1pVT4ZJFV9EROTqLEisTupG8TKn8nC4L08pcWLHQeu5wwIDAQABo4GiMIGfMAkGA1UdEwQCMAAwHQYDVR0OBBYEFP124oPPHKFF/CCO5iHK4fHgXhIoMFEGA1UdIwRKMEiAFOdxr37F7zjjbzm5WBAfuL8/zrXaoR6kHDAaMRgwFgYDVQQDDA9SVi1Ub29sIFRlc3QgQ0GCEBwkR2dW4m/eSsAO5Oxtg+swEwYDVR0lBAwwCgYIKwYBBQUHAwEwCwYDVR0PBAQDAgWgMA0GCSqGSIb3DQEBCwUAA4IBAQADZQKrgwvGKg39rAx3In0AUmByX63wU9njVTd8e8rYFbj7YbABVaVZ7yrrLtsEjSVy7lmigGOj/9nonMqKrefzV2uD4qhBVbXd5uLrqf17o6yKFnGfGYS1V/4C02X9e1lQZIayOudV8lF6dlkZVYnkbmHbr4q/ec+OPC+zZJa4PVuu3mMmzbAnFrymU3s3uzC/JngxqUaFIwlgoiDcXA4gunPPwLRk6cDgP2sCYUIp0gcRMBnA9ajT8hXm93SjPoLyqNaV/suuOEvs40JFGpW0u4d3GOGDdPppB5ofBXzn2ak9UUYtkaevGdBp3SIfnqTqo+Tq/Yr0RZEq2ou05uOb',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'jan.kohnert@n4.de',
            'contactType' => 'technical',
            'givenName' => 'Jan',
            'surName' => 'Kohnert',
        ],
    ],
];

Tanúsítványok.

PEM formátumú X509 tanúsítvány letöltése.

idp.crt