SAML 2.0 IdP Metadata
Dit is de metadata die automatisch is gegenereerd door SimpleSAMLphp. U kunt deze metadata uitwisselen met uw federatiepartners.
U kunt deze directe URL gebruiken om de metadata XML op te vragen:
https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML formaat:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/metadata.php">
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>MIIEMDCCApigAwIBAgIJAMeGM3WBRZXRMA0GCSqGSIb3DQEBCwUAMC0xCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJGTDERMA8GA1UECgwISW5jZW50Y28wHhcNMTkwNjEyMjEyMTMwWhcNMjkwNjExMjEyMTMwWjAtMQswCQYDVQQGEwJVUzELMAkGA1UECAwCRkwxETAPBgNVBAoMCEluY2VudGNvMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA30ox/EBZQmUBgUlEHJ3pZucZDi5P7hsqi1Ie31tAnyKokTj4KIv2OxNtYME6XfBRQp2UYI4qxnrBVlsGOHxk1VX0Sy3kYecI6TpExbv+nkqCCnhB5ma6/qTkO4Mua58PXVTaK6/VF0TLGliT1Y0zhAX4TOBlgLeWn4rnuqOPAx41dePhMjMoZhH4mEqvtMRea/LCY4K4XbIqmxbrEG8SEy2EZ4d2IDtYfwzMgVKxnYdxiN4Zr93RLiK/U/T6D63s2oIorXVb0KFeZfxOi5Fv/hcxrxGNmhMuV4wiFizmA/Ny92XRQ1w5hYBYonMqNmKWY5bbBBXQyJNMaLKDVeT5fGYfu98NdOUArD90ZBIsekTEz3JOTdQkQeR0jL8p1AprIUPIGopKvBmF8XgE+m+BVYKwalBWqf18a4wVL44ecq632/3syR7MK664Qa0Z4nMjhijuOO3iq+6CIfgfPSQxB7QAx+x9oEarpk4Qc02cyNytOVu7b75eLCY1l+o+Ua0jAgMBAAGjUzBRMB0GA1UdDgQWBBQIyOS4XORO4coJ+03gP0akF6rXRDAfBgNVHSMEGDAWgBQIyOS4XORO4coJ+03gP0akF6rXRDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBgQBpgaXKriezIzf0XKXNpcwx935LhOUSK0vcigVkVROTNyiS9DrwvxKkrgu7Fi6XsaUh3xhVDm24vTUm6KK5JGrTqYdMkJuyxZ5fs5ZJEruMrSBAqemgzTHlBM0x3EIc2ezjNoRNBklAoPHV+GaeUjMXmtvTAgmLi8Gt3XG7dL6GPzc3XSae/FAUD0aq4Yeu+NZdiwmLAULk4huvQc5glNq2jFy5CXBsMETUnR0EhcaL6QXLiulIaU5I+IZKvSitXZ+/ddHqCPC1solEiSjeaTOw8HwpCkOI5or1s6+MN7VkALx9YTFe0adYtD00fcDx2zvgpGBOp5b+Abp2p9CFcmSbkim6M9ZHWMte/aiMtwoLaJysZPEe/GjSlriYIhIkzhJ5RswLq2+xggQswf+QjpCAWWl2x7DSUIh8zMx/T5Z5IwdCSHih0p4tWltQ68AmEzq1qVFyanygpiHq4BRN9MxkCPjSSs4NEfNRcJPW5gnT//iA3Htu8kqDP8c5/X2AAII=</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/SingleLogoutService.php"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:persistent</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/SSOService.php"/>
</md:IDPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>Administrator</md:GivenName>
<md:EmailAddress>jmoore@incentco.com</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
In SimpleSAMLphp flat file formaat - gebruik dit wanneer uw federatiepartner ook SimpleSAMLphp gebruikt
$metadata['https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/metadata.php'] = array (
'metadata-set' => 'saml20-idp-remote',
'entityid' => 'https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/metadata.php',
'SingleSignOnService' =>
array (
0 =>
array (
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/SSOService.php',
),
),
'SingleLogoutService' =>
array (
0 =>
array (
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://sso-identity-provider.incentco.net/simplesaml/saml2/idp/SingleLogoutService.php',
),
),
'certData' => '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',
'NameIDFormat' =>
array (
0 => 'urn:oasis:names:tc:SAML:1.1:nameid-format:persistent',
),
'contacts' =>
array (
0 =>
array (
'emailAddress' => 'jmoore@incentco.com',
'contactType' => 'technical',
'givenName' => 'Administrator',
),
),
);
Certificaten
Download de X509-certificaten in PEM-formaat.