SAML 2.0 IdP Metaadatok

Ezeket a metaadatokat a SimpleSAMLphp generálta. Ezt a dokumentumot küldheti el föderációs partnerei számára.

A következő címről töltheti le a metaadatokat:

https://o365.dattila.niif.hu/simplesaml/saml2/idp/metadata.php

Metaadatok

SAML 2.0 XML formátumban:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://o365.dattila.niif.hu/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://o365.dattila.niif.hu/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://o365.dattila.niif.hu/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>KIF&#xDC;</md:GivenName>
    <md:SurName>AAI</md:SurName>
    <md:EmailAddress>mailto:core@eduid.hu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

SimpleSAMLphp fájl formátumban - akkor használható, ha a másik oldalon SimpleSAMLphp van:

$metadata['https://o365.dattila.niif.hu/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://o365.dattila.niif.hu/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://o365.dattila.niif.hu/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://o365.dattila.niif.hu/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'core@eduid.hu',
            'contactType' => 'technical',
            'givenName' => 'KIFÜ',
            'surName' => 'AAI',
        ],
    ],
];

Tanúsítványok.

PEM formátumú X509 tanúsítvány letöltése.

idp.crt