SAML 2.0 IdP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
http://saml.seeedstudio.com/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://saml.seeedstudio.com/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://saml.seeedstudio.com/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://saml.seeedstudio.com/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Administrator</md:GivenName> <md:EmailAddress>[email protected]</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['http://saml.seeedstudio.com/saml2/idp/metadata.php'] = array ( 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'http://saml.seeedstudio.com/saml2/idp/metadata.php', 'SingleSignOnService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'http://saml.seeedstudio.com/saml2/idp/SSOService.php', ), ), 'SingleLogoutService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'http://saml.seeedstudio.com/saml2/idp/SingleLogoutService.php', ), ), 'certData' => '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', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent', 'contacts' => array ( 0 => array ( 'emailAddress' => '[email protected]', 'contactType' => 'technical', 'givenName' => 'Administrator', ), ), );
Certificates
Download the X509 certificates as PEM-encoded files.