Métadonnées d'IdP SAML 2.0

Voici les métadonnées générées par SimpleSAMLphp. Vous pouvez les envoyer à vos partenaires de confiances pour construire une fédération d'identité.

Vous pouvez obtenir ces métadonnées XML depuis une URL dédiée:

https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php

Métadonnées

Au format XML de métadonnées SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>FINKI</md:GivenName>
    <md:SurName>FCC</md:SurName>
    <md:EmailAddress>fcc@finki.ukim.mk</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Au format à plat SimpleSAMLphp - à utiliser si vous avez une installation SimpleSAMLphp sur la partie adverse :

$metadata['https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://ek-inst.idp-proxy.finki.ukim.mk/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'NameIDFormat' => 
  array (
    0 => 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'fcc@finki.ukim.mk',
      'contactType' => 'technical',
      'givenName' => 'FINKI',
      'surName' => 'FCC',
    ),
  ),
);

Certificats

Télécharger les certificats X509 en tant que fichiers encodés PEM.

idp.crt