Métadonnées d'IdP SAML 2.0

Voici les métadonnées générées par SimpleSAMLphp. Vous pouvez les envoyer à vos partenaires de confiances pour construire une fédération d'identité.

Vous pouvez obtenir ces métadonnées XML depuis une URL dédiée:

https://idp.acipia.net/saml2/idp/metadata.php

Métadonnées

Au format XML de métadonnées SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.acipia.net/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.acipia.net/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.acipia.net/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Acipia</md:GivenName>
    <md:EmailAddress>suivi@acipia.fr</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Au format à plat SimpleSAMLphp - à utiliser si vous avez une installation SimpleSAMLphp sur la partie adverse :

$metadata['https://idp.acipia.net/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://idp.acipia.net/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.acipia.net/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://idp.acipia.net/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'suivi@acipia.fr',
      'contactType' => 'technical',
      'givenName' => 'Acipia',
    ),
  ),
);

Certificats

Télécharger les certificats X509 en tant que fichiers encodés PEM.

idp.crt