SAML 2.0 IdP Metadata
Here is the metadata that simpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.vsc.ac.at/simplesaml/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:Extensions> <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"> <mdui:DisplayName xml:lang="en">IdP VSC</mdui:DisplayName> <mdui:Logo width="400" height="220">https://idp.vsc.ac.at/simplesaml/resources/logo_vsc.gif</mdui:Logo> </mdui:UIInfo> </md:Extensions> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>MIID3TCCAsWgAwIBAgIJAI5S0POLeNyzMA0GCSqGSIb3DQEBCwUAMIGEMQswCQYDVQQGEwJhdDEPMA0GA1UECAwGdmllbm5hMQ8wDQYDVQQHDAZ2aWVubmExDDAKBgNVBAoMA1ZTQzEMMAoGA1UECwwDVlNDMQwwCgYDVQQDDANpZHAxKTAnBgkqhkiG9w0BCQEWGm1hcmt1cy5zdG9laHJAdHV3aWVuLmFjLmF0MB4XDTE2MDIwMzA5NTYzN1oXDTI2MDIwMjA5NTYzN1owgYQxCzAJBgNVBAYTAmF0MQ8wDQYDVQQIDAZ2aWVubmExDzANBgNVBAcMBnZpZW5uYTEMMAoGA1UECgwDVlNDMQwwCgYDVQQLDANWU0MxDDAKBgNVBAMMA2lkcDEpMCcGCSqGSIb3DQEJARYabWFya3VzLnN0b2VockB0dXdpZW4uYWMuYXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt20mi7qJmgfjfXC34RGWanmsr+9h36Cw3hafGlJriU9VGXHVujG9rQi9XL1BwtRuqBPHVYP1rMLV9ze0coWipNYaCjr4T+Tgx/bjVNgkEzu+gaZMF5oMF8RYzy9WuEyK4F089mF2R95IJIp4qipA5IrHHwJg7YgdW1i6O62mZkZ68olwyYGDGhCTrHiMQwfRoYTvLI3In+nGwAzDAhTRwYkeHYmbQgWi9Vhj//bDXogwKo0fEUkEvAuI0eL+61csEPvHg/wHkMJ3czrXx+shqcgvdIE14UGzEE7JRmmwRHvLg9wYLnmcClDJQL0tvoJXmGCyKfDGl735iEoXpMsrrAgMBAAGjUDBOMB0GA1UdDgQWBBRX8SGcckkN8MVHV1P7RFeNN7vi8jAfBgNVHSMEGDAWgBRX8SGcckkN8MVHV1P7RFeNN7vi8jAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCKsI9dHnMKoP7s9+T0gQzlhZm/1I6JTYoCflh3mFSjXUvBXs2dtRVNhKK8BuYg6mUpwTce0OY8ix08hHX2Nv4aACFDtYjNkF20aLp5nnHyrBOFZI+lWI1P2kyvS/a+ZvTzxtPtpW+qxJtXEVCwKYOV4uZKMtA3U5Pberv6OP7NPwC/9LuExjhMLGfYxvUmlj869liCqvv2fghFrmRFF/bdQpK3B/PIXQMBx9qILXqwg6JEmddBr0qLIsn9JcbyZdz7t9LYChCw73hSv2YY1YvxROhRx4Tq9JEmLT4/AzhJp4fin5nwjwn4DyrG5w0NRGmUoI14vryI8A15rYMt1xNI</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.vsc.ac.at/simplesaml/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.vsc.ac.at/simplesaml/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:Organization> <md:OrganizationName xml:lang="en">IdP VSC</md:OrganizationName> <md:OrganizationDisplayName xml:lang="en">IdP VSC</md:OrganizationDisplayName> <md:OrganizationURL xml:lang="en">https://vsc.ac.at</md:OrganizationURL> </md:Organization> <md:ContactPerson contactType="technical"> <md:SurName>Administrator</md:SurName> <md:EmailAddress>markus.stoehr@tuwien.ac.at</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In simpleSAMLphp flat file format - use this if you are using a simpleSAMLphp entity on the other side:
$metadata['https://idp.vsc.ac.at/simplesaml/saml2/idp/metadata.php'] = array ( 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://idp.vsc.ac.at/simplesaml/saml2/idp/metadata.php', 'SingleSignOnService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://idp.vsc.ac.at/simplesaml/saml2/idp/SSOService.php', ), ), 'SingleLogoutService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://idp.vsc.ac.at/simplesaml/saml2/idp/SingleLogoutService.php', ), ), 'certData' => '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', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', 'OrganizationName' => array ( 'en' => 'IdP VSC', ), 'OrganizationDisplayName' => array ( 'en' => 'IdP VSC', ), 'OrganizationURL' => array ( 'en' => 'https://vsc.ac.at', ), 'UIInfo' => array ( 'DisplayName' => array ( 'en' => 'IdP VSC', ), 'Logo' => array ( 0 => array ( 'url' => 'https://idp.vsc.ac.at/simplesaml/resources/logo_vsc.gif', 'height' => 220, 'width' => 400, ), ), ), );
Certificates
Download the X509 certificates as PEM-encoded files.