Metadati SAML 2.0 SP

Questi sono i metadati che SimpleSAMLphp ha generato e che possono essere inviati ai partner fidati per creare una federazione tra siti.

Si possono ottenere i metadati in XML dall'URL dedicata:

https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/metadata.php/federated

Metadati

Metadati SAML 2.0 in formato XML:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sp.sprakochfolkminnen.se/">
  <md:Extensions>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
    <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.swamid.se/">
      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
  </md:Extensions>
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
    <md:Extensions>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">Institute for Language and Folklore</mdui:DisplayName>
        <mdui:DisplayName xml:lang="sv">Institutet f&#xF6;r spr&#xE5;k och folkminnen</mdui:DisplayName>
        <mdui:Description xml:lang="en">Institute for Language and Folklore</mdui:Description>
        <mdui:Description xml:lang="sv">Institutet f&#xF6;r spr&#xE5;k och folkminnen</mdui:Description>
        <mdui:InformationURL xml:lang="sv">https://www.isof.se/vart-uppdrag/om-myndigheten</mdui:InformationURL>
        <mdui:InformationURL xml:lang="en">https://www.isof.se/other-languages/english/about-the-institute</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="sv">https://www.isof.se/vart-uppdrag/om-myndigheten/om-webbplatsen/hantering-av-personuppgifter</mdui:PrivacyStatementURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://www.isof.se/vart-uppdrag/om-myndigheten/om-webbplatsen/hantering-av-personuppgifter</mdui:PrivacyStatementURL>
        <mdui:Logo width="236" height="146" xml:lang="sv">https://sp.sprakochfolkminnen.se/ISOF-logo.png</mdui:Logo>
        <mdui:Logo width="236" height="146" xml:lang="en">https://sp.sprakochfolkminnen.se/ISOF-logo.png</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIDDzCCAfegAwIBAgIJALSgVaAtkpyyMA0GCSqGSIb3DQEBBQUAMCMxITAfBgNVBAMTGHNwLnNwcmFrb2NoZm9sa21pbm5lbi5zZTAeFw0xOTA3MTYxNDE0NDBaFw0yOTA3MTMxNDE0NDBaMCMxITAfBgNVBAMTGHNwLnNwcmFrb2NoZm9sa21pbm5lbi5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALJFmCxfK2ApdO44DOxoSLsuUrati1I1i83kNwpjaai7LNhr993Xrz2VvwatAnsStSuKEkJPjVoLuhwtmGPU7OlseNU4i8v//4REDtJVeJLmI+VSgLxCB3bobtolq0JUOSD08cnVtHxpSspbicNTXp5UHodZM2PRbbsheFrLoKIJdYRO/hDT/ScMegeJP15HvMKR6Yoxv60KWkgK0EerRDSVpfBfdsiNqGHS9FpAP82W4yyMyLIj7Cdqb73zngVhV78DDb3TErGaoa10kygJEebJx43dctYiw08Xd2JA83EDqtKX+dS+Uc+zTD4HLBsg1zv0X36tgnk5r3K1Ke07AWsCAwEAAaNGMEQwIwYDVR0RBBwwGoIYc3Auc3ByYWtvY2hmb2xrbWlubmVuLnNlMB0GA1UdDgQWBBQPlGQtSXDteRMPpBDLmU/PSOLrrzANBgkqhkiG9w0BAQUFAAOCAQEABYm8hbubDEhnCg+HqSzfvJIpXPylfDztNw8WG+19xfcMSVy6A1g7i4JYN8mCj0VwF6gViCf4ABxpAvP0t/JLN/z+aHVRphnFOpdGYBEClnRjUK5N0FIyHfnhiPN6Trfn7k4yBdlw3rZCd57JGRtWgWz6YY/yN/kSrdCnfpL4nDpSevilADGqdjtIVqi6d9K+FHzsCuGiF2OZ5VtXguXL7hySJwd3xscZcqJB3HeOpn15wQN5Zavg1mKQWq+URQVYrIZXc9E/jt0znOXen8E1306cyCo4Z0PXSSuP/sqtGr/tcf9DDWE0as48anZ3k8ntfrsLVEnBIEmATs/uIl7D3A==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml2-logout.php/federated"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml2-acs.php/federated" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml1-acs.php/federated" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml2-acs.php/federated" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml1-acs.php/federated/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">Institute for Language and Folklore</md:OrganizationName>
    <md:OrganizationName xml:lang="sv">Institutet f&#xF6;r spr&#xE5;k och folkminnen</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">Institute for Language and Folklore</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="sv">Institutet f&#xF6;r spr&#xE5;k och folkminnen</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.isof.se/</md:OrganizationURL>
    <md:OrganizationURL xml:lang="sv">https://www.isof.se/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="administrative">
    <md:GivenName>Magnus</md:GivenName>
    <md:SurName>Ahltorp</md:SurName>
    <md:EmailAddress>mailto:magnus.ahltorp@isof.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Magnus</md:GivenName>
    <md:SurName>Ahltorp</md:SurName>
    <md:EmailAddress>mailto:magnus.ahltorp@isof.se</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In formato flat per SimpleSAMLphp - da utilizzare se dall'altra parte c'è un'entità che utilizza SimpleSAMLphp

$metadata['https://sp.sprakochfolkminnen.se/'] = [
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml2-logout.php/federated',
        ],
    ],
    'AssertionConsumerService' => [
        [
            'index' => 0,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
            'Location' => 'https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml2-acs.php/federated',
        ],
        [
            'index' => 1,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
            'Location' => 'https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml1-acs.php/federated',
        ],
        [
            'index' => 2,
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
            'Location' => 'https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml2-acs.php/federated',
        ],
        [
            'index' => 3,
            'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
            'Location' => 'https://sp.sprakochfolkminnen.se/simplesaml/module.php/saml/sp/saml1-acs.php/federated/artifact',
        ],
    ],
    'OrganizationName' => [
        'en' => 'Institute for Language and Folklore',
        'sv' => 'Institutet för språk och folkminnen',
    ],
    'OrganizationDisplayName' => [
        'en' => 'Institute for Language and Folklore',
        'sv' => 'Institutet för språk och folkminnen',
    ],
    'OrganizationURL' => [
        'en' => 'https://www.isof.se/',
        'sv' => 'https://www.isof.se/',
    ],
    'contacts' => [
        [
            'contactType' => 'administrative',
            'emailAddress' => 'magnus.ahltorp@isof.se',
            'givenName' => 'Magnus',
            'surName' => 'Ahltorp',
        ],
        [
            'emailAddress' => 'magnus.ahltorp@isof.se',
            'contactType' => 'technical',
            'givenName' => 'Magnus',
            'surName' => 'Ahltorp',
        ],
    ],
    'certData' => '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',
    'EntityAttributes' => [
        'http://macedir.org/entity-category' => [
            'http://refeds.org/category/research-and-scholarship',
        ],
    ],
    'RegistrationInfo' => [
        'authority' => 'http://www.swamid.se/',
        'policies' => [
            'en' => 'http://swamid.se/policy/mdrps',
        ],
    ],
    'saml20.sign.assertion' => true,
    'validate.authnrequest' => true,
];