SAML 2.0 SP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/metadata.php/resus-dev-localhost
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://localhost:8080"> <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol" AuthnRequestsSigned="true"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml2-logout.php/resus-dev-localhost"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml2-acs.php/resus-dev-localhost" index="0"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml1-acs.php/resus-dev-localhost" index="1"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml2-acs.php/resus-dev-localhost" index="2"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml1-acs.php/resus-dev-localhost/artifact" index="3"/> </md:SPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Jérôme</md:GivenName> <md:SurName>Drzewinski</md:SurName> <md:EmailAddress>mailto:jerome.drzewinski@feelandclic.com</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['http://localhost:8080'] = [ 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml2-logout.php/resus-dev-localhost', ], ], 'AssertionConsumerService' => [ [ 'index' => 0, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', 'Location' => 'https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml2-acs.php/resus-dev-localhost', ], [ 'index' => 1, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post', 'Location' => 'https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml1-acs.php/resus-dev-localhost', ], [ 'index' => 2, 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact', 'Location' => 'https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml2-acs.php/resus-dev-localhost', ], [ 'index' => 3, 'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01', 'Location' => 'https://idp-dev.preprod.co/simplesaml/module.php/saml/sp/saml1-acs.php/resus-dev-localhost/artifact', ], ], 'contacts' => [ [ 'emailAddress' => 'jerome.drzewinski@feelandclic.com', 'contactType' => 'technical', 'givenName' => 'Jérôme', 'surName' => 'Drzewinski', ], ], 'certData' => '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', 'redirect.validate' => true, ];