Métadonnées de SP SAML 2.0

Voici les métadonnées générées par SimpleSAMLphp. Vous pouvez les envoyer à vos partenaires de confiances pour construire une fédération d'identité.

Vous pouvez obtenir ces métadonnées XML depuis une URL dédiée:

https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/metadata.php/default-sp

Métadonnées

Au format XML de métadonnées SAML 2.0

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/metadata.php/default-sp">
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="0"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp/artifact" index="3"/>
  </md:SPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>agonzaleza@itesm.mx</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Au format à plat SimpleSAMLphp - à utiliser si vous avez une installation SimpleSAMLphp sur la partie adverse :

$metadata['https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/metadata.php/default-sp'] = array (
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp',
    ),
    1 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:SOAP',
      'Location' => 'https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp',
    ),
  ),
  'AssertionConsumerService' => 
  array (
    0 => 
    array (
      'index' => 0,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
      'Location' => 'https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp',
    ),
    1 => 
    array (
      'index' => 1,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
      'Location' => 'https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp',
    ),
    2 => 
    array (
      'index' => 2,
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
      'Location' => 'https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp',
    ),
    3 => 
    array (
      'index' => 3,
      'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
      'Location' => 'https://misconvenios.tec.mx/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp/artifact',
    ),
  ),
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'agonzaleza@itesm.mx',
      'contactType' => 'technical',
      'givenName' => 'Administrator',
    ),
  ),
  'certData' => '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',
  'redirect.validate' => true,
);