SAML 2.0 IdP Metadata
Here is the metadata that simpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Administrator</md:GivenName> <md:EmailAddress>webmaster@med-web.com</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In simpleSAMLphp flat file format - use this if you are using a simpleSAMLphp entity on the other side:
$metadata['https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/metadata.php'] = array ( 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/metadata.php', 'SingleSignOnService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/SSOService.php', ), ), 'SingleLogoutService' => array ( 0 => array ( 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://sso-wo2fa.mieweb.com/simplesaml/saml2/idp/SingleLogoutService.php', ), ), 'certData' => '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', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', 'contacts' => array ( 0 => array ( 'emailAddress' => 'webmaster@med-web.com', 'contactType' => 'technical', 'givenName' => 'Administrator', ), ), );
Certificates
Download the X509 certificates as PEM-encoded files.