SAML 2.0 identitetsudbyders metadata

Du tilgår nu et pre-produktions-system. Dette autentificeringssetup er kun til test og pre-produktion verifikation. Hvis nogen har sendt et link, som peger her og du ikke er en tester, så har du sikekrt fået et forkert lin og burde ikke være her.

SAML 2.0 identitetsudbyders metadata

Her er det metadata, som SimpleSAMLphp har genereret. Du kan sende det til dem du stoler i forbindelse med oprettelsen af en føderation.

Du kan få metadata-xml her:

http://login.medhub.com/simplesaml/saml2/idp/metadata.php

Metadata

I SAML 2.0 metadata xml-format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://login.medhub.com/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIEfzCCAuegAwIBAgIJALhy6oJ1fVIuMA0GCSqGSIb3DQEBBQUAMFYxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNaWNoaWdhbjEPMA0GA1UEBwwGRGV4dGVyMRMwEQYDVQQKDApNZWRodWIgTExDMQ4wDAYDVQQDDAVsb2dpbjAeFw0xOTExMTMxNTI4MTBaFw0yOTExMTIxNTI4MTBaMFYxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNaWNoaWdhbjEPMA0GA1UEBwwGRGV4dGVyMRMwEQYDVQQKDApNZWRodWIgTExDMQ4wDAYDVQQDDAVsb2dpbjCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBANOiwilI6hF3ZfQTONRST2S1vlpoYKfnecwQqRHadHRrRncR5O7/tZVEy9Lo5tazWRDUrqfFzfin4dbgmxC8ZxzW16f2KsTs8EpovOExgwKrrm/RlFe+zYynxcdZzzTOqz3lnjdS4OU4ZuYDU4Xn+L3o4OpXY3+E4vcf3D7GWO99e8nPrVNmyS/V+iJWHkogrzRx0j0qFYKs+PcxYUS0yq4OOd27IV5onNES7eUexUiM+qP0Rg/dGOaBPAZZwldtq4Vl/a4n9ahfG9tOe5uW54bqSdjUV2eF0scqqt4rs/nl+qZzol0e5c30zmo84AwzPQhFAbcXjz6LXaB/RMdy0Pb8qAnvsqhCxmAZPpbm+RKtdY4AvvnHLrdATrRVJlUyhOq38zWTwc5TpEEpTcd8NJ84w9vbvkpObq0Sbyf9pAm4W2xP4lF2jriKqVHWYue8ezNdkvecIBEtvpQTMaNktP9gbN4ekG7rK7y/Yy/W+X6MxOapBKfSPZbp1x+4leKA9wIDAQABo1AwTjAdBgNVHQ4EFgQUWlxsqWQU6OMQxF9iycoi+AT5X2QwHwYDVR0jBBgwFoAUWlxsqWQU6OMQxF9iycoi+AT5X2QwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAYEAcjhYIN3zLDYu5ZBkE7Utma9L+BffVUKLYk1fIZDRkH7l7SQPskdPAVBpgVpgwC6/Eb5XLC5LrcmSxn5ngFhAvUTiQQTqYFKEaJkV5sAW17Iwn2InaLJz6dJLUDbiN3SKmb5vSodBapZjfFYVEcHuPGbKAfmsFEj8IM/89Vx5e6kWoDX1Jf9LnT30V9xKAKOamr892HDhLXeFhAewchmTXQmvCvXjEt5wATSN1RRIVdnrKvsdcar7Ics8KsO/0AwQXgHHicdRsLQOC9VLsECxvusWvHpn8LN1kwQQd7susLiSrDiKEA6YOizssCZ7Vh8u1O4SNxur1Y2WzhyIYgtcutQa+rQOKUpV+eFK5FZM41Uj6w2oNd4wEb25HHMGd33iMIRtbl5rIYa7jAYPJQNV6yOeT+VRCk1KsQj0gLg7e+S7CqfuEJHVxpptvNaXP2fZtflIbfjuSUbfTmy4vxvSBR9oACEtraMIjE9NGmHt+llIF3YpaAj+qjtGDIY4jFp3</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://login.medhub.com/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://login.medhub.com/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">MedHub LLC</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">MedHub LLC</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.medhub.com</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Ben</md:GivenName>
    <md:SurName>Sayer</md:SurName>
    <md:EmailAddress>mailto:support@medhub.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

I SimpleSAMLphp flat-file format - brug dette hvis du også bruger SimpleSAMLphp i den anden ende;

$metadata['https://login.medhub.com/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://login.medhub.com/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'http://login.medhub.com/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'http://login.medhub.com/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'OrganizationName' => [
        'en' => 'MedHub LLC',
    ],
    'OrganizationDisplayName' => [
        'en' => 'MedHub LLC',
    ],
    'OrganizationURL' => [
        'en' => 'https://www.medhub.com',
    ],
    'contacts' => [
        [
            'emailAddress' => 'support@medhub.com',
            'contactType' => 'technical',
            'givenName' => 'Ben',
            'surName' => 'Sayer',
        ],
    ],
];

Certifikater

Download X509 certifikaterne som PEM-indkodet filer.

idp.crt