SAML 2.0 IdP 元信息
这里是SimpleSAMLphp为你生成的元信息,你应该发送这个元信息文档给你的信任的合作伙伴以建立信任的联盟
你可以在 获取元信息XML
https://sso.ytl.jp/simplesaml/saml2/idp/metadata.php
元信息
在SAML 2.0 XML 元信息格式中:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso.ytl.jp/simplesaml/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.ytl.jp/simplesaml/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.ytl.jp/simplesaml/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> </md:EntityDescriptor>
如果你想在其他网站使用的SimpleSAMLphp,那么你应该使用SimpleSAMLphp扁平的文件格式
$metadata['https://sso.ytl.jp/simplesaml/saml2/idp/metadata.php'] = [ 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://sso.ytl.jp/simplesaml/saml2/idp/metadata.php', 'SingleSignOnService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://sso.ytl.jp/simplesaml/saml2/idp/SSOService.php', ], ], 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://sso.ytl.jp/simplesaml/saml2/idp/SingleLogoutService.php', ], ], 'certData' => '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', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', ];
证书
下载X509证书作为PEM编码的文件