SAML 2.0 IdP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://stg.sso.mindup.org/saml/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://stg.sso.mindup.org/saml/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://stg.sso.mindup.org/saml/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://stg.sso.mindup.org/saml/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Administrator</md:GivenName> <md:EmailAddress>mailto:mike@allthingsmedia.com</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['https://stg.sso.mindup.org/saml/saml2/idp/metadata.php'] = [ 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://stg.sso.mindup.org/saml/saml2/idp/metadata.php', 'SingleSignOnService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://stg.sso.mindup.org/saml/saml2/idp/SSOService.php', ], ], 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://stg.sso.mindup.org/saml/saml2/idp/SingleLogoutService.php', ], ], 'certData' => 'MIIFCzCCA3OgAwIBAgIJAMMOVGiKsjKzMA0GCSqGSIb3DQEBCwUAMIGbMQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExFDASBgNVBAcMC0xvcyBBbmdlbGVzMRMwEQYDVQQKDApNaW5kVVAgT3JnMQswCQYDVQQLDAJJVDEbMBkGA1UEAwwSc3RnLnNzby5taW5kdXAub3JnMSowKAYJKoZIhvcNAQkBFhttaWNoYWVsa0BhbGx0aGluZ3NtZWRpYS5jb20wHhcNMjIwNTEwMTcwNTExWhcNMzIwNTA5MTcwNTExWjCBmzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQHDAtMb3MgQW5nZWxlczETMBEGA1UECgwKTWluZFVQIE9yZzELMAkGA1UECwwCSVQxGzAZBgNVBAMMEnN0Zy5zc28ubWluZHVwLm9yZzEqMCgGCSqGSIb3DQEJARYbbWljaGFlbGtAYWxsdGhpbmdzbWVkaWEuY29tMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAlq72CeqYHivlZul4gCg9jomi3CfpGwyEucAuyqTc31ey6FQGYwlUE2UViKWwJ3QB3FXtyusj7Jsq7l5BZ/nIG88G6ttWGYVC8thAJSjAa/GBBy9Rey/JT3rUiQbRn+a3SOGvCka9YZgiXZxLGKS1zJYVQsoJplQqNQ3qtdxo+9KcnU5pLlCwOCgQ/38HeQVwqk9fRWB+vBd7vvIHyeUfOworGiwQ8JfcyxjkCHlL9uDRR0wC+ZoLvwSE3rPAI8NFSgXstMgaqYSSXRIpBzbC0Uer5jY7AnC3f8mpQUEfEgpZKTw3XfpNhcsN5gbjg2LLXnDd0OXkuk3RVyLFVCEZTWujCTVIRhcEJOhhjD5b4ljjr+xUrW5p9tBGDAu6+zn+2+Y1yIsGZViJs/DqlXN9cgmvpRoK+4gILL2IV4Ku4Y9P+1TE0sI4QJ8FgYj/YCCyMrI4pZR9t6LsYFjGxZKBi9x9NjLCKywBgMLuMGoVxbhFCOnjTVvsJU3Ylxutgzm7AgMBAAGjUDBOMB0GA1UdDgQWBBQW65fCr3n5mcFmELqvsv1m5RjkATAfBgNVHSMEGDAWgBQW65fCr3n5mcFmELqvsv1m5RjkATAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBgQB/M1qnbOytpOysw1spTDIahi3QURFBbq1Wmc5etosBHJrRJcD3x+BbYU4zECuri3sIndBVq7tptrVFZ+87PRf+QkRwc87dKOwGrRSqN9aq8Nj2zlgEnBxilK8jvrBn9xCFWsB05HeHL6UtBz+NHvgJdc8kbBjh3W8IjzvhMp1k74Oo3NqFL2k+ZJIPEcmj0RbVMSTj6ZqnOSpK86tTYywaLhdrAwP6uhsVOCdPhuQgF+IML43EqC2u4a4w/PgKMaXS2WrtgtNVoWCA+9/zCj3IlMqEw/qU4dZP/2N5tLU7aVXCFZ8qfGapD3mzXKnUITIDP51OC+Foouug+hoalmps7z7LQHFi8Ir2Fj1OhDT0G9/zRh36dVUsC04ynlQsEjRQgtkx+xGWagU4WUWk72BkSlpuBdZpiS9FE/D29Dg6gRVVvtSC1XS1l19w4qNpGwyP5pvay1xt77O3/D3A1AfJI9l3shY3w2Q4FlbX6AQn68sVMEXEH9IWfId1cJcjoM4=', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', 'contacts' => [ [ 'emailAddress' => 'mike@allthingsmedia.com', 'contactType' => 'technical', 'givenName' => 'Administrator', ], ], ];
Certificates
Download the X509 certificates as PEM-encoded files.