SAML 2.0 IdP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://dz.hutchcc.edu/simplesaml/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://dz.hutchcc.edu/simplesaml/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dz.hutchcc.edu/simplesaml/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dz.hutchcc.edu/simplesaml/saml2/idp/SSOService.php"/> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dz.hutchcc.edu/simplesaml/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Sean</md:GivenName> <md:SurName>Tucker</md:SurName> <md:EmailAddress>mailto:tuckers@hutchcc.edu</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['http://dz.hutchcc.edu/simplesaml/saml2/idp/metadata.php'] = [ 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'http://dz.hutchcc.edu/simplesaml/saml2/idp/metadata.php', 'SingleSignOnService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://dz.hutchcc.edu/simplesaml/saml2/idp/SSOService.php', ], [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST', 'Location' => 'https://dz.hutchcc.edu/simplesaml/saml2/idp/SSOService.php', ], ], 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://dz.hutchcc.edu/simplesaml/saml2/idp/SingleLogoutService.php', ], ], 'keys' => [ [ 'type' => 'X509Certificate', 'signing' => true, 'encryption' => true, 'X509Certificate' => 'MIIFNTCCA52gAwIBAgIUDboGvPW3oFU6jqwKa9xOLpRHMuowDQYJKoZIhvcNAQELBQAwgakxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIDAZLYW5zYXMxEzARBgNVBAcMCkh1dGNoaW5zb24xJTAjBgNVBAoMHEh1dGNoaW5zb24gQ29tbXVuaXR5IENvbGxlZ2UxDzANBgNVBAsMBnNjaG9vbDEXMBUGA1UEAwwOZHouaHV0Y2hjYy5lZHUxIzAhBgkqhkiG9w0BCQEWFGFjaGVzb25nQGh1dGNoY2MuZWR1MB4XDTIwMTAwOTIwNDYzM1oXDTMwMTAwOTIwNDYzM1owgakxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIDAZLYW5zYXMxEzARBgNVBAcMCkh1dGNoaW5zb24xJTAjBgNVBAoMHEh1dGNoaW5zb24gQ29tbXVuaXR5IENvbGxlZ2UxDzANBgNVBAsMBnNjaG9vbDEXMBUGA1UEAwwOZHouaHV0Y2hjYy5lZHUxIzAhBgkqhkiG9w0BCQEWFGFjaGVzb25nQGh1dGNoY2MuZWR1MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAyd8fOuFQBlQPRVm+EpIsL8BZE1HfbKekvJolnzgn8W6j3O32GdRG8X7essFdr87uSlVJWqrpS1y6Cxw7Q/uNIteTD0ZzAnSDWUe9jy36NtuI0iXApJY/lcm3WIoozv7cYuGnEAhTTx21mhG4WU2DaxbNeYQ/BC+rGxhJ2Ai9KP+TtUpWJk/Os0eBREVnM8kg341tuHHReXmoehmIXahTTWtOTdeMqaZhIY7iKURjxpl/UGwVTyB9nlLKcgMxQg/IMEik18Ok49Or0W20xJU+xPd8rEOlhG2OP9UxwWRQRgBoVYgy5z523OC/u7PhLfvOQwyts+4SxdXiC9QIZlkpawMf0jiiKj7VYWlc145CXRT50vzGcuipX2LETf5qeuOwWxcMh9xOC/2bD7ot35x5jTvISa/FYPN+eaJOM8nAS3/yi5f7NsMDBJF/eYvbWB/k1lDdniWXZMhCHBll6tjEgaZ9zjKFiBljmBmwcac828J3W+bKVElfzBCZHgrBLSA9AgMBAAGjUzBRMB0GA1UdDgQWBBTlX/FcjRafZWBMLHPdJAB3jsAldDAfBgNVHSMEGDAWgBTlX/FcjRafZWBMLHPdJAB3jsAldDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBgQBikitByHmP9vR/4zdUfk2O+yrvKs0KZIJXmbQxYKskJPj+eHU45r6QGdJhF8pYQktcyzjR+GZqdRalMWRRXFFFoG5V1Wkr8hKS0M271wgyRT0gQM6LPZX2sj6mGCZPVD1xIRbxgfFxVFghesntBGvjoLMy3An03HSIBKT0jc1ygrHYxyX++y+vnZyjcoYJddDP7BKmVfUpWTLjfljnpM/g8LOImFf0RueSR0wp8mB70OwW4Mphccl8N4FLdIbDjnmjmr/blvH1xckuuD2Hs9YKukDE1hqBspfWQkqfcwd9Zj595HwXp28LxUYlzhDiZVUI5YuK+qmRpoZ7IiTA6uzkAx5ByYEZCU6VZAXzxMMhsKTH158HhFzpEFt7Dmuwgz09Pexx1/Byl62N3C1kp9XYiwold7TdpgqsFCjcaIGG5oRfYCNGIBkBLjOxD9HJhYH1Y7gVXQwtkZWkq9wkb711fBUTcxITAZ5JwBe6eunX+LGkRDu71/TGiuw60EZMdBQ=', ], [ 'type' => 'X509Certificate', 'signing' => true, 'encryption' => false, 'X509Certificate' => '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', ], ], 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', 'contacts' => [ [ 'emailAddress' => 'tuckers@hutchcc.edu', 'contactType' => 'technical', 'givenName' => 'Sean', 'surName' => 'Tucker', ], ], ];
Certificates
Download the X509 certificates as PEM-encoded files.