SAML 2.0 IdP Metadata

Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.

You can get the metadata xml on a dedicated URL:

https://saml-test.p-passport-test.work/simplesaml/saml2/idp/metadata.php

Metadata

In SAML 2.0 Metadata XML format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://saml-test.p-passport-test.work/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://saml-test.p-passport-test.work/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://saml-test.p-passport-test.work/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>

In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:

$metadata['https://saml-test.p-passport-test.work/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://saml-test.p-passport-test.work/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://saml-test.p-passport-test.work/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://saml-test.p-passport-test.work/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
];

Certificates

Download the X509 certificates as PEM-encoded files.

idp.crt