SAML 2.0 IdP Metadata

Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.

You can get the metadata xml on a dedicated URL:

https://saml-test.aptarus.com/simplesaml/saml2/idp/metadata.php

Metadata

In SAML 2.0 Metadata XML format:

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://saml-test.aptarus.com/simplesaml/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://saml-test.aptarus.com/simplesaml/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://saml-test.aptarus.com/simplesaml/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Kevin</md:GivenName>
    <md:SurName>Lyda</md:SurName>
    <md:EmailAddress>mailto:kevin.lyda@aptarus.com</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:

$metadata['https://saml-test.aptarus.com/simplesaml/saml2/idp/metadata.php'] = [
    'metadata-set' => 'saml20-idp-remote',
    'entityid' => 'https://saml-test.aptarus.com/simplesaml/saml2/idp/metadata.php',
    'SingleSignOnService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://saml-test.aptarus.com/simplesaml/saml2/idp/SSOService.php',
        ],
    ],
    'SingleLogoutService' => [
        [
            'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
            'Location' => 'https://saml-test.aptarus.com/simplesaml/saml2/idp/SingleLogoutService.php',
        ],
    ],
    'certData' => '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',
    'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
    'contacts' => [
        [
            'emailAddress' => 'kevin.lyda@aptarus.com',
            'contactType' => 'technical',
            'givenName' => 'Kevin',
            'surName' => 'Lyda',
        ],
    ],
];

Certificates

Download the X509 certificates as PEM-encoded files.

idp.crt