Univention Corporate Server Single-Sign-On

Hier finden Sie die Metadaten, die SimpleSAMLphp für Sie erzeugt hat. Sie können dieses Metadaten-Dokument zu Partnern schicken, denen Sie vertrauen, um eine vertrauensbasierte Föderation aufzusetzen.

Metadaten

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFSjCCBDKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBwzELMAkGA1UEBhMCREUxCzAJBgNVBAgTAkRFMQswCQYDVQQHEwJERTEWMBQGA1UEChMNaG0tc2NodWxlbi5kZTEkMCIGA1UECxMbVW5pdmVudGlvbiBDb3Jwb3JhdGUgU2VydmVyMTowOAYDVQQDEzFVbml2ZW50aW9uIENvcnBvcmF0ZSBTZXJ2ZXIgUm9vdCBDQSAoSUQ9N2M4ZUIyeHkpMSAwHgYJKoZIhvcNAQkBFhFzc2xAaG0tc2NodWxlbi5kZTAeFw0yMTAzMzExMDIzMzVaFw0yNjAzMzAxMDIzMzVaMIGnMQswCQYDVQQGEwJERTELMAkGA1UECBMCREUxCzAJBgNVBAcTAkRFMRYwFAYDVQQKEw1obS1zY2h1bGVuLmRlMSQwIgYDVQQLExtVbml2ZW50aW9uIENvcnBvcmF0ZSBTZXJ2ZXIxHjAcBgNVBAMTFXVjcy1zc28uaG0tc2NodWxlbi5kZTEgMB4GCSqGSIb3DQEJARYRc3NsQGhtLXNjaHVsZW4uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jlIi/BqJjugOUMmA8fbFVwvsBxP4B8ieO7e6yYghdqeHE9vbSs0Uk/k6vbn9a+VWswsXpYvy717oo23QKlY+HNO5POQV0Oq0xRdoH9GAt5N3Z/OU8Zrnnc5DhAInyAB7WQtLCLL+gJV/tZ7OlpWk+MQCupRjSSxs4dUG0XPRkYXIzynqmx5psX7nPQVmZB52b8PuEhHdrA6HepYYxzS72+GEmDdTKEvPJg+4t0CSIrxX+Hz6uida4fHgUeHxjBEewaQgScZP6mhaOCIJI6LJ1ZxaBo3QoykfND4PPQZi2zdvO452GHzgCKdGy3YGDj3JxsUBbiaIklNrNRl1qs4/AgMBAAGjggFhMIIBXTAJBgNVHRMEAjAAMB0GA1UdDgQWBBSwkxTVNwkzrQ1A3pWkDTyzcwP7BTCB+AYDVR0jBIHwMIHtgBTAIDpUaWxYXSiH4aW2w6Zx8UsYCqGByaSBxjCBwzELMAkGA1UEBhMCREUxCzAJBgNVBAgTAkRFMQswCQYDVQQHEwJERTEWMBQGA1UEChMNaG0tc2NodWxlbi5kZTEkMCIGA1UECxMbVW5pdmVudGlvbiBDb3Jwb3JhdGUgU2VydmVyMTowOAYDVQQDEzFVbml2ZW50aW9uIENvcnBvcmF0ZSBTZXJ2ZXIgUm9vdCBDQSAoSUQ9N2M4ZUIyeHkpMSAwHgYJKoZIhvcNAQkBFhFzc2xAaG0tc2NodWxlbi5kZYIJAIpSm0E4ZbRiMAsGA1UdDwQEAwIF4DApBgNVHREEIjAgghV1Y3Mtc3NvLmhtLXNjaHVsZW4uZGWCB3Vjcy1zc28wDQYJKoZIhvcNAQELBQADggEBAGu4G0JoF3bqf9qYw+AJCmjgsG9DzaKtrA8XCCVQMJW5Gpt6HxB9yZR8FCJ/yAx1/Q5QjyK4xdGgBsu6yIqdfqup2D8tSPj9I+EfibpqEfsADXSOLZzZC4Q7An5eVKRWw+RfqurxQ7P0QPYqoTAWopxxbvKannG9IVHyWryK0/3Rlr/dfcF05NtpkOAV1w0Ra2tX2KpNnTh7tVoFltdyPyNRk7tWCLr6pQLB9O9KePlNQTtJQRxObmUkWir0XO+2yTLcBa+Rtah3Laaf+H2jon602i4iMlJ6oth//0pSm/qzigyjGPbesIoYwqMyBivQ2/Aa+P9io0J3yJIwTaFOF40=</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFSjCCBDKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBwzELMAkGA1UEBhMCREUxCzAJBgNVBAgTAkRFMQswCQYDVQQHEwJERTEWMBQGA1UEChMNaG0tc2NodWxlbi5kZTEkMCIGA1UECxMbVW5pdmVudGlvbiBDb3Jwb3JhdGUgU2VydmVyMTowOAYDVQQDEzFVbml2ZW50aW9uIENvcnBvcmF0ZSBTZXJ2ZXIgUm9vdCBDQSAoSUQ9N2M4ZUIyeHkpMSAwHgYJKoZIhvcNAQkBFhFzc2xAaG0tc2NodWxlbi5kZTAeFw0yMTAzMzExMDIzMzVaFw0yNjAzMzAxMDIzMzVaMIGnMQswCQYDVQQGEwJERTELMAkGA1UECBMCREUxCzAJBgNVBAcTAkRFMRYwFAYDVQQKEw1obS1zY2h1bGVuLmRlMSQwIgYDVQQLExtVbml2ZW50aW9uIENvcnBvcmF0ZSBTZXJ2ZXIxHjAcBgNVBAMTFXVjcy1zc28uaG0tc2NodWxlbi5kZTEgMB4GCSqGSIb3DQEJARYRc3NsQGhtLXNjaHVsZW4uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jlIi/BqJjugOUMmA8fbFVwvsBxP4B8ieO7e6yYghdqeHE9vbSs0Uk/k6vbn9a+VWswsXpYvy717oo23QKlY+HNO5POQV0Oq0xRdoH9GAt5N3Z/OU8Zrnnc5DhAInyAB7WQtLCLL+gJV/tZ7OlpWk+MQCupRjSSxs4dUG0XPRkYXIzynqmx5psX7nPQVmZB52b8PuEhHdrA6HepYYxzS72+GEmDdTKEvPJg+4t0CSIrxX+Hz6uida4fHgUeHxjBEewaQgScZP6mhaOCIJI6LJ1ZxaBo3QoykfND4PPQZi2zdvO452GHzgCKdGy3YGDj3JxsUBbiaIklNrNRl1qs4/AgMBAAGjggFhMIIBXTAJBgNVHRMEAjAAMB0GA1UdDgQWBBSwkxTVNwkzrQ1A3pWkDTyzcwP7BTCB+AYDVR0jBIHwMIHtgBTAIDpUaWxYXSiH4aW2w6Zx8UsYCqGByaSBxjCBwzELMAkGA1UEBhMCREUxCzAJBgNVBAgTAkRFMQswCQYDVQQHEwJERTEWMBQGA1UEChMNaG0tc2NodWxlbi5kZTEkMCIGA1UECxMbVW5pdmVudGlvbiBDb3Jwb3JhdGUgU2VydmVyMTowOAYDVQQDEzFVbml2ZW50aW9uIENvcnBvcmF0ZSBTZXJ2ZXIgUm9vdCBDQSAoSUQ9N2M4ZUIyeHkpMSAwHgYJKoZIhvcNAQkBFhFzc2xAaG0tc2NodWxlbi5kZYIJAIpSm0E4ZbRiMAsGA1UdDwQEAwIF4DApBgNVHREEIjAgghV1Y3Mtc3NvLmhtLXNjaHVsZW4uZGWCB3Vjcy1zc28wDQYJKoZIhvcNAQELBQADggEBAGu4G0JoF3bqf9qYw+AJCmjgsG9DzaKtrA8XCCVQMJW5Gpt6HxB9yZR8FCJ/yAx1/Q5QjyK4xdGgBsu6yIqdfqup2D8tSPj9I+EfibpqEfsADXSOLZzZC4Q7An5eVKRWw+RfqurxQ7P0QPYqoTAWopxxbvKannG9IVHyWryK0/3Rlr/dfcF05NtpkOAV1w0Ra2tX2KpNnTh7tVoFltdyPyNRk7tWCLr6pQLB9O9KePlNQTtJQRxObmUkWir0XO+2yTLcBa+Rtah3Laaf+H2jon602i4iMlJ6oth//0pSm/qzigyjGPbesIoYwqMyBivQ2/Aa+P9io0J3yJIwTaFOF40=</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Administrator</md:GivenName>
    <md:EmailAddress>root@ucs-master.hm-schulen.de</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

Im SimpleSAMLphp flat-file Format - verwenden Sie das, falls auf der Gegenseite eine SimpleSAMLphp-Entität zum Einsatz kommt:

$metadata['https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'https://ucs-sso.hm-schulen.de/simplesamlphp/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => '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',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'root@ucs-master.hm-schulen.de',
      'contactType' => 'technical',
      'givenName' => 'Administrator',
    ),
  ),
);

SAML 2.0 IdP Metadaten

Metadaten

Zertifikate