SAML 2.0 IdP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://sso.indonet.co.id/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sso.indonet.co.id/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.indonet.co.id/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.indonet.co.id/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Sysop</md:GivenName> <md:SurName>Indonet</md:SurName> <md:EmailAddress>mailto:sdo@indonet.co.id</md:EmailAddress> </md:ContactPerson> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['https://sso.indonet.co.id/saml2/idp/metadata.php'] = [ 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://sso.indonet.co.id/saml2/idp/metadata.php', 'SingleSignOnService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://sso.indonet.co.id/saml2/idp/SSOService.php', ], ], 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://sso.indonet.co.id/saml2/idp/SingleLogoutService.php', ], ], 'certData' => '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', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', 'contacts' => [ [ 'emailAddress' => 'sdo@indonet.co.id', 'contactType' => 'technical', 'givenName' => 'Sysop', 'surName' => 'Indonet', ], ], ];
Certificates
Download the X509 certificates as PEM-encoded files.