SAML 2.0 SP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/metadata.php/cuny-sp
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/metadata.php/cuny-sp">
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml2-logout.php/cuny-sp"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml2-acs.php/cuny-sp" index="0"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml1-acs.php/cuny-sp" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml2-acs.php/cuny-sp" index="2"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml1-acs.php/cuny-sp/artifact" index="3"/>
<md:AttributeConsumingService index="0">
<md:ServiceName xml:lang="en">SafetyStratus-cuny</md:ServiceName>
<md:ServiceName xml:lang="no">SafetyStratus-cuny</md:ServiceName>
<md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="sn"/>
<md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="givenName"/>
<md:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="employeeNumber"/>
<md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eppn"/>
<md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="mail"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:ContactPerson contactType="technical">
<md:GivenName>Administrator</md:GivenName>
<md:EmailAddress>admin@safetystratus.com</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/metadata.php/cuny-sp'] = array (
'SingleLogoutService' =>
array (
0 =>
array (
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
'Location' => 'https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml2-logout.php/cuny-sp',
),
),
'AssertionConsumerService' =>
array (
0 =>
array (
'index' => 0,
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
'Location' => 'https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml2-acs.php/cuny-sp',
),
1 =>
array (
'index' => 1,
'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
'Location' => 'https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml1-acs.php/cuny-sp',
),
2 =>
array (
'index' => 2,
'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
'Location' => 'https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml2-acs.php/cuny-sp',
),
3 =>
array (
'index' => 3,
'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
'Location' => 'https://ssp.labcliq.com/simplesamlphp/module.php/saml/sp/saml1-acs.php/cuny-sp/artifact',
),
),
'name' =>
array (
'en' => 'SafetyStratus-cuny',
'no' => 'SafetyStratus-cuny',
),
'attributes' =>
array (
0 => 'urn:oid:2.5.4.4',
1 => 'urn:oid:2.5.4.42',
2 => 'urn:oid:2.16.840.1.113730.3.1.3',
3 => 'urn:oid:1.3.6.1.4.1.5923.1.1.1.6',
4 => 'urn:oid:0.9.2342.19200300.100.1.3',
),
'attributes.NameFormat' => 'urn:oasis:names:tc:SAML:2.0:attrname-format:uri',
'contacts' =>
array (
0 =>
array (
'emailAddress' => 'admin@safetystratus.com',
'contactType' => 'technical',
'givenName' => 'Administrator',
),
),
'certData' => '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',
);