SAML 2.0 IdP Metadata

Here is SAML 2.0 metadata that simpleSAMLphp has generated for you. You may send this SAML 2.0 Metadata document to trusted partners to setup a trusted federation.

You can get the metadata xml on a dedicated URL:

Metadata

In SAML 2.0 Meta data XML format:

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<EntityDescriptor xmlns:xsi="https://www.w3.org/2001/XMLSchema-instance" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
 entityID="https://www.rediris.es/sir/shibidp">
    <IDPSSODescriptor
        WantAuthnRequestsSigned="false"
        protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        
		<KeyDescriptor use="signing">
			<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
				<ds:X509Data>
					<ds:X509Certificate>MIIEizCCA3OgAwIBAgILAQAAAAABGH9wHRIwDQYJKoZIhvcNAQEFBQAwXzELMAkGA1UEBhMCQkUxEzARBgNVBAoTCkN5YmVydHJ1c3QxFzAVBgNVBAsTDkVkdWNhdGlvbmFsIENBMSIwIAYDVQQDExlDeWJlcnRydXN0IEVkdWNhdGlvbmFsIENBMB4XDTA4MDMwNTE0NTQ1NloXDTExMDMwNTE0NTQ1NlowODELMAkGA1UEBhMCRVMxEDAOBgNVBAoTB1JlZElSSVMxFzAVBgNVBAMTDnNpci5yZWRpcmlzLmVzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzGboqmBtkD/r6zqL4hvs2g41Y6gCvSC2Ep+tC/b0UKqNSU4cXcQlZrp3AwE18WeU4gBzD5HjLLkYfGxqnBtKHzkBl6imSVoWC6ywyoVBbyhDmb2a+VghNNq6/CtxWHotO5vPLC/EFR9hlex03LWOH9bOIhyk/p0rstDqKpskt6xZg++GWR3kjhD4AKuF8bfPaY+YsWVSpj6fBl3RitMebvvoWhd5b1pGKx5vL0Ym3tl9pk1/YLmSbMOrv8ZoDw9gGIJk9HPLrz8vce6h1HDhnMJkRnJhiqPRM0u0OImoFsSf/rG7Is7XME+5Hpy8KqJBQiBJksHeqQqcxTuYuK2FQIDAQABo4IBbTCCAWkwUAYDVR0gBEkwRzBFBgcqhkixPgEAMDowOAYIKwYBBQUHAgEWLGh0dHA6Ly93d3cuZ2xvYmFsc2lnbi5uZXQvcmVwb3NpdG9yeS9jcHMuY2ZtMA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBRlZaM91zsRowoHJTfJQkpbdndQ4TAdBgNVHQ4EFgQUd9e2gZebCKj74kVQ0jQfTYMlN+cwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5nbG9iYWxzaWduLm5ldC9lZHVjYXRpb25hbC5jcmwwTwYIKwYBBQUHAQEEQzBBMD8GCCsGAQUFBzAChjNodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24ubmV0L2NhY2VydC9lZHVjYXRpb25hbC5jcnQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBkGA1UdEQQSMBCCDnNpci5yZWRpcmlzLmVzMA0GCSqGSIb3DQEBBQUAA4IBAQARFtv4YdiQK27RXvgFsPw8P7oZWYwUj7fqHIZOB0lt6GCJWC7jgantPECKrlo+AI8fUIQS+m6/cdrIkkxuT4nKLY7hx6Dr0kQ+pHxQiV8KCcB7CVWvWsIYjmH+bq8JS7ndIkrkTnM4WgbfZYQ7WR3N8JLCQNZFDTX3P5u4FRV0tM6eB6K+lS+z0Untt7gedk3CDlBjSOkLWfkfYqr/3nuef0O9Sf4e14L9LnsR1Yg63s049Dy7R1ot0oKe3zXUBD16IURo0aXPoamGYsPARdjV8Ufl8sULd4dy2KbKmi3y4Xi9zSACHVpb4JfkXo2Z2b5r74XPwnS1hzTBJlSi1kqF</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</KeyDescriptor>  
        

        
        <!-- Logout endpoints -->
        <SingleLogoutService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="http://sir.rediris.es/simplesaml/saml2/idp/SingleLogoutService.php"
            ResponseLocation="http://sir.rediris.es/simplesaml/saml2/idp/SingleLogoutService.php"
            index="0" 
            isDefault="true"
            />

        
        <!-- Supported Name Identifier Formats -->
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
        <!-- AuthenticationRequest Consumer endpoint -->
        <SingleSignOnService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="http://sir.rediris.es/simplesaml/saml2/idp/SSOService.php"
            index="0" 
            isDefault="true"
            />
        
    </IDPSSODescriptor>
</EntityDescriptor>

In simpleSAMLphp flat file format - use this if you are using a simpleSAMLphp entity on the other side:

	'https://www.rediris.es/sir/shibidp' =>  array(
		'name'                 => 'Type in a name for this entity',
		'description'          => 'and a proper description that would help users know when to select this IdP.',
		'SingleSignOnService'  => 'http://sir.rediris.es/simplesaml/saml2/idp/SSOService.php',
		'SingleLogoutService'  => 'http://sir.rediris.es/simplesaml/saml2/idp/SingleLogoutService.php',
		'certFingerprint'      => 'eca9f9e85f95a4de9ce91c74ccc82b03431333fe'
	),