updated SAML metadata examples

This commit is contained in:
thomasDOTde 2017-10-31 23:30:52 +01:00
parent 31eaee8e0b
commit dff5d7cf78
4 changed files with 17 additions and 76 deletions

View File

@ -1,29 +0,0 @@
{
"security": {
"nameIdEncrypted": false,
"authnRequestsSigned": false,
"logoutRequestSigned": false,
"logoutResponseSigned": false,
"signMetadata": false,
"wantMessagesSigned": true,
"wantAssertionsSigned": true,
"wantNameIdEncrypted": false
},
"contactPerson": {
"technical": {
"givenName": "ahd Service Operation Center",
"emailAddress": "servicedesk@ahd.de"
},
"support": {
"givenName" : "ahd Service Operation Center",
"emailAddress": "servicedesk@ahd.de"
}
},
"organization": {
"en-US": {
"name": "PowerDNS-Admin",
"displayname": "PowerDNS-Admin",
"url": "https://10.12.95.95"
}
}
}

View File

@ -1,30 +0,0 @@
{
"strict": true,
"debug": true,
"sp": {
"entityId": "http://10.12.95.95",
"assertionConsumerService": {
"url": "https://10.12.95.95/saml/authorized",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
},
"singleLogoutService": {
"url": "https://10.12.95.95/saml/sls",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
},
"NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"x509cert": "",
"privateKey": ""
},
"idp": {
"entityId": "http://fs.ahd-vcloud.biz/adfs/services/trust",
"singleSignOnService": {
"url": "https://fs.ahd-vcloud.biz/adfs/ls/",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
},
"singleLogoutService": {
"url": "https://fs.ahd-vcloud.biz/adfs/ls/",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
},
"x509cert": "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
}
}

View File

@ -5,25 +5,25 @@
"logoutRequestSigned": false, "logoutRequestSigned": false,
"logoutResponseSigned": false, "logoutResponseSigned": false,
"signMetadata": false, "signMetadata": false,
"wantMessagesSigned": false, "wantMessagesSigned": true,
"wantAssertionsSigned": false, "wantAssertionsSigned": true,
"wantNameIdEncrypted": false "wantNameIdEncrypted": false
}, },
"contactPerson": { "contactPerson": {
"technical": { "technical": {
"givenName": "technical_name", "givenName": "<Contact Person>",
"emailAddress": "technical@example.com" "emailAddress": "<contact email>"
}, },
"support": { "support": {
"givenName": "support_name", "givenName" : "<Contact Person>",
"emailAddress": "support@example.com" "emailAddress": "<contact email>"
} }
}, },
"organization": { "organization": {
"en-US": { "en-US": {
"name": "sp_test", "name": "PowerDNS-Admin",
"displayname": "SP test", "displayname": "PowerDNS-Admin",
"url": "http://sp.example.com" "url": "https://<powerdnsadmin-url>"
} }
} }
} }

View File

@ -2,29 +2,29 @@
"strict": true, "strict": true,
"debug": true, "debug": true,
"sp": { "sp": {
"entityId": "http://127.0.0.1/saml/metadata", "entityId": "http://<powerdns hostname>",
"assertionConsumerService": { "assertionConsumerService": {
"url": "http://127.0.0.1/saml/authorized", "url": "https://<powerdns hostname>/saml/authorized",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
}, },
"singleLogoutService": { "singleLogoutService": {
"url": "https://127.0.0.1/saml/sls", "url": "https://<powerdns hostname>/saml/sls",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
}, },
"NameIDFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified", "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress",
"x509cert": "", "x509cert": "",
"privateKey": "" "privateKey": ""
}, },
"idp": { "idp": {
"entityId": "https://app.onelogin.com/saml/metadata", "entityId": "http://<adfs hostname>/adfs/services/trust",
"singleSignOnService": { "singleSignOnService": {
"url": "https://app.onelogin.com/trust/saml2/http-post/sso/", "url": "https://<adfs hostname>/adfs/ls/",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
}, },
"singleLogoutService": { "singleLogoutService": {
"url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/", "url": "https://<adfs hostname>/adfs/ls/",
"binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
}, },
"x509cert": "" "x509cert": "<certificate data directly without linebreaks in pem-format>"
} }
} }