SAML 2.0 IdP Metadata
Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.
You can get the metadata xml on a dedicated URL:
https://accounts.fusi.co.id/sso/saml2/idp/metadata.php
Metadata
In SAML 2.0 Metadata XML format:
<?xml version="1.0"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://accounts.fusi.co.id/sso/saml2/idp/metadata.php"> <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="encryption"> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://accounts.fusi.co.id/sso/saml2/idp/SingleLogoutService.php"/> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat> <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://accounts.fusi.co.id/sso/saml2/idp/SSOService.php"/> </md:IDPSSODescriptor> </md:EntityDescriptor>
In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:
$metadata['https://accounts.fusi.co.id/sso/saml2/idp/metadata.php'] = [ 'metadata-set' => 'saml20-idp-remote', 'entityid' => 'https://accounts.fusi.co.id/sso/saml2/idp/metadata.php', 'SingleSignOnService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://accounts.fusi.co.id/sso/saml2/idp/SSOService.php', ], ], 'SingleLogoutService' => [ [ 'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect', 'Location' => 'https://accounts.fusi.co.id/sso/saml2/idp/SingleLogoutService.php', ], ], 'certData' => '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', 'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient', ];
Certificates
Download the X509 certificates as PEM-encoded files.