Login Celesi

SAML 2.0 IdP Metadata

Here is the metadata that SimpleSAMLphp has generated for you. You may send this metadata document to trusted partners to setup a trusted federation.

You can get the metadata xml on a dedicated URL:

http://sso.celesi.com/celesisso/saml2/idp/metadata.php

Metadata

In SAML 2.0 Metadata XML format:

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://sso.celesi.com/celesisso/saml2/idp/metadata.php">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://sso.celesi.com/celesisso/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://sso.celesi.com/celesisso/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Giorgio</md:GivenName>
    <md:SurName>Russo</md:SurName>
    <md:EmailAddress>g.russo@blabs.it</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>

In SimpleSAMLphp flat file format - use this if you are using a SimpleSAMLphp entity on the other side:

$metadata['http://sso.celesi.com/celesisso/saml2/idp/metadata.php'] = array (
  'metadata-set' => 'saml20-idp-remote',
  'entityid' => 'http://sso.celesi.com/celesisso/saml2/idp/metadata.php',
  'SingleSignOnService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
      'Location' => 'http://sso.celesi.com/celesisso/saml2/idp/SSOService.php',
    ),
  ),
  'SingleLogoutService' => 
  array (
    0 => 
    array (
      'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
      'Location' => 'http://sso.celesi.com/celesisso/saml2/idp/SingleLogoutService.php',
    ),
  ),
  'certData' => 'MIID5TCCAs2gAwIBAgIJAI+DsVIKlUeZMA0GCSqGSIb3DQEBCwUAMIGIMQswCQYDVQQGEwJJVDEQMA4GA1UECAwHQ2F0YW5pYTEQMA4GA1UEBwwHQ2F0YW5pYTEPMA0GA1UECgwGQ2VsZXNpMQ8wDQYDVQQLDAZDZWxlc2kxEjAQBgNVBAMMCXRlc3RibGFiczEfMB0GCSqGSIb3DQEJARYQZy5ydXNzb0BibGFicy5pdDAeFw0xNjA1MjMxNTI5MTNaFw0yNjA1MjMxNTI5MTNaMIGIMQswCQYDVQQGEwJJVDEQMA4GA1UECAwHQ2F0YW5pYTEQMA4GA1UEBwwHQ2F0YW5pYTEPMA0GA1UECgwGQ2VsZXNpMQ8wDQYDVQQLDAZDZWxlc2kxEjAQBgNVBAMMCXRlc3RibGFiczEfMB0GCSqGSIb3DQEJARYQZy5ydXNzb0BibGFicy5pdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKC8lNeEX3T/3ui/k0CHWRug6st3+Vbx15EvNX+xVd0Ot4hvNlffN8aWIXXxzVEQpxyI2hTdp9c2pE22CGpkvbKaPjG4WuZQwPbb4NJ0WcJMQBB9CxEGxev3hW7tXP7MnH2Z38eLuVv1mBMunnZY+YVeJ5Fs/ziCT+NnXW93pVk2cRxwO+ar4VF8rPbXNvgtnfLM2FhjdAgxaTVNMXs15TriatRqAC/gSUeIv/flbobn8Fxy20NibaoA3PWU/Cl4VNuExNRPdKrmcxmy2UrUQdOr7OkevefIUWzht7ilA4jvztJLndTYzkN7xXvGMlJoL9/PE7MmUUccnmbH42Bl+WMCAwEAAaNQME4wHQYDVR0OBBYEFNtmG0FBsJYglwDdz2YaCoRI3TyLMB8GA1UdIwQYMBaAFNtmG0FBsJYglwDdz2YaCoRI3TyLMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAHbP+66VYoATSyHmbUOMQhiJaZjB+h7pAloGK/54xh7eaSMYvgCVwxAwRDydJbIGp1i7IaTDuzJ13ht6umXvWyBCKMcHP+sb76WDBVZUQ5e/SeH0ejYnGqCLmRWWB31gYY7AWIgexNOr+dAa5b8YV3WZnmkiqk/L7s4LGYUB0VLPCBaNOlawGxyJh6vsHdhQ434OSaf7Q3JwNLCioQxtyXVboYjATazvxw3xKVdukFg/UbwDnceP81RX88Bofbmumfnq8S4uFElO5hEg24qT1Pt8Q92HAV7vAx7RnVk3mdFXd4lINz4qI4Hlp9BD4Nqpe3LiyGpCbOywkcg8InA0rMA=',
  'NameIDFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient',
  'contacts' => 
  array (
    0 => 
    array (
      'emailAddress' => 'g.russo@blabs.it',
      'contactType' => 'technical',
      'givenName' => 'Giorgio',
      'surName' => 'Russo',
    ),
  ),
);

Certificates

Download the X509 certificates as PEM-encoded files.

idp.crt