KNF:SimpleSAMLphp-sp/en: verschil tussen versies
Naar navigatie springen
Naar zoeken springen
Geen bewerkingssamenvatting |
|||
| Regel 51: | Regel 51: | ||
</syntaxhighlight> | </syntaxhighlight> | ||
====metadata/saml20-idp-remote.php==== | <!-- ====metadata/saml20-idp-remote.php==== | ||
<syntaxhighlight lang="php"> | <syntaxhighlight lang="php"> | ||
// Add the metadata of the Entree Federation environment | // Add the metadata of the Entree Federation environment | ||
| Regel 260: | Regel 260: | ||
), | ), | ||
); | ); | ||
</syntaxhighlight> | </syntaxhighlight> --> | ||
[[Categorie:Kennisnet Federatie]] | [[Categorie:Kennisnet Federatie]] | ||
[[Categorie:Entree Federatie]] | [[Categorie:Entree Federatie]] | ||
Versie van 15 aug 2018 11:06
Kennisnet Federation: SimpleSAMLphp-sp
 Nederlands
|
 English
|
Installation
Configuration
The Entree Federation requires a couple of specific configurations within SimpleSAMLphp.
NOTE The following examples are additions or changes to the original. The php tags are not included.
authsources.php
'default-sp' => array(
'saml:SP',
// Insert your application entityID (usually the unique url of your service)
'entityID' => 'http://domainname.com',
// Certificate generated in step 1.1 in the Quickstart
'privatekey' => 'saml.pem',
'certificate' => 'saml.crt',
// Changing the standard menu for Identity Providers to the Entree Federation menu
// NOTE: The configuration below is set for the Entree staging environment. When going live the value should be changed to aselect.entree.kennisnet.nl
'idp' => 'aselect-s.entree.kennisnet.nl',
// Changing the Entree Federation attribute formats
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
'AttributeNameFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified',
// Optional configuration to enable pre-login which than can be called by the Identity provider
// 'IDPList' => array( 'entityidofidp', ),
// 'ProxyCount' => 1,
),
config.php
// The path through which simpleSAMLphp is available. This should match with the Alias location in the webserver configuration
'baseurlpath' => 'simplesaml/',
// Change the standard password for the webinterface!!!
'auth.adminpassword' => '!123456!',
// Insert your own contact information
'technicalcontact_name' => 'Servicedesk Kennisnet',
'technicalcontact_email' => 'servicedesk@kennisnet.nl',