KNF:SimpleSAMLphp-sp/en: verschil tussen versies
Naar navigatie springen
Naar zoeken springen
| Regel 51: | Regel 51: | ||
</syntaxhighlight> |
</syntaxhighlight> |
||
| − | ====metadata/saml20-idp-remote.php==== |
+ | <!-- ====metadata/saml20-idp-remote.php==== |
<syntaxhighlight lang="php"> |
<syntaxhighlight lang="php"> |
||
// Add the metadata of the Entree Federation environment |
// Add the metadata of the Entree Federation environment |
||
| Regel 260: | Regel 260: | ||
), |
), |
||
); |
); |
||
| − | </syntaxhighlight> |
+ | </syntaxhighlight> --> |
[[Categorie:Kennisnet Federatie]] |
[[Categorie:Kennisnet Federatie]] |
||
Versie van 15 aug 2018 10:06
Kennisnet Federation: SimpleSAMLphp-sp
 Nederlands
|
 English
|
Installation
Configuration
The Entree Federation requires a couple of specific configurations within SimpleSAMLphp.
NOTE The following examples are additions or changes to the original. The php tags are not included.
authsources.php
'default-sp' => array(
'saml:SP',
// Insert your application entityID (usually the unique url of your service)
'entityID' => 'http://domainname.com',
// Certificate generated in step 1.1 in the Quickstart
'privatekey' => 'saml.pem',
'certificate' => 'saml.crt',
// Changing the standard menu for Identity Providers to the Entree Federation menu
// NOTE: The configuration below is set for the Entree staging environment. When going live the value should be changed to aselect.entree.kennisnet.nl
'idp' => 'aselect-s.entree.kennisnet.nl',
// Changing the Entree Federation attribute formats
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified',
'AttributeNameFormat' => 'urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified',
// Optional configuration to enable pre-login which than can be called by the Identity provider
// 'IDPList' => array( 'entityidofidp', ),
// 'ProxyCount' => 1,
),
config.php
// The path through which simpleSAMLphp is available. This should match with the Alias location in the webserver configuration
'baseurlpath' => 'simplesaml/',
// Change the standard password for the webinterface!!!
'auth.adminpassword' => '!123456!',
// Insert your own contact information
'technicalcontact_name' => 'Servicedesk Kennisnet',
'technicalcontact_email' => 'servicedesk@kennisnet.nl',