security - SAML2.0 FilesystemMetadataProvider -
i have sample metadata file , need upload identity server local file system , populate every saml entities through library http://grepcode.com/file/repo1.maven.org/maven2/org.opensaml/opensaml/2.4.1/org/opensaml/saml2/metadata/provider/filesystemmetadataprovider.java?av=f
i need issuer name , assertion consumer url populate samlsso object need know how elements using filesystembasedmetadataprovider
here sample metadatafile
<entitydescriptor xmlns="urn:oasis:names:tc:saml:2.0:metadata" entityid="loadbalancer-9.siroe.com"> <spssodescriptor authnrequestssigned="false" wantassertionssigned="false" protocolsupportenumeration= "urn:oasis:names:tc:saml:2.0:protocol"> <keydescriptor use="signing"> <keyinfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <x509data> <x509certificate> miicydccagqgawibagicboowdqyjkozihvcnaqeebqawgzixczajbgnvbaytalvtmrmweqydvqqi ewpdywxpzm9ybmlhmrqwegydvqqhewttyw50ysbdbgfyyteembwga1uechmvu3vuie1py3jvc3lz dgvtcybjbmmumrowgaydvqqlexfjzgvudgl0esbtzxj2awnlczecmboga1ueaxmtq2vydglmawnh dgugtwfuywdlcjaefw0wnjexmdixotexmzrafw0xmda3mjkxotexmzramdcxejaqbgnvbaotcxnp cm9llmnvbtehmb8ga1ueaxmybg9hzgjhbgfuy2vyltkuc2lyb2uuy29tmigfma0gcsqgsib3dqeb aquaa4gnadcbiqkbgqcjowa5qoauuvnknqf5pdgajseowlvx/jnuybksdpxlzraeiy2uhvwpobgb eetsuappbvbocitchakpi6z/afdh3wmjuij9xd8r1c+q//7suo0ign0orycddhhoo0asdnnxgf9v treaqkm9dj7yn7kqhjo2erymgyxtr/z5il5f+widaqabo2awxjarbglghkgbhvhcaqeebamcbkaw dgydvr0paqh/baqdagtwmb8ga1udiwqymbaafdugitfltcfswynltxdl7cmdukuumbgga1udeqqr ma+bdw1hbgxhqhn1bi5jb20wdqyjkozihvcnaqeebqadqqb/6dob6srqczu2oenm9eqr0gube85e nttxu4a7x1nafxzyxk1iq1vmarkmjdb19qejiejkzldk4us7ymlf1nfs </x509certificate> </x509data> </keyinfo> </keydescriptor> <keydescriptor use="encryption"> <keyinfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <x509data> <x509certificate> miictdccafagawibagicbo8wdqyjkozihvcnaqeebqawgzixczajbgnvbaytalvtmrmweqydvqqi ewpdywxpzm9ybmlhmrqwegydvqqhewttyw50ysbdbgfyyteembwga1uechmvu3vuie1py3jvc3lz dgvtcybjbmmumrowgaydvqqlexfjzgvudgl0esbtzxj2awnlczecmboga1ueaxmtq2vydglmawnh dgugtwfuywdlcjaefw0wnjexmdcymzu2mtdafw0xmda4mdmymzu2mtdamcmxitafbgnvbamtggxv ywriywxhbmnlci05lnnpcm9llmnvbtcbnzanbgkqhkig9w0baqefaaobjqawgykcgyeaw574iru6 hsso4lxw/ogtxyfsbgv6xrvooy3v+j1pz51kkejcdjdjxnkkgn3/356awiaqbcymwd59t0zsqyfr hn+45uyjyxrbmvjselpvnoxlub9jsjulfgx0yjh4w+kszszcxatochbj/rjtkzuzy6v9to/hkh3s inqb4a3uagmcaweaaangmf4weqyjyiziayb4qgebbaqdagzama4ga1uddweb/wqeawie8dafbgnv hsmegdawgbq7oce35uwn7fsjs01w5e3da1crrjaybgnvhreeetapgq1tywxsyubzdw4uy29tma0g csqgsib3dqebbauaa0eamlbfbg/ff0xkv4dor5leqmftzkqgdld81cxynfzlf7xfnoqi6hpia90i x5ql0ejivijaycmguya+/ywjg2fgoa== </x509certificate> </x509data>` </keyinfo> <encryptionmethod algorithm= "https://www.w3.org/2001/04/xmlenc#aes128-cbc"> <keysize xmlns="https://www.w3.org/2001/04/xmlenc#">128</keysize> </encryptionmethod> </keydescriptor> <singlelogoutservice binding="urn:oasis:names:tc:saml:2.0:bindings:http-redirect" location="https://loadbalancer-9.siroe.com:3443/federation/ spsloredirect/metaalias/sp" responselocation="https://loadbalancer-9.siroe.com:3443/ federation/spsloredirect/metaalias/sp"/> <singlelogoutservice binding="urn:oasis:names:tc:saml:2.0:bindings:soap" location="https://loadbalancer-9.siroe.com:3443/ federation/spslosoap/metaalias/sp"/> <managenameidservice binding="urn:oasis:names:tc:saml:2.0:bindings:http-redirect" location="https://loadbalancer-9.siroe.com:3443/federation/ spmniredirect/metaalias/sp" responselocation="https://loadbalancer-9.siroe.com:3443/ federation/spmniredirect/metaalias/sp"/> <managenameidservice binding="urn:oasis:names:tc:saml:2.0:bindings:soap" location="https://loadbalancer-9.siroe.com:3443/ federation/spmnisoap/metaalias/sp" responselocation="https://loadbalancer-9.siroe.com:3443/ federation/spmnisoap/metaalias/sp"/> <nameidformat> urn:oasis:names:tc:saml:2.0:nameid-format:persistent </nameidformat> <nameidformat> urn:oasis:names:tc:saml:2.0:nameid-format:transient </nameidformat> <assertionconsumerservice isdefault="true" index="0" binding="urn:oasis:names:tc:saml:2.0:bindings:http-artifact" location="https://loadbalancer-9.siroe.com:3443/ federation/consumer/metaalias/sp"/> <assertionconsumerservice index="1" binding="urn:oasis:names:tc:saml:2.0:bindings:http-post" location="https://loadbalancer-9.siroe.com:3443/ federation/consumer/metaalias/sp"/> </spssodescriptor> <test>true</test> <issuer>www.tryyujh.com</issuer> </entitydescriptor>
can please figure out elements indicating issuer name , assertion consumer url , advice me method , how can use it?
the issuer entityid, so:
loadbalancer-9.siroe.com
and assertion consumer url is:
https://loadbalancer-9.siroe.com:3443/federation/consumer/metaalias/sp
Comments
Post a Comment