forked from phpList/phplist-plugin-saml2
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathsaml20-sp-remote.php
executable file
·43 lines (39 loc) · 1.78 KB
/
saml20-sp-remote.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
<?php
/**
* SAML 2.0 remote SP metadata for SimpleSAMLphp.
*
* See: https://simplesamlphp.org/docs/stable/simplesamlphp-reference-sp-remote
*/
// /*
// * Example SimpleSAMLphp SAML 2.0 SP
// */
// // $metadata['sso.phplist.com'] = [
// // // 'AssertionConsumerService' => 'http://phplist.test/simplesaml-login',
// // 'SingleLogoutService' => 'http://phplist.test/simplesaml-logout',
// // ];
/*
* This example shows an example config that works with Google Workspace (G Suite / Google Apps) for education.
* What is important is that you have an attribute in your IdP that maps to the local part of the email address at
* Google Workspace. In example, if your Google account is foo.com, and you have a user that has an email [email protected],
* then you must set the simplesaml.nameidattribute to be the name of an attribute that for this user has the
* value of 'john'.
*/
$metadata['google.com'] = [
'AssertionConsumerService' => 'https://www.google.com/a/g.feide.no/acs',
'NameIDFormat' => 'urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress',
'simplesaml.nameidattribute' => 'uid',
'simplesaml.attributes' => false,
];
$metadata['https://legacy.example.edu'] = [
'AssertionConsumerService' => 'https://legacy.example.edu/saml/acs',
/*
* Currently, SimpleSAMLphp defaults to the SHA-256 hashing algorithm.
* Uncomment the following option to use SHA-1 for signatures directed
* at this specific service provider if it does not support SHA-256 yet.
*
* WARNING: SHA-1 is disallowed starting January the 1st, 2014.
* Please refer to the following document for more information:
* http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-131A.pdf
*/
//'signature.algorithm' => 'http://www.w3.org/2000/09/xmldsig#rsa-sha1',
];