File size: 1,661 Bytes
ecf9cb9 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 | <?xml version="1.0" encoding="UTF-8"?>
<!--
vault-live SP Metadata
EntityID: https://vault-live.local/sp
Generated by vault-live/saml/metadata_builder.py
Trust is established via this document — not via public CA.
-->
<md:EntityDescriptor
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
entityID="https://vault-live.local/sp"
validUntil="2027-01-01T00:00:00Z">
<md:SPSSODescriptor
AuthnRequestsSigned="true"
WantAssertionsSigned="true"
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<!-- SP signing certificate (DER/Base64) — replace with generated cert -->
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>
PLACEHOLDER_SP_SIGNING_CERT
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<!-- SP encryption certificate (DER/Base64) — for EncryptedAssertion -->
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>
PLACEHOLDER_SP_ENCRYPTION_CERT
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:NameIDFormat>
urn:oasis:names:tc:SAML:2.0:nameid-format:transient
</md:NameIDFormat>
<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://vault-live.local/sp/acs"
index="1"
isDefault="true"/>
</md:SPSSODescriptor>
</md:EntityDescriptor>
|