Technics:SAML 2.0

From CoPlanner 10
Jump to navigationJump to search

To use SAML, in the server folder there have to be the folder SAML2. In the folder SAML2 there have to be the following files:

  • IdentityProviderMetadata.xml
  • ServiceProviderCertificate.pfx

IdentityProviderMetadata.xml

That file must include the metadata of your identity provider.

ServiceProviderCertificate.pfx

The CoPlanner Server signs the SAML communication with that certificate. The identiy provider muss trust that certificate.

Side Note: Creation of a certificate with OpenSSL

This sample creates the ServiceProviderCertificate.pfx with a runtime of 2000 days.


openssl req -new -newkey rsa:1024 -nodes -x509 -keyout ./temp.key -out ./temp.cert -days 2000

openssl pkcs12 -in temp.cert -inkey temp.key -export -clcerts -out ServiceProviderCertificate.pfx