Technics:SAML 2.0

From CoPlanner 11
Revision as of 14:00, 16 May 2023 by S.bretis (talk | contribs)

(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

To use SAML, in the server folder there have to be the folder SAML2. In the folder SAML2 there have to be the following files:

  • IdentityProviderMetadata.xml
  • ServiceProviderCertificate.pfx or alternatively ServiceProviderCertificateThumbprint.txt
  • ServiceProviderEntityID.txt from CoPlanner 11 Release 3 2023

IdentityProviderMetadata.xml

That file must include the metadata of your identity provider.

ServiceProviderCertificate.pfx

The CoPlanner Server signs the SAML communication with that certificate. The identiy provider muss trust that certificate.

ServiceProviderCertificateThumbprint.txt

It is possible to use the ServiceProviderCertificateThumbprint.txt instead of the ServiceProviderCertificate.pfx. The content of this file will be interpreted as the thumbprint to use.

ServiceProviderEntityID.txt

From CoPlanner 11 Release 3 2023 it is necessary to define the entity-ID. You can define it freely - but there are a few recommendations like it should follow the URL format.

Side Note: Creation of a certificate with OpenSSL

This sample creates the ServiceProviderCertificate.pfx with a runtime of 2000 days.


openssl req -new -newkey rsa:1024 -nodes -x509 -keyout ./temp.key -out ./temp.cert -days 2000

openssl pkcs12 -in temp.cert -inkey temp.key -export -clcerts -out ServiceProviderCertificate.pfx

Retrieved from "https://copsupport.coplanner.com/help11_en/index.php?title=Technics:SAML_2.0&oldid=16376"