
8-57
UserGuide for Cisco Digital Media Manager5.4.x
OL-15762-05
Chapter8      Authentication and Fe derated Identity
  Reference
        <AssertionIDRequestService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
Location="http://OpenAM.example.com:8080/opensso/AIDReqSoap/IDPRole/metaAlias/idp"/>
        <AssertionIDRequestService Binding="urn:oasis:names:tc:SAML:2.0:bindings:URI" 
Location="http://OpenAM.example.com:8080/opensso/AIDReqUri/IDPRole/metaAlias/idp"/>
    </IDPSSODescriptor>
</EntityDescriptor>
Exported IdP Metadata Sample from Shibboleth<EntityDescriptor entityID=”https://sso.example.com/idp/shibboleth”
                  xmlns=”urn:oasis:names:tc:SAML:2.0:metadata”
                  xmlns:ds=”http://www.w3.org/2000/09/xmldsig#”
                  xmlns:shibmd=”urn:mace:shibboleth:metadata:1.0”
                  xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance”>
    <IDPSSODescriptor protocolSupportEnumeration=”urn:mace:shibboleth:1.0 
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol”>
        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIICRTCCAa6gAwIBAgIETOrk+jANBgkqhkiG9w0BAQUFADBmMQswCQYDVQQGEwJVUzELMAkGA1UE
CBMCQ0ExCzAJBgNVBAcTAlNKMQ4wDAYDVQQKEwVDSVNDTzEOMAwGA1UECxMFQ0lTQ08xHTAbBgNV
BAMTFGZydWl0bG9vcHMuY2lzY28uY29tMCAXDTEwMTEyMjIxNDczOFoYDzIxMTAxMDI5MjE0NzM4
WjBmMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExCzAJBgNVBAcTAlNKMQ4wDAYDVQQKEwVDSVND
TzEOMAwGA1UECxMFQ0lTQ08xHTAbBgNVBAMTFGZydWl0bG9vcHMuY2lzY28uY29tMIGfMA0GCSqG
SIb3DQEBAQUAA4GNADCBiQKBgQCX0tTliXR7pGh9NNEKbIkChNB0t/H+2ysm4xr1Y60+hFssJGGx
qnNv8UEqH7SIk7Z9eDBW6lJreiH3KtSWIJBvtV1hLGZAlwPTu/b6GzVHGX9uZaj3Jyw0N8rul8k8
BoTsdNag7ZhQ7vIfcQ1HjLw9RT3u+n5ZkD+hbwEKtKePEwIDAQABMA0GCSqGSIb3DQEBBQUAA4GB
AA932Gf5lEY1c3w/ALuEXiDdtLnzRrNZxF7ZneDPfnjygNMOLgYTwCARdjdW40Xurd2RGSJC3MYJ
bhqMIStSTbYPBB6KLuEWkk+AW+/uprX5T49SY6hS918tcErmWdW0CYFlIiRa2hMaJz6AbWAqKR80
+n5IWxwEOlkmOPdWd1B/
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <ArtifactResolutionService 
Binding=”urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding”
Location=”http://sso.example.com:8080/idp/profile/SAML1/SOAP/ArtifactResolution” 
                                   index=”1”/>
        <ArtifactResolutionService Binding=”urn:oasis:names:tc:SAML:2.0:bindings:SOAP”
Location=”http://sso.example.com:8080/idp/profile/SAML2/SOAP/ArtifactResolution” 
                                   index=”2”/>
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <SingleSignOnService Binding=”urn:mace:shibboleth:1.0:profiles:AuthnRequest” 
Location=”http://sso.example.com:8080/idp/profile/Shibboleth/SSO” />
        <SingleSignOnService Binding=”urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST” 
Location=”http://sso.example.com:8080/idp/profile/SAML2/POST/SSO” />
        <SingleSignOnService 
Binding=”urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign”