Instalacion de prueba de un idp SAML

Notas basadas en la version 1.11.0 de SimpleSAMLPHP

1. En config/authsources.php reemplazar su contenido por

  <?php
  $config = array(
      'example-userpass' => array(
          'exampleauth:UserPass',
          'toba:toba' => array(
              'uid' => array('toba'),
              'eduPersonAffiliation' => array('member', 'student'),
          ),
          'employee:employeepass' => array(
              'uid' => array('employee'),
              'eduPersonAffiliation' => array('member', 'employee'),
          ),
      ),
  );

1. En config/config.php, reemplazar las siguientes lineas

  ...
      'enable.saml20-idp'     => true,
  ...
      'enable.http_post' => TRUE,
  ...
      'auth.adminpassword' => '123456',

1. En metadata/saml20-idp-hosted.php descomentar el codigo que esta debajo de esta leyenda:

     /* Uncomment the following to use the uri NameFormat on attributes. */
   

2. En metadata/saml20-sp-remote.php agregar

  $metadata['http://localhost/toba_trunk_sp/module.php/saml/sp/metadata.php/default-sp'] = array (
    'entityid' => 'http://localhost/toba_trunk_sp/module.php/saml/sp/metadata.php/default-sp',
    'contacts' => 
    array (
    ),
    'metadata-set' => 'shib13-sp-remote',
    'SingleLogoutService'      => 'http://localhost/toba_trunk_sp/module.php/saml/sp/saml2-logout.php/default-sp',
    'AssertionConsumerService' => 
    array (
      0 => 
      array (
        'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
        'Location' => 'http://localhost/toba_trunk_sp/module.php/saml/sp/saml2-acs.php/default-sp',
        'index' => 0,
      ),
      1 => 
      array (
        'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:browser-post',
        'Location' => 'http://localhost/toba_trunk_sp/module.php/saml/sp/saml1-acs.php/default-sp',
        'index' => 1,
      ),
      2 => 
      array (
        'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact',
        'Location' => 'http://localhost/toba_trunk_sp/module.php/saml/sp/saml2-acs.php/default-sp',
        'index' => 2,
      ),
      3 => 
      array (
        'Binding' => 'urn:oasis:names:tc:SAML:1.0:profiles:artifact-01',
        'Location' => 'http://localhost/toba_trunk_sp/module.php/saml/sp/saml1-acs.php/default-sp/artifact',
        'index' => 3,
      ),
    ),
  );

1. Crear un archivo vacio modules/exampleauth/enable

2. Al loguearse usarlo con usuario toba y password toba