Jump to content

AltiPlan - SSO: Difference between revisions

From EG Wiki
No edit summary
No edit summary
 
(8 intermediate revisions by 3 users not shown)
Line 6: Line 6:
!AD domain
!AD domain
!Resolved
!Resolved
!Metadata URL (to setup SAML)
!EG Metadata URL (to setup SAML)
!Customer metadata
|-
|Slagelse Kommune (Antvorskov)
|
|
|
|https://sso.slagelse.dk/federationmetadata/2007-06/federationmetadata.xml
|-
|Frelsens Hær (frelsenshaer)
|
|
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frelsenshaer/endpoint/descriptor
|https://login.microsoftonline.com/6cf97196-9396-42e3-8b3d-41c4c6d52e3d/federationmetadata/2007-06/federationmetadata.xml
|-
|Høje Taastrup K (htk)
|
|
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/htk/endpoint/descriptor
|xml-file
|-
|Randers K
|
|R
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/randers-k/endpoint/descriptor
|https://adfs.randers.dk/FederationMetadata/2007-06/FederationMetadata.xml
|-
|-
|Odense K
|Odense K
|
|
|
|R
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/odense-k/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/odense-k/endpoint/descriptor
|https://login.microsoftonline.com/fbb1c53f-4cf3-4ea6-98de-f6abc38cffa9/federationmetadata/2007-06/federationmetadata.xml?appid=3a890c39-7310-4953-b6ac-496eed2fa168
|-
|-
|Brøndby K
|Brøndby K
|
|
|R
|D
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/brondby-k/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/brondby-k/endpoint/descriptor
|https://login.microsoftonline.com/c7407a95-807f-4986-80cc-a3e66d11ab35/federationmetadata/2007-06/federationmetadata.xml?appid=2fea92d2-291f-42d6-bde5-66d02067dfd8
|-
|-
|Frederiksberg K
|Frederiksberg K
Line 22: Line 49:
|D
|D
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frederiksberg-k/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frederiksberg-k/endpoint/descriptor
|
|-
|-
|OK-Fonden
|OK-Fonden
Line 27: Line 55:
|D
|D
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/ok-fond/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/ok-fond/endpoint/descriptor
|
|-
|-
|Region N
|Region N
Line 32: Line 61:
|R
|R
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-nord/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-nord/endpoint/descriptor
|
|-
|-
|Region M
|Region M
Line 37: Line 67:
|R
|R
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-midt/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-midt/endpoint/descriptor
|
|-
|-
|Region S
|Region S
Line 42: Line 73:
|R
|R
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-syd/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-syd/endpoint/descriptor
|
|-
|-
|Region H
|Region H
Line 47: Line 79:
|
|
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-h/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-h/endpoint/descriptor
|
|-
|-
|Region Sj
|Region Sj
Line 52: Line 85:
|
|
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-sj/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-sj/endpoint/descriptor
|
|-
|-
|Aarhus K
|Aarhus K
Line 57: Line 91:
|
|
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/aarhus-k/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/aarhus-k/endpoint/descriptor
|
|-
|-
|Kbh K
|Kbh K
Line 62: Line 97:
|
|
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/kbh-k/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/kbh-k/endpoint/descriptor
|
|-
|-
|Haderslev K
|Haderslev K
Line 67: Line 103:
|D
|D
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/haderslev-k/endpoint/descriptor
|https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/haderslev-k/endpoint/descriptor
|https://login.microsoftonline.com/8e547722-4973-4f1d-b42f-d83ff3374932/federationmetadata/2007-06/federationmetadata.xml?appid=c3f8c3ea-b30a-48f6-97c5-ea54ed8b3c44
|}
|}



Latest revision as of 12:56, 10 September 2026

Internal EG documentation: https://confluence.eg.dk/spaces/SDP/pages/440405823/27.+Altiplan+Classic

Customer AD domain Resolved EG Metadata URL (to setup SAML) Customer metadata
Slagelse Kommune (Antvorskov) https://sso.slagelse.dk/federationmetadata/2007-06/federationmetadata.xml
Frelsens Hær (frelsenshaer) https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frelsenshaer/endpoint/descriptor https://login.microsoftonline.com/6cf97196-9396-42e3-8b3d-41c4c6d52e3d/federationmetadata/2007-06/federationmetadata.xml
Høje Taastrup K (htk) https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/htk/endpoint/descriptor xml-file
Randers K R https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/randers-k/endpoint/descriptor https://adfs.randers.dk/FederationMetadata/2007-06/FederationMetadata.xml
Odense K R https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/odense-k/endpoint/descriptor https://login.microsoftonline.com/fbb1c53f-4cf3-4ea6-98de-f6abc38cffa9/federationmetadata/2007-06/federationmetadata.xml?appid=3a890c39-7310-4953-b6ac-496eed2fa168
Brøndby K D https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/brondby-k/endpoint/descriptor https://login.microsoftonline.com/c7407a95-807f-4986-80cc-a3e66d11ab35/federationmetadata/2007-06/federationmetadata.xml?appid=2fea92d2-291f-42d6-bde5-66d02067dfd8
Frederiksberg K D https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frederiksberg-k/endpoint/descriptor
OK-Fonden okf.dk D https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/ok-fond/endpoint/descriptor
Region N R https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-nord/endpoint/descriptor
Region M R https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-midt/endpoint/descriptor
Region S R https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-syd/endpoint/descriptor
Region H https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-h/endpoint/descriptor
Region Sj https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-sj/endpoint/descriptor
Aarhus K https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/aarhus-k/endpoint/descriptor
Kbh K https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/kbh-k/endpoint/descriptor
Haderslev K intern.udcit.dk D https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/haderslev-k/endpoint/descriptor https://login.microsoftonline.com/8e547722-4973-4f1d-b42f-d83ff3374932/federationmetadata/2007-06/federationmetadata.xml?appid=c3f8c3ea-b30a-48f6-97c5-ea54ed8b3c44
  1. Sent URL with EG metadata to the customer, necessary to configuring integration, along with certificates used for signing and encryption.
  2. We require that the communication is:
    • Signed (certificate is in the metadata)
    • encrypted (certificate is in the metadata)
  3. Customers need to know claims to return to us in SMAL follow information in claims having names as stated in the table. We also need particular claims - which are also in metadata:
Attribute Claim
username https://data.gov.dk/model/core/eid/alias
firstName https://data.gov.dk/model/core/eid/firstName
lastName https://data.gov.dk/model/core/eid/lastName
email https://data.gov.dk/model/core/eid/email

4. We also need a URL containing their metadata