AltiPlan - SSO

Internal EG documentation: https://confluence.eg.dk/spaces/SDP/pages/440405823/27.+Altiplan+Classic

Customer	AD domain	Resolved	EG Metadata URL (to setup SAML)	Customer metadata
Frelsens Hær			https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frelsenshaer/endpoint/descriptor
Høje Taastrup K (htk)			https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/htk/endpoint/descriptor	xml-file
Randers K		R	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/randers-k/endpoint/descriptor	https://adfs.randers.dk/FederationMetadata/2007-06/FederationMetadata.xml
Odense K		R	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/odense-k/endpoint/descriptor	https://login.microsoftonline.com/fbb1c53f-4cf3-4ea6-98de-f6abc38cffa9/federationmetadata/2007-06/federationmetadata.xml?appid=3a890c39-7310-4953-b6ac-496eed2fa168
Brøndby K		D	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/brondby-k/endpoint/descriptor	https://login.microsoftonline.com/c7407a95-807f-4986-80cc-a3e66d11ab35/federationmetadata/2007-06/federationmetadata.xml?appid=2fea92d2-291f-42d6-bde5-66d02067dfd8
Frederiksberg K		D	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/frederiksberg-k/endpoint/descriptor
OK-Fonden	okf.dk	D	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/ok-fond/endpoint/descriptor
Region N		R	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-nord/endpoint/descriptor
Region M		R	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-midt/endpoint/descriptor
Region S		R	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-syd/endpoint/descriptor
Region H			https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-h/endpoint/descriptor
Region Sj			https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/region-sj/endpoint/descriptor
Aarhus K			https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/aarhus-k/endpoint/descriptor
Kbh K			https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/kbh-k/endpoint/descriptor
Haderslev K	intern.udcit.dk	D	https://www.silkeborgdata.dk/auth/realms/altiplanclassic-realm/broker/haderslev-k/endpoint/descriptor	https://login.microsoftonline.com/8e547722-4973-4f1d-b42f-d83ff3374932/federationmetadata/2007-06/federationmetadata.xml?appid=c3f8c3ea-b30a-48f6-97c5-ea54ed8b3c44

1. Sent URL with EG metadata to the customer, necessary to configuring integration, along with certificates used for signing and encryption.
2. We require that the communication is:
   • Signed (certificate is in the metadata)
   • encrypted (certificate is in the metadata)
3. Customers need to know claims to return to us in SMAL follow information in claims having names as stated in the table. We also need particular claims - which are also in metadata:

Attribute	Claim
username	https://data.gov.dk/model/core/eid/alias
firstName	https://data.gov.dk/model/core/eid/firstName
lastName	https://data.gov.dk/model/core/eid/lastName
email	https://data.gov.dk/model/core/eid/email

4. We also need a URL containing their metadata