saml settings

EntityId	i-sharedx-web-test3.ccms.jp
metadata_file	i-ShareDX.xml
identifer	https://sts.windows.net/cf985113-6cfd-471a-a543-ca716d2b3fdf/

metadata

<?xml version="1.0" encoding="utf-8"?><EntityDescriptor ID="_25653934-b78d-4509-becd-6720ceec2c56" entityID="https://sts.windows.net/cf985113-6cfd-471a-a543-ca716d2b3fdf/" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI="#_25653934-b78d-4509-becd-6720ceec2c56"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>XkoFDuw5Vie8+miNNC58QWVhy09uQKZrjLNjdc5AGHI=</DigestValue></Reference></SignedInfo><SignatureValue>TjGMAoKqZJWFsp7rg3be480Zxlfx6e0kbNN3yfG6udMVDXD/EquSmZY72gyLOCbKoU40Yry7rTXzHq3id3CeYFMR+uuimhYMlkCH8VClFHkYzLbGsy1D+w0/jPxNETaCpCbZapKjB6xx2wn1tJ4+JsYtDec0aTvWjU49Vszou6+XXRivHRNqm/6SvmT7uWGOazmQMpj9+eLgs44nnf7Xb6eJ6QzVvzUzrVmwkefwSxWLuLX9s6rQi2UgbThiJEafV2X0zGdkUDGgGKvVoMH4C5WigGhoYvu5EaXzO0SbQxne+bFyzBRPbpcRHWifxh2UWLCa5OO8o8YHEibFG4TUrg==</SignatureValue><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></Signature><RoleDescriptor xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:ClaimTypesOffered><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Name</auth:DisplayName><auth:Description>The mutable display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Subject</auth:DisplayName><auth:Description>An immutable, globally unique, non-reusable identifier of the user that is unique to the application for which a token is issued.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Given Name</auth:DisplayName><auth:Description>First name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Surname</auth:DisplayName><auth:Description>Last name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/displayname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Display Name</auth:DisplayName><auth:Description>Display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/nickname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Nick Name</auth:DisplayName><auth:Description>Nick name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Instant</auth:DisplayName><auth:Description>The time (UTC) when the user is authenticated to Windows Azure Active Directory.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Method</auth:DisplayName><auth:Description>The method that Windows Azure Active Directory uses to authenticate users.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/objectidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>ObjectIdentifier</auth:DisplayName><auth:Description>Primary identifier for the user in the directory. Immutable, globally unique, non-reusable.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/tenantid" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>TenantId</auth:DisplayName><auth:Description>Identifier for the user's tenant.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/identityprovider" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>IdentityProvider</auth:DisplayName><auth:Description>Identity provider for the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Email</auth:DisplayName><auth:Description>Email address of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groups" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Groups</auth:DisplayName><auth:Description>Groups of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/accesstoken" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token</auth:DisplayName><auth:Description>Access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/expiration" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token Expiration</auth:DisplayName><auth:Description>UTC expiration time of access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/openid2_id" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External OpenID 2.0 Identifier</auth:DisplayName><auth:Description>OpenID 2.0 identifier issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/claims/groups.link" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>GroupsOverageClaim</auth:DisplayName><auth:Description>Issued when number of user's group claims exceeds return limit.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Role Claim</auth:DisplayName><auth:Description>Roles that the user or Service Principal is attached to</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/wids" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>RoleTemplate Id Claim</auth:DisplayName><auth:Description>Role template id of the Built-in Directory Roles that the user is a member of</auth:Description></auth:ClaimType></fed:ClaimTypesOffered><fed:SecurityTokenServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/wsfed</wsa:Address></wsa:EndpointReference></fed:SecurityTokenServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><RoleDescriptor xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQHFc5r7YTxZxKJOLVyfa30zANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yNDA2MDMwNTI0MDNaFw0yNzA2MDMwNTI0MDNaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCn/m6MA+pg9lAkuTDuQmVocDh3a9y+fxAdZWx8o7jEH54PWS7ry6QQjFYKUlL2PV8AboNRAQo+/1IUzpzD9VYI672ifwoPTwpu24Jlh75k/bBfaVn/h/+OSl2Fy57N1MXQJ+lHlgQXMhuA8fClmOhYhOHJgWjDfHdgcRExcx7lANWbQXYmEonEQVM4l1ZjwBKK1cZyLgn8B5L7mf9r4jNJ+6zHi3bCd8kfaIH/Kj5bVJJ7CSrUbat375O1jJ1PJe0rfUP8k1bkSk8x8NS8SqcG2rAUR8Uz6cS2S32Tnp73lxhDo3PgnjGGrQqG7E/7kLDQL7QcpTjjf2Ps2B5khDQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCcxblL8u48xdxpg1MuNAjXtFHyDFjhL5mZae4G6cLO7EIwIvwciPAqyVhHE8iJC4i2PLsetT8rb1BfK0zS6qM1rzn7Ee8IID99oLDtVaiQsKkND6FB85T6eQTRTaTL3c+lkRzDD7V4qBpa110bKdodReVUjqI4Yx2rakEW3X1w5vRQQJKuj8k4NxsiT9vTuHABWO21LWHAw8mh+EXb+EQDr4cdYz5XtXZ1RyECNYubaZ2fZmjjeeRaJ9uhIqhzj1bURPSc35f3kQACSPXxXoh88N9MzOCpMRX2lnV8baFIdwz//HBZZxTQOYXmnpySqxLb9pik4Y6wgGSyJr4vEfSY</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:TargetScopes><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.windows.net/cf985113-6cfd-471a-a543-ca716d2b3fdf/</wsa:Address></wsa:EndpointReference></fed:TargetScopes><fed:ApplicationServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/wsfed</wsa:Address></wsa:EndpointReference></fed:ApplicationServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQHFc5r7YTxZxKJOLVyfa30zANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yNDA2MDMwNTI0MDNaFw0yNzA2MDMwNTI0MDNaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCn/m6MA+pg9lAkuTDuQmVocDh3a9y+fxAdZWx8o7jEH54PWS7ry6QQjFYKUlL2PV8AboNRAQo+/1IUzpzD9VYI672ifwoPTwpu24Jlh75k/bBfaVn/h/+OSl2Fy57N1MXQJ+lHlgQXMhuA8fClmOhYhOHJgWjDfHdgcRExcx7lANWbQXYmEonEQVM4l1ZjwBKK1cZyLgn8B5L7mf9r4jNJ+6zHi3bCd8kfaIH/Kj5bVJJ7CSrUbat375O1jJ1PJe0rfUP8k1bkSk8x8NS8SqcG2rAUR8Uz6cS2S32Tnp73lxhDo3PgnjGGrQqG7E/7kLDQL7QcpTjjf2Ps2B5khDQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCcxblL8u48xdxpg1MuNAjXtFHyDFjhL5mZae4G6cLO7EIwIvwciPAqyVhHE8iJC4i2PLsetT8rb1BfK0zS6qM1rzn7Ee8IID99oLDtVaiQsKkND6FB85T6eQTRTaTL3c+lkRzDD7V4qBpa110bKdodReVUjqI4Yx2rakEW3X1w5vRQQJKuj8k4NxsiT9vTuHABWO21LWHAw8mh+EXb+EQDr4cdYz5XtXZ1RyECNYubaZ2fZmjjeeRaJ9uhIqhzj1bURPSc35f3kQACSPXxXoh88N9MzOCpMRX2lnV8baFIdwz//HBZZxTQOYXmnpySqxLb9pik4Y6wgGSyJr4vEfSY</X509Certificate></X509Data></KeyInfo></KeyDescriptor><SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/cf985113-6cfd-471a-a543-ca716d2b3fdf/saml2" /></IDPSSODescriptor></EntityDescriptor>