Metadata
All SAML services participating in the Sweden Connect Sandbox federation must upload their metadata to the SAML Metadata Service. Check your metadata with the SAML Metadata Validator first.
Metadata published in the Sandbox federation is available from:
- All metadata: https://md.sandbox.swedenconnect.se/metadata/feed
- Service Provider metadata: https://md.sandbox.swedenconnect.se/metadata/mdx/role/sp.xml
- Identity Provider metadata: https://md.sandbox.swedenconnect.se/metadata/mdx/role/idp.xml
Downloaded metadata must pass signature validation before it is used. It is signed with the following certificate, which can also be downloaded separately.
-----BEGIN CERTIFICATE----- MIIDKTCCAhECBgFpWR1N1TANBgkqhkiG9w0BAQ0FADBYMQswCQYDVQQGEwJTRTEX MBUGA1UEChMOU3dlZGVuIENvbm5lY3QxMDAuBgNVBAMTJ1N3ZWRlbiBDb25uZWN0 IFNhbmRib3ggTWV0YWRhdGEgU2VydmljZTAeFw0xOTAzMDcxNTA0NDZaFw0yOTAz MTQxNDMxMjlaMFgxCzAJBgNVBAYTAlNFMRcwFQYDVQQKEw5Td2VkZW4gQ29ubmVj dDEwMC4GA1UEAxMnU3dlZGVuIENvbm5lY3QgU2FuZGJveCBNZXRhZGF0YSBTZXJ2 aWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsaz2wrmWHjGZ4sD gCDtTIkIxg9yyH2iwXXTbnLAFa8aWFu22DMM74C9hqeMleiMgMeZFIBz4xJBBCIx /jYcWHQoQ/IlgZC7mjpMcmDVxYxUNwD5OZKj/gQfnz/KXlpShl+ktpn3Ae3jmw0K m9vKLH1xPm2pOF9qzX+YvmMfVXVwaUYQ8ZO7pg3Vk0iZXPmQsVlLd5XXOfP7FyIA M1VpOPQNxiLzh5QVYJv+YN8s1PR58Q9X8jik/jZBeSfZozNMfEIPSv2Xqd59cZm/ JGf73Ecb/gKLpxg3e8P0FlvOLD3oMkh6puRpC0oMAet5yWa+cEvqqE/bE6KAjNAI QYWNRQIDAQABMA0GCSqGSIb3DQEBDQUAA4IBAQBKZiBAJ8A3MzdWMcU9o3CBcx+r RUoZQ+HSMJHDLd6iO0RZqD1eTngzFcOShKKZtttxkYyEY3RcTyOQPojmqZOCSLzJ oBF/wjc6URIxXM7hWdzDAyoakVU7xdkrSes5JEcSJ+e0Mjl5jkLi5V7LYlMUsJuP FRd+ktD89Vnsebgb+4bE4flrhv3XvwUkPCCHmogN/oTUMrBV4qh61Gtdty/DS+XY u+RuTyE+kyrGp8hnrpjew6+arulJWNKqcGd+isdixcdA0Lr8IxwkfEOGUCKWtOHZ +Bs/Gge2sVyrWwb3UQarAf32KawhI4mG2icWc3KcfLEt7NxUOws/InQV8Sd3 -----END CERTIFICATE-----
Identity Providers
By adding a SAML Service Provider to the Sandbox federation you can test your service against all SAML Identity Providers in the federation. Below is a listing of the official reference implementations for the Sweden Connect Technical Framework:
Sweden Connect Reference IdP
- SAML entityID
- https://ref-idp.sandbox.swedenconnect.se/idp
- SAML metadata
- https://ref-idp.sandbox.swedenconnect.se/idp/metadata/idp.xml
eIDAS Connector for test
- SAML entityID
- https://dev.connector.swedenconnect.se/eidas
- SAML metadata
- https://con.sandbox.swedenconnect.se/idp/metadata/idp.xml
The deployment for the eIDAS Connector for test will change shortly, which will lead to a new entityID.
Test Support for IdPs
The Sweden Connect Test Client is a tool that acts as a SAML Service Provider, so you can exercise your Identity Provider from the other side of the protocol.
An authentication request is assembled as a set of parameters that can be edited freely before anything is sent, so you can deliberately produce requests a compliant Service Provider would refuse to build: unsigned requests, requests signed with a key that has not been registered, or requests with hand-edited contents. When the user returns, the response is decoded, its signature and contents are validated, and everything is presented as it was received. All Service Providers' metadata are published to the Sandbox SAML metadata.