PHP script to generate an IDP metadata

metadata-idp.php

<?php
/** Composer. */
require 'vendor/autoload.php';

/** My domain and cert. */
$url       = 'https://learnwithdaniel.com';
$cert_path = './my.crt';

function x509_content($str) {
    $header = '/-----BEGIN CERTIFICATE-----(.*)-----END CERTIFICATE-----/sm';
    if (preg_match($header, $str, $match) === 1) {
        return $match[1];
    }
    return '';
}

/** EntityDescriptor. */
$entity_descriptor = new SAML2\XML\md\EntityDescriptor();
$entity_descriptor->setEntityID('urn:learnwithdaniel.com');
$entity_descriptor->setID(md5(uniqid('', true))); // temporary random id

/** Contact Person. */
$contact_person = new SAML2\XML\md\ContactPerson();
$contact_person->setContactType('support');
$contact_person->setCompany('LWD');
$contact_person->addEmailAddress('[email protected]');
$entity_descriptor->addContactPerson($contact_person);

/** Dump root. */
$root_element = $entity_descriptor->toXML();

/** IDPSSODescriptor. */
$idp_sso_descriptor = new SAML2\XML\md\IDPSSODescriptor();
$idp_sso_descriptor->setWantAuthnRequestsSigned(false);
$idp_sso_descriptor->addProtocolSupportEnumeration(SAML2\Constants::NS_SAMLP);
$idp_sso_descriptor->setNameIDFormat([ SAML2\Constants::NAMEID_EMAIL_ADDRESS ]);

$sso_service = new SAML2\XML\md\EndpointType();
$sso_service->setBinding(SAML2\Constants::BINDING_HTTP_POST);
$sso_service->setLocation($url . "/sso");
$idp_sso_descriptor->addSingleSignOnService($sso_service);

$slo_service = new SAML2\XML\md\EndpointType();
$slo_service->setBinding(SAML2\Constants::BINDING_HTTP_POST);
$slo_service->setLocation($url . "/slo");
$idp_sso_descriptor->addSingleLogOutService($slo_service);

/** Load IdP certificate. */
$idp_cert    = file_get_contents($cert_path);
$idp_pub_key = new \RobRichards\XMLSecLibs\XMLSecurityKey(
    \RobRichards\XMLSecLibs\XMLSecurityKey::RSA_SHA256,
    [ 'type' => 'public' ]
);
$idp_pub_key->loadKey($idp_cert, false, true);

/** Key Descriptor. */
$key_descriptor = SAML2\Utils::createKeyDescriptor(
    x509_content(
        file_get_contents($cert_path)
    )
);
$key_descriptor->setUse('signing');
$idp_sso_descriptor->addKeyDescriptor($key_descriptor);


/** Dump IDPSSODescriptor. */
$idp_sso_descriptor->toXML($root_element);

/** Print XML. */
echo $root_element->parentNode->saveXML();