I'm new to SAML 2.0 as well as SimpleSAMLphp. I have couple questions regarding to setup and metadata configuration.
I act as a SP and I need to configure metadata that will be sent to my IdP. The IdP has some specific configuration requirements. How can I specify mdattr:EntityAttributes element in authsources? I need to define allowed authentication methods there.
The second question is regarding to SimpleSAMLphp deployment. Can I have my protected site content on domain example.com and SimpleSAMLphp running on subdomain sso.example.com in the same machine? Should I change the PHP.ini's cookie settings?
