-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
0d9683f
commit 814a03a
Showing
5 changed files
with
84 additions
and
28 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -17,23 +17,24 @@ config: | |
entity_info: | ||
contact_person: | ||
- contact_type: "technical" | ||
email_address: ["[email protected]", "[email protected]"] | ||
email_address: | ||
["[email protected]", "[email protected]"] | ||
given_name: "Test" | ||
sur_name: "OP" | ||
- contact_type: "support" | ||
email_address: ["[email protected]"] | ||
given_name: "Support_test" | ||
organization: | ||
display_name: | ||
- ["OP Identities", "en"] | ||
- ["OP Identities", "en"] | ||
name: | ||
- ["En test-OP", "se"] | ||
- ["A test OP", "en"] | ||
- ["En test-OP", "se"] | ||
- ["A test OP", "en"] | ||
url: | ||
- ["http://www.example.com", "en"] | ||
- ["http://www.example.se", "se"] | ||
- ["http://www.example.com", "en"] | ||
- ["http://www.example.se", "se"] | ||
ui_info: | ||
description: | ||
- ["This is a test OP", "en"] | ||
- ["This is a test OP", "en"] | ||
display_name: | ||
- ["OP - TEST", "en"] | ||
- ["OP - TEST", "en"] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -23,11 +23,33 @@ config: | |
description: "SP Description" | ||
key_file: backend.key | ||
cert_file: backend.crt | ||
organization: {display_name: Example Identities, name: Example Identities Org., url: 'http://www.example.com'} | ||
organization: | ||
{ | ||
display_name: Example Identities, | ||
name: Example Identities Org., | ||
url: "http://www.example.com", | ||
} | ||
contact_person: | ||
- {contact_type: technical, email_address: 'mailto:[email protected]', given_name: Technical} | ||
- {contact_type: support, email_address: 'mailto:[email protected]', given_name: Support} | ||
- {contact_type: other, email_address: 'mailto:[email protected]', given_name: Security, extension_attributes: {'xmlns:remd': 'http://refeds.org/metadata', 'remd:contactType': 'http://refeds.org/metadata/contactType/security'}} | ||
- { | ||
contact_type: technical, | ||
email_address: "mailto:[email protected]", | ||
given_name: Technical, | ||
} | ||
- { | ||
contact_type: support, | ||
email_address: "mailto:[email protected]", | ||
given_name: Support, | ||
} | ||
- { | ||
contact_type: other, | ||
email_address: "mailto:[email protected]", | ||
given_name: Security, | ||
extension_attributes: | ||
{ | ||
"xmlns:remd": "http://refeds.org/metadata", | ||
"remd:contactType": "http://refeds.org/metadata/contactType/security", | ||
}, | ||
} | ||
|
||
metadata: | ||
local: [idp.xml] | ||
|
@@ -63,13 +85,19 @@ config: | |
allow_unsolicited: true | ||
endpoints: | ||
assertion_consumer_service: | ||
- [<base_url>/<name>/acs/post, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'] | ||
- [ | ||
<base_url>/<name>/acs/post, | ||
"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST", | ||
] | ||
discovery_response: | ||
- [<base_url>/<name>/disco, 'urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol'] | ||
- [ | ||
<base_url>/<name>/disco, | ||
"urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol", | ||
] | ||
|
||
# name_id_format: a list of strings to set the <NameIDFormat> element in SP metadata | ||
# name_id_policy_format: a string to set the Format attribute in the NameIDPolicy element | ||
# of the authentication request | ||
# name_id_format_allow_create: sets the AllowCreate attribute in the NameIDPolicy element | ||
# of the authentication request | ||
name_id_format_allow_create: true | ||
name_id_format_allow_create: true |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -7,8 +7,8 @@ config: | |
|
||
endpoints: | ||
single_sign_on_service: | ||
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST': sso/post | ||
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect': sso/redirect | ||
"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST": sso/post | ||
"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect": sso/redirect | ||
|
||
# If configured and not false or empty the common domain cookie _saml_idp will be set | ||
# with or have appended the IdP used for authentication. The default is not to set the | ||
|
@@ -22,11 +22,33 @@ config: | |
enable_metadata_reload: no | ||
|
||
idp_config: | ||
organization: {display_name: Example Identities, name: Example Identities Org., url: 'http://www.example.com'} | ||
organization: | ||
{ | ||
display_name: Example Identities, | ||
name: Example Identities Org., | ||
url: "http://www.example.com", | ||
} | ||
contact_person: | ||
- {contact_type: technical, email_address: 'mailto:[email protected]', given_name: Technical} | ||
- {contact_type: support, email_address: 'mailto:[email protected]', given_name: Support} | ||
- {contact_type: other, email_address: 'mailto:[email protected]', given_name: Security, extension_attributes: {'xmlns:remd': 'http://refeds.org/metadata', 'remd:contactType': 'http://refeds.org/metadata/contactType/security'}} | ||
- { | ||
contact_type: technical, | ||
email_address: "mailto:[email protected]", | ||
given_name: Technical, | ||
} | ||
- { | ||
contact_type: support, | ||
email_address: "mailto:[email protected]", | ||
given_name: Support, | ||
} | ||
- { | ||
contact_type: other, | ||
email_address: "mailto:[email protected]", | ||
given_name: Security, | ||
extension_attributes: | ||
{ | ||
"xmlns:remd": "http://refeds.org/metadata", | ||
"remd:contactType": "http://refeds.org/metadata/contactType/security", | ||
}, | ||
} | ||
key_file: frontend.key | ||
cert_file: frontend.crt | ||
metadata: | ||
|
@@ -61,12 +83,16 @@ config: | |
text: "http://idp.logo.url/" | ||
width: "100" | ||
height: "100" | ||
name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:persistent', 'urn:oasis:names:tc:SAML:2.0:nameid-format:transient'] | ||
name_id_format: | ||
[ | ||
"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent", | ||
"urn:oasis:names:tc:SAML:2.0:nameid-format:transient", | ||
] | ||
policy: | ||
default: | ||
attribute_restrictions: null | ||
fail_on_missing_requested: false | ||
lifetime: {minutes: 15} | ||
lifetime: { minutes: 15 } | ||
name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:uri | ||
encrypt_assertion: false | ||
encrypted_advice_attributes: false | ||
encrypted_advice_attributes: false |