From f8c1cc16f59b3114f14152606bfcc8f817740b12 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Johan=20Bj=C3=B6rklund?= <bjorklund@sunet.se>
Date: Tue, 28 Jan 2025 09:33:54 +0100
Subject: [PATCH] Testing zammad integreated sso

---
 .../overlay/etc/hiera/data/local.yaml            |  1 +
 .../overlay/etc/satosa/metadata/zammad-app.xml   | 16 ++--------------
 2 files changed, 3 insertions(+), 14 deletions(-)

diff --git a/test-sso-proxy1.cert.sunet.se/overlay/etc/hiera/data/local.yaml b/test-sso-proxy1.cert.sunet.se/overlay/etc/hiera/data/local.yaml
index b8c3644..b033f77 100644
--- a/test-sso-proxy1.cert.sunet.se/overlay/etc/hiera/data/local.yaml
+++ b/test-sso-proxy1.cert.sunet.se/overlay/etc/hiera/data/local.yaml
@@ -107,6 +107,7 @@ saml2_frontend:
           - metadata/graylog-dev.xml
           - metadata/rt-test.xml
           - metadata/zammad-test.xml
+          - metadata/zammad-app.xml
       entityid: https://test-sso-proxy.cert.sunet.se/idp
       service:
         idp:
diff --git a/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/zammad-app.xml b/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/zammad-app.xml
index 5ac38b0..0264dfd 100644
--- a/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/zammad-app.xml
+++ b/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/zammad-app.xml
@@ -1,14 +1,2 @@
-<md:EntityDescriptor ID="_9af62f43-eb6a-41bf-a2ed-005b19c4fd0b" entityID="https://zammad-test.cert.sunet.se/auth/saml/metadata">
-<md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
-<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://zammad-test.cert.sunet.se/auth/saml/slo" ResponseLocation="https://zammad-test.cert.sunet.se/auth/saml/slo"/>
-<md:NameIDFormat>urn:oid:1.3.6.1.4.1.5923.1.1.1.6</md:NameIDFormat>
-<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://zammad-test.cert.sunet.se/auth/saml/callback" index="0" isDefault="true"/>
-<md:AttributeConsumingService index="1" isDefault="true">
-<md:ServiceName xml:lang="en">Required attributes</md:ServiceName>
-<md:RequestedAttribute FriendlyName="Email address" Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/>
-<md:RequestedAttribute FriendlyName="Full name" Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/>
-<md:RequestedAttribute FriendlyName="Given name" Name="first_name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/>
-<md:RequestedAttribute FriendlyName="Family name" Name="last_name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/>
-</md:AttributeConsumingService>
-</md:SPSSODescriptor>
-</md:EntityDescriptor>
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor ID="_129a974d-2c88-4fcd-b09f-d6fb9681fdc1" entityID="https://zammad-test.cert.sunet.se/auth/saml/metadata" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:KeyDescriptor use="signing"><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:KeyDescriptor use="encryption"><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>MIIFazCCA1OgAwIBAgIUGqNBMbVXc0030zTmdtsR96zNGwMwDQYJKoZIhvcNAQELBQAwSDELMAkGA1UEBhMCU0UxEjAQBgNVBAgMCVN0b2NraG9sbTETMBEGA1UECgwKU1VORVQgQ0VSVDEQMA4GA1UEAwwHc3AtY2VydDAeFw0yNTAxMjgwNzUzNTRaFw0zNTAxMjYwNzUzNTRaMEgxCzAJBgNVBAYTAlNFMRIwEAYDVQQIDAlTdG9ja2hvbG0xEzARBgNVBAoMClNVTkVUIENFUlQxEDAOBgNVBAMMB3NwLWNlcnQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKbVctZxEE4nVE2vfkU+vjdmnC12zIwQ6UvLwPUzV31ZXinUXl+FxcHjC+bvtOPn91uUTWgzGvLdsGpfeF3H5uaOGAzCi0qi4Herp27L+HPHd4IxZ0lT45ZhFHz9kIrXCn92ho4Cdu2qXv4JJRuRFiqo6+IrZJ9Glz2MbM5QTmYsFJpdr3vK0UoicjbW3W+D8b76+v8tb5rmPaOJKzGNNKm8mkwMuRvz5cxoCQ9oiWXSFYPzZMt0Ya/P1SIxjBvNIrCtj+MhIId/6EOjFsQmHW1J+7VTGAkCnnhgz/l1yH0jCjtR20JwvG7I7Detyf5CQQgZDVm85D8KEeDA4ICIZ5yGcIowKFTuu7zAY3mUj7SqHo6Y8mO5wC+FOkUk4RMZBOZ7+DQm+T63ikNl+PO7qaFuS0A2aMZqtQaSIWupPCxwP5/nNqVAGSJp5p4kdHTAvkXjiJ7DePRXi6cA4EknO8eFKdqnoEdC8T8AleAL5fvmgW5+cCB2ACTQ/+Tl016gfPCTFPX0RiU+G33+Kzu9FAQ6an+Xj70c5ok1yaB2Il8aWDaKzdyR6TF1pLAPyEgERwRd+vp9Kp7sgnqKWTBy8aLBW54yPGwQBDenvSkWoIab910F8VQzBtdpULq/uq8oTMC4fRq2oh9SyFiieb1DtRGeF64KixYf2NbuTWtUVrzQIDAQABo00wSzAdBgNVHQ4EFgQUT6ZshgqmmTsQU6ToQgxwMlNUJ/AwHwYDVR0jBBgwFoAUT6ZshgqmmTsQU6ToQgxwMlNUJ/AwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAgEAJMnk6IGFKXLKvIOwiy6GDnW6uMLKXkj5V3HJmv8H0RMr7aYbQk8EXWZ/1oV0Bl0jGXvEkD3eOXMlpexuRlq1WsD390tNP8V6XprYkITxN8QtD3omKPvXF9uSSyan9l3+o3uudJRCgHkr/uopicJNmy2ihkNOUwKUZDqeir/Bre+It0yhgZQ4sZDbfoZaO/ftAR1287YI4wZpfOIrfuZtQY2+iQ5juCOhYVvCnZOI5cyOfDma6q+T2rdvSoQovPatpQ+8d7eetFA/GrRp+trKlAF5DL11X6HfDGNnL7qXMH5dqGQknE6ntAZCSKo+iDw2ttb6CLEg0+6TpLiLcBaY4ST31Op5jwFcAqK54GLItD0gsBmoMuzgbWZRN+ReHG85bxuSBAoMUOUALvsk1Ut9HDBP1DGf0nh9Iy4nUHJDRLZS4PtjYybdZCi4baWSWvLfqSwvTyDHX7BsSUpVZrurDlE2BHaXD+5i61Zol6nsoT41al+941G6bOCeUBoKXVm/uro5YSPqR5cxZSVDnVojMJlp6pm7lb21Wi4hhNYxAh46HD00vvCW6o5VKTBB6am/pCnPOe83L/PUwc167F/IC3F1nM+CxNkaJIMs7okQ7oNQJS+1MSohbqlEYQFVtCqxkEkiOOV/z9l+QTfVpdTrXEAv6N4ys7cZ0uIuLSJ2GSE=</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://zammad-test.cert.sunet.se/auth/saml/slo" ResponseLocation="https://zammad-test.cert.sunet.se/auth/saml/slo"/><md:NameIDFormat>urn:oid:1.3.6.1.4.1.5923.1.1.1.6</md:NameIDFormat><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://zammad-test.cert.sunet.se/auth/saml/callback" index="0" isDefault="true"/><md:AttributeConsumingService index="1" isDefault="true"><md:ServiceName xml:lang="en">Required attributes</md:ServiceName><md:RequestedAttribute FriendlyName="Email address" Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/><md:RequestedAttribute FriendlyName="Full name" Name="name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/><md:RequestedAttribute FriendlyName="Given name" Name="first_name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/><md:RequestedAttribute FriendlyName="Family name" Name="last_name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="false"/></md:AttributeConsumingService></md:SPSSODescriptor></md:EntityDescriptor>
\ No newline at end of file