Compare commits
No commits in common. "b15ca8506d7c4ede7d69115231234f827569e335" and "bfe9b8d3c7d1f723d26a3cab11eb7e7a4d160735" have entirely different histories.
b15ca8506d
...
bfe9b8d3c7
|
@ -1,4 +0,0 @@
|
||||||
---
|
|
||||||
satosa_state_encryption_key: ENC[PKCS7,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]
|
|
||||||
satosa_user_id_hash_salt: ENC[PKCS7,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]
|
|
||||||
|
|
|
@ -1,110 +0,0 @@
|
||||||
satosa_config:
|
|
||||||
internal_attributes: "/etc/satosa/internal_attributes.yaml"
|
|
||||||
saml2_backend: "/etc/satosa/plugins/saml2_backend.yaml"
|
|
||||||
saml2_frontend: "/etc/satosa/plugins/saml2_frontend.yaml"
|
|
||||||
|
|
||||||
internal_attributes:
|
|
||||||
attributes:
|
|
||||||
displayname:
|
|
||||||
saml: [displayName]
|
|
||||||
edupersonprincipalname:
|
|
||||||
saml: [eduPersonPrincipalName]
|
|
||||||
mail:
|
|
||||||
saml: [email, emailAddress, mail]
|
|
||||||
name:
|
|
||||||
saml: [cn]
|
|
||||||
surname:
|
|
||||||
saml: [sn, surname]
|
|
||||||
edupersonscopedaffiliation:
|
|
||||||
saml: [eduPersonScopedAffiliation]
|
|
||||||
subject-id:
|
|
||||||
saml: [subject-id]
|
|
||||||
|
|
||||||
satosa_proxy_conf:
|
|
||||||
BASE: https://idp-proxy-test.streams.sunet.se
|
|
||||||
INTERNAL_ATTRIBUTES: "internal_attributes.yaml"
|
|
||||||
BACKEND_MODULES:
|
|
||||||
- "plugins/saml2_backend.yaml"
|
|
||||||
FRONTEND_MODULES:
|
|
||||||
- "plugins/saml2_frontend.yaml"
|
|
||||||
LOGGING:
|
|
||||||
version: 1
|
|
||||||
formatters:
|
|
||||||
default:
|
|
||||||
format: "%(asctime)s [%(process)d] [%(levelname)s] %(message)s"
|
|
||||||
handlers:
|
|
||||||
console:
|
|
||||||
class: logging.StreamHandler
|
|
||||||
level: DEBUG
|
|
||||||
formatter: default
|
|
||||||
stream: ext://sys.stdout
|
|
||||||
loggers:
|
|
||||||
satosa:
|
|
||||||
level: DEBUG
|
|
||||||
handlers: [console]
|
|
||||||
saml2:
|
|
||||||
level: DEBUG
|
|
||||||
handlers: [console]
|
|
||||||
saml2_backend:
|
|
||||||
config:
|
|
||||||
sp_config:
|
|
||||||
key_file: backend.key
|
|
||||||
cert_file: backend.crt
|
|
||||||
encryption_keypairs:
|
|
||||||
- { key_file: backend.key, cert_file: backend.crt }
|
|
||||||
allow_unknown_attributes: true
|
|
||||||
metadata:
|
|
||||||
mdq:
|
|
||||||
- url: https://mds.swamid.se/
|
|
||||||
cert: md-signer2.crt
|
|
||||||
entityid: https://idp-proxy-test.streams.sunet.se/sp
|
|
||||||
service:
|
|
||||||
sp:
|
|
||||||
name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
|
|
||||||
allow_unsolicited: true
|
|
||||||
endpoints:
|
|
||||||
assertion_consumer_service:
|
|
||||||
- [<base_url>/<name>/acs/post, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST']
|
|
||||||
- [<base_url>/<name>/acs/redirect, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect']
|
|
||||||
discovery_response:
|
|
||||||
- [<base_url>/<name>/disco, 'urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol']
|
|
||||||
want_response_signed: False
|
|
||||||
want_assertions_signed: False
|
|
||||||
want_assertions_or_response_signed: True
|
|
||||||
xmlsec_binary: /usr/bin/xmlsec1
|
|
||||||
disco_srv: https://service.seamlessaccess.org/ds
|
|
||||||
attribute_profile: saml
|
|
||||||
module: satosa.backends.saml2.SAMLBackend
|
|
||||||
name: Saml2SP
|
|
||||||
plugin: BackendModulePlugin
|
|
||||||
saml2_frontend:
|
|
||||||
name: Saml2IDP
|
|
||||||
config:
|
|
||||||
entityid_endpoint: true
|
|
||||||
endpoints:
|
|
||||||
single_sign_on_service:
|
|
||||||
urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST: <name>/sso/post
|
|
||||||
urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect: <name>/sso/redirect
|
|
||||||
idp_config:
|
|
||||||
key_file: frontend.key
|
|
||||||
cert_file: frontend.crt
|
|
||||||
metadata:
|
|
||||||
local:
|
|
||||||
- metadata/sp_metadata.xml
|
|
||||||
entityid: https://idp-proxy-test.streams.sunet.se/idp
|
|
||||||
service:
|
|
||||||
idp:
|
|
||||||
endpoints:
|
|
||||||
single_sign_on_service: []
|
|
||||||
name: SWAMID
|
|
||||||
name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
|
|
||||||
policy:
|
|
||||||
default:
|
|
||||||
attribute_restrictions: null
|
|
||||||
fail_on_missing_requested: false
|
|
||||||
lifetime: {minutes: 15}
|
|
||||||
name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:uri
|
|
||||||
xmlsec_binary: /usr/bin/xmlsec1
|
|
||||||
attribute_profile: saml
|
|
||||||
module: satosa.frontends.saml2.SAMLFrontend
|
|
||||||
plugin: FrontendModulePlugin
|
|
Loading…
Reference in a new issue