Satosa config

internal-dco-test-satosa-1.streams.sunet.se/overlay/etc/hiera/data/local.eyaml

@@ -0,0 +1,4 @@
+---
+satosa_state_encryption_key: ENC[PKCS7,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]
+satosa_user_id_hash_salt:  ENC[PKCS7,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]
+

internal-dco-test-satosa-1.streams.sunet.se/overlay/etc/hiera/data/local.yaml

@@ -0,0 +1,110 @@
+satosa_config:
+   internal_attributes: "/etc/satosa/internal_attributes.yaml"
+   saml2_backend: "/etc/satosa/plugins/saml2_backend.yaml"
+   saml2_frontend: "/etc/satosa/plugins/saml2_frontend.yaml"
+ 
+internal_attributes:
+   attributes:
+      displayname:
+        saml: [displayName]
+      edupersonprincipalname:
+        saml: [eduPersonPrincipalName]
+      mail:
+        saml: [email, emailAddress, mail]
+      name:
+        saml: [cn]
+      surname:
+        saml: [sn, surname]
+      edupersonscopedaffiliation:
+        saml: [eduPersonScopedAffiliation]
+      subject-id:
+        saml: [subject-id]
+ 
+satosa_proxy_conf:
+   BASE: https://idp-proxy-test.streams.sunet.se
+   INTERNAL_ATTRIBUTES: "internal_attributes.yaml"
+   BACKEND_MODULES:
+      - "plugins/saml2_backend.yaml"
+   FRONTEND_MODULES:
+      - "plugins/saml2_frontend.yaml"
+   LOGGING:
+     version: 1
+     formatters:
+        default:
+           format: "%(asctime)s [%(process)d] [%(levelname)s] %(message)s"
+     handlers:
+        console:
+           class: logging.StreamHandler
+           level: DEBUG
+           formatter: default
+           stream: ext://sys.stdout
+     loggers:
+        satosa:
+           level: DEBUG
+           handlers: [console]
+        saml2:
+           level: DEBUG
+           handlers: [console]
+saml2_backend:
+  config:
+    sp_config:
+      key_file: backend.key
+      cert_file: backend.crt
+      encryption_keypairs:
+        - { key_file: backend.key, cert_file: backend.crt }
+      allow_unknown_attributes: true
+      metadata:
+        mdq:
+         - url: https://mds.swamid.se/
+           cert: md-signer2.crt
+      entityid: https://idp-proxy-test.streams.sunet.se/sp
+      service:
+        sp:
+          name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
+          allow_unsolicited: true
+          endpoints:
+            assertion_consumer_service:
+              - [<base_url>/<name>/acs/post, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST']
+              - [<base_url>/<name>/acs/redirect, 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect']
+            discovery_response:
+              - [<base_url>/<name>/disco, 'urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol']
+          want_response_signed: False
+          want_assertions_signed: False
+          want_assertions_or_response_signed: True
+      xmlsec_binary: /usr/bin/xmlsec1
+    disco_srv: https://service.seamlessaccess.org/ds
+    attribute_profile: saml
+  module: satosa.backends.saml2.SAMLBackend
+  name: Saml2SP
+  plugin: BackendModulePlugin
+saml2_frontend:
+  name: Saml2IDP
+  config:
+    entityid_endpoint: true
+    endpoints:
+      single_sign_on_service:
+        urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST: <name>/sso/post
+        urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect: <name>/sso/redirect
+    idp_config:
+      key_file: frontend.key
+      cert_file: frontend.crt
+      metadata:
+        local:
+          - metadata/sp_metadata.xml
+      entityid: https://idp-proxy-test.streams.sunet.se/idp
+      service:
+        idp:
+          endpoints:
+            single_sign_on_service: []
+          name: SWAMID
+          name_id_format: ['urn:oasis:names:tc:SAML:2.0:nameid-format:transient']
+          policy:
+            default:
+              attribute_restrictions: null
+              fail_on_missing_requested: false
+              lifetime: {minutes: 15}
+              name_form: urn:oasis:names:tc:SAML:2.0:attrname-format:uri
+      xmlsec_binary: /usr/bin/xmlsec1
+    attribute_profile: saml
+  module: satosa.frontends.saml2.SAMLFrontend
+  plugin: FrontendModulePlugin