Browse Source

Add "idp-discovery-service-url" option

Allow the usage of an IDP discovery service for multiple IDPs.
Make use of "MellonDiscoveryURL" option in "mod_auth_mellon"
Apache module.

Change-Id: I2eed6dc3c57a51ed12f8ca4b31b46a13bc8fa911
Signed-off-by: Yanos Angelopoulos <yanos@admin.grnet.gr>
changes/61/690561/2
Yanos Angelopoulos 3 years ago committed by Yanos Angelopoulos
parent
commit
e2a2ca2152
  1. 7
      src/config.yaml
  2. 9
      src/templates/apache-mellon-location.conf

7
src/config.yaml

@ -62,3 +62,10 @@ options:
description: |
Indicates a requirement for the <saml:Assertion> elements received
by this service provider to be signed.
idp-discovery-service-url:
type: string
default:
description: |
IDP discovery service URL. If set to "" (default) no discovery
service will be used. If used, the resource "idp-metadata" must
be an XML file containing descriptors for multiple IDPs

9
src/templates/apache-mellon-location.conf

@ -3,6 +3,9 @@
MellonSPPrivateKeyFile {{ options.sp_private_key_file }}
MellonSPMetadataFile {{ options.sp_metadata_file }}
MellonIdPMetadataFile {{ options.idp_metadata_file }}
{% if options.idp_discovery_service_url -%}
MellonDiscoveryURL {{ options.idp_discovery_service_url }}
{%- endif %}
MellonEndpointPath {{ options.mellon_endpoint_path }}
MellonIdP "IDP"
AuthType "Mellon"
@ -19,6 +22,9 @@
MellonSPPrivateKeyFile {{ options.sp_private_key_file }}
MellonSPMetadataFile {{ options.sp_metadata_file }}
MellonIdPMetadataFile {{ options.idp_metadata_file }}
{% if options.idp_discovery_service_url -%}
MellonDiscoveryURL {{ options.idp_discovery_service_url }}
{%- endif %}
MellonEndpointPath {{ options.mellon_endpoint_path }}
MellonIdP "IDP"
AuthType "Mellon"
@ -35,6 +41,9 @@
MellonSPPrivateKeyFile {{ options.sp_private_key_file }}
MellonSPMetadataFile {{ options.sp_metadata_file }}
MellonIdPMetadataFile {{ options.idp_metadata_file }}
{% if options.idp_discovery_service_url -%}
MellonDiscoveryURL {{ options.idp_discovery_service_url }}
{%- endif %}
MellonEndpointPath {{ options.mellon_endpoint_path }}
MellonIdP "IDP"
AuthType "Mellon"

Loading…
Cancel
Save