{
    "entityid" : "urn:mace:example.com:saml:roland:idpr",
    "service": {
        "idp": {
            "name" : "Rolands restrictied IdP",
            "endpoints" : {
                "single_sign_on_service" : ["http://localhost:8089/sso"],
            },
            "assertions": {
                "default": {
                    "lifetime": {"minutes":15},
                    "name_form": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                },
                "urn:mace:example.com:saml:roland:sp": {
                    "lifetime": {"minutes": 5},
                    "attribute_restrictions":{
                        "givenName": None,
                        "surName": None,
                        "mail": [".*@example.com"],
                        "eduPersonAffiliation": ["(employee|staff|faculty)"],
                    }
                }
            }
        },
        "aa": {
            "name" : "Rolands restrictied AA",
            "endpoints" : {
                "attribute_service" : ["http://localhost:8089/aa"],
            },
            "assertions": {
                "default": {
                    "lifetime": {"minutes":15},
                    "name_form": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                },
                "urn:mace:example.com:saml:roland:sp": {
                    "lifetime": {"minutes": 5},
                    "attribute_restrictions":{
                        "givenName": None,
                        "surName": None,
                        "mail": [".*@example.com"],
                        "eduPersonAffiliation": ["(employee|staff|faculty)"],
                    }
                }
            }
        }
    },
    "key_file" : "test.key",
    "cert_file" : "test.pem",
    "xmlsec_binary" : "/opt/local/bin/xmlsec1",
    "metadata": {
        "local": ["sp_0.metadata"],
    },
    "subject_data": "subject_data.db",
    "attribute_map_dir" : "attributemaps",
}