31 lines
1008 B
Plaintext
31 lines
1008 B
Plaintext
{
|
|
"entityid" : "urn:mace:example.com:saml:roland:idpr",
|
|
"name" : "Rolands restrictied IdP",
|
|
"endpoints" : {
|
|
"single_sign_on_service" : ["http://localhost:8089/sso"],
|
|
"attribute_service" : ["http://localhost:8089/aa"],
|
|
},
|
|
"policy": {
|
|
"default": {
|
|
"lifetime": {"minutes":15},
|
|
"name_form": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
|
|
},
|
|
"urn:mace:example.com:saml:roland:sp": {
|
|
"lifetime": {"minutes": 5},
|
|
"attribute_restrictions":{
|
|
"givenName": None,
|
|
"surName": None,
|
|
"mail": [".*@example.com"],
|
|
"eduPersonAffiliation": ["(employee|staff|faculty)"],
|
|
}
|
|
}
|
|
},
|
|
"key_file" : "test.key",
|
|
"cert_file" : "test.pem",
|
|
"xmlsec_binary" : "/usr/local/bin/xmlsec1",
|
|
"metadata": {
|
|
"local": ["sp_0.metadata"],
|
|
},
|
|
"subject_data": "subject_data.db",
|
|
"attribute_map_dir" : "attributemaps",
|
|
} |