1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
from pathutils import full_path
from pathutils import xmlsec_path
CONFIG = {
"entityid": "urn:mace:example.com:saml:roland:sp",
"name": "urn:mace:example.com:saml:roland:sp",
"entity_attributes": [
{
"name_format": "urn:oasis:names:tc:SAML:2.0:attrname-format:uri",
"name": "urn:oasis:names:tc:SAML:profiles:subject-id:req",
# "friendly_name" is not set
"values": ["any"],
},
{
"name": "somename",
"friendly_name": "somefriendlyname",
"name_format": "format",
"values": ["x", "y", "z"],
},
],
"description": "My own SP",
"service": {
"sp": {
"sp_type": "public",
"sp_type_in_metadata": True,
"endpoints": {
"assertion_consumer_service": ["http://lingon.catalogix.se:8087/"],
},
"required_attributes": ["surName", "givenName", "mail"],
"optional_attributes": ["title"],
"idp": ["urn:mace:example.com:saml:roland:idp"],
"extensions": {
"mdui": {
"UIInfo": {
"display_name": {"text": "NORDUnet", "lang": "en"},
"description": {"text": "The NORDUnet A/S Identity Provider ..", "lang": "en"},
"logo": {
"text": "https://www.nordu" ".net/resources/NORDUnet2.jpg",
"lang": "en",
"height": 46,
"width": 203,
},
},
"DiscoHints": {"domain_hint": {"text": "nordu.net"}},
},
"shibmd": {"Scope": {"regexp": "false", "text": "nordu.net"}},
},
}
},
"debug": 1,
"key_file": full_path("test.key"),
"cert_file": full_path("test.pem"),
"xmlsec_binary": xmlsec_path,
"metadata": {
"local": [full_path("idp_2.xml")],
},
"virtual_organization": {
"urn:mace:example.com:it:tek": {
"nameid_format": "urn:oid:1.3.6.1.4.1.1466.115.121.1.15-NameID",
"common_identifier": "umuselin",
}
},
"subject_data": full_path("subject_data.db"),
"accepted_time_diff": 60,
"attribute_map_dir": full_path("attributemaps"),
"organization": {
"name": ("AB Exempel", "se"),
"display_name": ("AB Exempel", "se"),
"url": "http://www.example.org",
},
"contact_person": [
{
"given_name": "Roland",
"sur_name": "Hedberg",
"telephone_number": "+46 70 100 0000",
"email_address": ["tech@eample.com", "tech@example.org"],
"contact_type": "technical",
},
],
"secret": "0123456789",
"only_use_keys_in_metadata": True,
}
|
