<?xml version="1.0"?>
<configuration>
  <configSections>
    <section name="Saml" type="dk.nita.saml20.config.ConfigurationReader, dk.nita.saml20, Version=1.9.1.0, Culture=neutral, PublicKeyToken=null" />
    <section name="alphaconfig" type="Bars.AKernel.Config.AlphaSectionHandler, Bars.AKernel"/>
  </configSections>

  <Saml auditLoggingType="dk.nita.saml20.Logging.Log4NetAuditLogger, dk.nita.saml20.ext.audit.log4net"
    xmlns="urn:dk.nita.saml20.configuration">
    <SigningCertificate findValue="lolo"
      storeLocation="LocalMachine" storeName="My" x509FindType="FindByThumbprint"
      validOnly="false" />
    <AllowedAudienceUris>
      <Audience>http://31.13.134.41/</Audience>
    </AllowedAudienceUris>
    <ServiceProvider id="BI_test" server="http://31.13.134.41/">
      <ServiceEndpoint localpath="http_handlers/saml_login.ashx" type="signon"
        index="0" redirectUrl="~/" binding="NOT_SET" errorBehaviour="throwexception" />
      <ServiceEndpoint localpath="http_handlers/saml_logout.ashx" type="logout"
        index="0" redirectUrl="~/" binding="NOT_SET" errorBehaviour="throwexception" />
      <ServiceEndpoint localpath="http_handlers/saml_logout.ashx" type="soaplogout"
        index="0" binding="NOT_SET" errorBehaviour="throwexception" />
      <ServiceEndpoint localpath="http_handlers/saml_metadata.ashx"
        type="metadata" index="0" binding="NOT_SET" errorBehaviour="throwexception" />
      <NameIdFormats all="false" />
      <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <OrganizationName xml:lang="ru">Тест</OrganizationName>
        <OrganizationDisplayName xml:lang="ru">Тестовая организация</OrganizationDisplayName>
        <OrganizationURL xml:lang="ru">http://example.com/</OrganizationURL>
      </Organization>
      <ContactPerson contactType="technical" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <Company>Тестовая компания</Company>
        <GivenName>Имя</GivenName>
        <SurName>Фамилия</SurName>
        <EmailAddress>example@example.org</EmailAddress>
        <TelephoneNumber>+7 (111) 1-111-111</TelephoneNumber>
      </ContactPerson>
    </ServiceProvider>
    <RequestedAttributes />
    <SessionTimeout>30</SessionTimeout>
    <PreventOpenRedirectAttack>true</PreventOpenRedirectAttack>
    <SessionCookiesSecure>false</SessionCookiesSecure>
    <Actions>
      <clear />
      <add name="LoginAction" type="Bars.Alpha.Security.Saml.SamlLoginAction, Bars.Alpha.Security" />
    </Actions>
    <CommonDomain enabled="false" />
    <NameIdFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</NameIdFormat>
    <ShowError>true</ShowError>
    <MinimumAssuranceLevel>3</MinimumAssuranceLevel>
    <IDPEndPoints metadata=".saml-metadata">
      <add id="https://ia-test.egisz.rosminzdrav.ru/realms/master" name="https://ia-test.egisz.rosminzdrav.ru/realms/master"
        QuirksMode="false" omitAssertionSignatureCheck="true" forceAuthn="false"
        isPassive="false" default="false">
        <CertificateValidation>
          <add type="dk.nita.saml20.Specification.SelfIssuedCertificateSpecification, dk.nita.saml20" />
        </CertificateValidation>
      </add>
    </IDPEndPoints>
  </Saml>
  <alphaconfig>
    <mongoconfig connstring="server=localhost:3333" dbprefix="egsz"
      duplicateconnection="" />
    <networksettings requestTimeoutSeconds="120000" />
    <rdbms providerCode="PostgreSql" serverAddress="localhost" serverPort="5432"
      systemPassword="password" systemUser="username" databasesPrefix="egsz2"
      database="" additionalParams="" duplicateConnection="" />
    <olap xmlaEndpoint="http://localhost:9999/mondrian/xmla" providerCode="Mondrian"
      database="" systemUser="" systemPassword="" additionalParams="" />
    <localization language="Ru" />
    <setup installed="true" />
    <appsettings>
      <clear />
      <add key="localFileStorage" value="C:\www\EGSZ_Storage" />
      <add key="log.entityDiff" value="false" />
      <add key="quartz.threadPool.threadCount" value="15" />
      <add key="quartz.threadPool.threadPriority" value="Normal" />
      <add key="gis.disableRouterCache" value="true" />
      <add key="gis.disableLayersCache" value="true" />
      <add key="MigraionKey" value="migrationkey" />
      <add key="authProvider" value="saml" />
      <add key="samlProvider" value="esiaia" />
      <add key="onlyEsiaiaBtn" value="true" />
    </appsettings>
  </alphaconfig>

</configuration>