shibboleth xml

1.  <SPConfig xmlns="urn:mace:shibboleth:3.0:native:sp:config"
2.     xmlns:conf="urn:mace:shibboleth:3.0:native:sp:config"
3.     clockSkew="180">
4.
5.      <OutOfProcess tranLogFormat="%u|%s|%IDP|%i|%ac|%t|%attr|%n|%b|%E|%S|%SS|%L|%UA|%a" />
6.
7.      <RequestMapper type="XML">
8.          <RequestMap>
9.              <Host name="{{ UI }}"
10.                  authType="shibboleth"
11.                  requireSession="true"
12.                  redirectToSSL="443">
13.                   <Path name="/" />
14.                   <Path name="/secure" />
15.                   <Path name="/login" />
16.             </Host>
17.         </RequestMap>
18.     </RequestMapper>
19.     {% if ENV == "ppd" %}
20.     <ApplicationDefaults entityID="https://{{ UI }}/shibboleth"
21.        signing="true" REMOTE_USER="eppn subject-id pairwise-id persistent-id"
22.    >
23.     {% endif %}
24.     {% if ENV == "prd" %}
25.     <ApplicationDefaults entityID="p3"
26.        signing="true" REMOTE_USER="eppn subject-id pairwise-id persistent-id"
27.    >
28.     {% endif %}
29.
30.         <Sessions lifetime="28800" timeout="14400" relayState="ss:mem"
31.                  checkAddress="false" handlerSSL="true" cookieProps="https"
32.                  redirectLimit="exact">
33.             <SSO entityID="{{ EntityId }}">
34.               SAML2 SAML1
35.             </SSO>
36.
37.             <!-- SAML and local-only logout. -->
38.             <Logout>SAML2 Local</Logout>
39.
40.             <!-- Administrative logout. -->
41.             <LogoutInitiator type="Admin" Location="/Logout/Admin" acl="127.0.0.1 ::1" />
42.
43.             <!-- Extension service that generates "approximate" metadata based on SP configuration. -->
44.             <Handler type="MetadataGenerator" Location="/Metadata" signing="true"/>
45.
46.             <!-- Status reporting service. -->
47.             <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
48.
49.             <!-- Session diagnostic service. -->
50.             <!-- <Handler type="Session" Location="/Session" showAttributeValues="true"/> -->
51.             <Handler type="Session" Location="/Session" showAttributeValues="true" contentType="application/json"/>
52.
53.             <!-- JSON feed of discovery information. -->
54.             <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
55.         </Sessions>
56.         <Errors supportContact="[email protected]; [email protected]; [email protected]"
57.            helpLocation="/about.html"
58.            styleSheet="/shibboleth-sp/main.css"/>
59.         {% if ENV == "ppd" %}
60.         <MetadataProvider type="XML"
61.              url="https://apigateway2.cpuat.comp.com/idp/sso/metadata.xml?spentityid=https://p3.cds.bdf-cloud.comp.net/shibboleth"
62.              backingFilePath="/etc/shibboleth/cpuatidp.xml" reloadInterval="7200">
63.         </MetadataProvider>
64.         {% endif %}
65.         {% if ENV == "prd" %}
66.         <MetadataProvider type="XML"
67.                          url="https://apigateway.customerportal.comp.com/idp/sso/2021/metadata.xml?spentityid=p3"
68.                          backingFilePath="/etc/shibboleth/prdcpuatidp.xml"
69.                          reloadInterval="7200"/>
70.         {% endif %}
71.         <!-- Map to extract attributes from SAML assertions. -->
72.         <AttributeExtractor type="XML" validate="true" reloadChanges="false" path="attribute-map.xml"/>
73.
74.         <!-- Default filtering policy for recognized attributes, lets other data pass. -->
75.         <AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
76.
77.         <CredentialResolver type="File"
78.            key="sp-key.pem" certificate="sp-cert.pem"/>
79.         <!-- Simple file-based resolvers for separate signing/encryption keys. -->
80.         {% if ENV == "prd" %}
81.         <CredentialResolver type="File" use="signing"
82.            key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/>
83.         <CredentialResolver type="File" use="encryption"
84.            key="sp-encrypt-key.pem" certificate="sp-encrypt-cert.pem"/>
85.         {% endif %}
86.
87.     </ApplicationDefaults>
88.
89.     <!-- Policies that determine how to process and authenticate runtime messages. -->
90.     <SecurityPolicyProvider type="XML" validate="true" path="security-policy.xml"/>
91.
92.     <!-- Low-level configuration about protocols and bindings available for use. -->
93.     <ProtocolProvider type="XML" validate="true" reloadChanges="false" path="protocols.xml"/>
94.
95. </SPConfig>