-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathsaml_idp.yml
79 lines (75 loc) · 2.62 KB
/
saml_idp.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
pc_ip: valid-pc-ip
# Specify a user with permission to make API calls.
pc_credential: pc_user # credential reference from "vaults" in global.yml file
#Create
saml_idp_configs:
- name: IDP1
username_attr: "username_attribute" #Optional
email_attr: "email_attribute" #Optional
groups_attr: "groups_attribute" #Optional
groups_delim: "groups_delimiter" #Optional
# Either of metadata_url or metadata_path or idp_properties need to be specified
metadata_url: "IdentityProviderURL"
metadata_path: "path_where_idp_metadata_is_stored" # e.g. "config/idp.xml" if it is stored in config directory
idp_properties:
idp_url: "idp_url" # Required
login_url: "login_url" # Required
logout_url: "logout_url" # Required
error_url: "error_url" # Optional
certificate: "certificate" # copy the details here, don't specify the path
- name: IDP2
username_attr: "username_attribute" #Optional
email_attr: "email_attribute" #Optional
groups_attr: "groups_attribute" #Optional
groups_delim: "groups_delimiter" #Optional
# Either of metadata_url or metadata_path or idp_properties need to be specified
metadata_url: "IdentityProviderURL"
metadata_path: "path_where_idp_metadata_is_stored" # e.g. "config/idp.xml" if it is stored in config directory
idp_properties:
idp_url: "idp_url" # Required
login_url: "login_url" # Required
logout_url: "logout_url" # Required
error_url: "error_url" # Optional
certificate: "certificate" # copy the details here, don't specify the path
######################################## SCHEMA DOCUMENTATION ########################################
### ---CREATE SCHEMA --- ###
# saml_idp_configs:
# type: list
# schema:
# type: dict
# schema:
# name:
# type: string
# required: true
# empty: false
# username_attr:
# type: string
# email_attr:
# type: string
# groups_attr:
# type: string
# groups_delim:
# type: string
# metadata_path:
# type: string
# metadata_url:
# type: string
# idp_properties:
# type: dict
# schema:
# idp_url:
# required: true
# type: string
# login_url:
# required: true
# type: string
# logout_url:
# required: true
# type: string
# error_url:
# type: string
# certificate:
# required: true
# type: string
#
####################################################################################################