adn-agov-iam-admin-project/patterns/dce20cc904f88df4b77f93d9_au.../Ident_SamlServiceProvider.xml

27 lines
1.2 KiB
XML

<AuthState name="${state.entry}" class="ch.nevis.esauth.auth.states.saml.AssertionRequestState" final="false" resumeState="false">
<ResultCond name="ok" next="${state.done}"/>
<ResultCond name="default" next="${state.failed}"/>
<Response value="AUTH_ERROR">
<Gui name="NoGui"/>
</Response>
<property name="idpURL" value="${param.op.atb.ssoUrl}"/>
<property name="consumerURL" value="${param.op.ident.consumerURL}"/>
<property name="out.binding" value="http-post"/>
<property name="out.requestType" value="AuthnRequest"/>
<property name="out.sign" value="AuthnRequest"/>
<property name="out.signatureKeyInfo" value="Certificate"/>
<property name="out.keystoreref" value="AGOV_IDENT_KS"/>
<property name="out.keyobjectref" value="AGOV_IDENT_SIGNER"/>
<property name="out.issuer" value="${sess:agov.ident.entityId}"/>
<!-- TODO/haburger/2025-05-06: disable for now, might be needed later
<property name="request.RequestedAuthnContext.AuthnContextClassRef" value="${sess:agov.ident.ctxClass}"/>
<property name="request.RequestedAuthnContext.Comparison" value="minimum"/>
-->
<property name="request.ttl" value="60"/>
<property name="relayState" value="${sess:agov.ident.rpcode}"/>
</AuthState>