2011-11-06 15:49:27 +08:00
|
|
|
# In order to consume encrypted SAML assertions, you'll need to create
|
|
|
|
# a public/private keypair:
|
|
|
|
#
|
2013-03-13 06:09:45 +08:00
|
|
|
# openssl req -new -newkey rsa:2048 -days 730 -nodes -x509 -keyout samlkey.pem -out samlcert.pem
|
2011-11-06 15:49:27 +08:00
|
|
|
|
2011-02-01 09:57:29 +08:00
|
|
|
production:
|
|
|
|
entity_id: "http://www.your-domain.com/saml2"
|
|
|
|
tech_contact_name: "Administrator"
|
|
|
|
tech_contact_email: "info@your-domain.com"
|
|
|
|
|
|
|
|
development:
|
|
|
|
entity_id: "http://www.your-domain.com/saml2"
|
|
|
|
tech_contact_name: "Administrator"
|
|
|
|
tech_contact_email: "info@your-domain.com"
|
2011-11-06 15:49:27 +08:00
|
|
|
encryption:
|
|
|
|
private_key: /path/to/samlkey.pem
|
|
|
|
certificate: /path/to/samlcert.pem
|
2013-03-13 06:09:45 +08:00
|
|
|
additional_private_keys:
|
|
|
|
- /path/to/oldsamlkey.pem
|
2011-02-01 09:57:29 +08:00
|
|
|
|
|
|
|
test:
|
|
|
|
entity_id: "http://www.your-domain.com/saml2"
|
|
|
|
tech_contact_name: "Administrator"
|
|
|
|
tech_contact_email: "info@your-domain.com"
|