19 lines
1.0 KiB
XML
19 lines
1.0 KiB
XML
|
<?xml version="1.0"?>
|
||
|
|
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="{{ entity_id }}">
|
||
|
|
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
|
||
|
|
{% if cert_public_key %}
|
||
|
|
<md:KeyDescriptor use="signing">
|
||
|
|
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
||
|
|
<ds:X509Data>
|
||
|
|
<ds:X509Certificate>{{ cert_public_key }}</ds:X509Certificate>
|
||
|
|
</ds:X509Data>
|
||
|
|
</ds:KeyInfo>
|
||
|
|
</md:KeyDescriptor>
|
||
|
|
{% endif %}
|
||
|
|
<md:NameIDFormat>{{ subject_format }}</md:NameIDFormat>
|
||
|
|
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="{{ slo_url }}"/>
|
||
|
|
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="{{ sso_post_url }}"/>
|
||
|
|
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="{{ sso_redirect_url }}"/>
|
||
|
|
</md:IDPSSODescriptor>
|
||
|
|
</md:EntityDescriptor>
|