88 lines
7.7 KiB
XML
88 lines
7.7 KiB
XML
<?xml version="1.0"?>
|
|
<ProviderDirectory xmlns:lib="http://projectliberty.org/schemas/core/2002/12"
|
|
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
|
|
xmlns="http://www.sourceid.org/schemas/sso/providers/2002/11">
|
|
|
|
<lib:IDPDescriptor xmlns:lib="http://projectliberty.org/schemas/core/2002/12"
|
|
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
|
<lib:ProviderID>Venice-SSO-IDP</lib:ProviderID>
|
|
|
|
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
|
<ds:X509Data xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
|
<ds:X509Certificate xmlns:ds="http://www.w3.org/2000/09/xmldsig#">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</ds:X509Certificate>
|
|
</ds:X509Data>
|
|
</ds:KeyInfo>
|
|
|
|
<lib:SoapEndpoint>http://localhost:8080/venice-idp/sso/soap/endpoint</lib:SoapEndpoint>
|
|
<lib:SingleLogoutServiceURL>http://localhost:8080/venice-idp/sso/logout</lib:SingleLogoutServiceURL>
|
|
<lib:SingleLogoutServiceReturnURL>http://localhost:8080/venice-idp/sso/logout</lib:SingleLogoutServiceReturnURL>
|
|
<lib:FederationTerminationServiceURL>http://localhost:8080/venice-idp/sso/fedterm</lib:FederationTerminationServiceURL>
|
|
<lib:FederationTerminationServiceReturnURL>http://localhost:8080/venice-idp/sso/fedterm</lib:FederationTerminationServiceReturnURL>
|
|
<lib:SingleSignOnServiceURL>http://localhost:8080/venice-idp/sso/authn</lib:SingleSignOnServiceURL>
|
|
<!--
|
|
The following profile declarations indicate the variants of the Liberty Protocol which
|
|
this provider can speak.
|
|
-->
|
|
<lib:RegisterNameIdentifierProtocolProfile>http://projectliberty.org/profiles/rni-sp-soap</lib:RegisterNameIdentifierProtocolProfile>
|
|
<lib:FederationTerminationNotificationProtocolProfile>http://projectliberty.org/profiles/fedterm-sp-soap</lib:FederationTerminationNotificationProtocolProfile>
|
|
<lib:FederationTerminationNotificationProtocolProfile>http://projectliberty.org/profiles/fedterm-sp-http</lib:FederationTerminationNotificationProtocolProfile>
|
|
<lib:SingleLogoutProtocolProfile>http://projectliberty.org/profiles/slo-sp-soap</lib:SingleLogoutProtocolProfile>
|
|
<lib:SingleLogoutProtocolProfile>http://projectliberty.org/profiles/slo-sp-http</lib:SingleLogoutProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/brws-art</lib:SingleSignOnProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/brws-post</lib:SingleSignOnProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/wml-post</lib:SingleSignOnProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/lecp</lib:SingleSignOnProtocolProfile>
|
|
|
|
</lib:IDPDescriptor>
|
|
|
|
<!--
|
|
Sample Identity Provider Descriptor. If this instance of SourceID-SSO is configured to
|
|
operate in the "sp" role, then the entry below describes an Identity Provider with which
|
|
we are federated. If this instance is configured to operate in the "idp" role, then the entry
|
|
below will be ignored.
|
|
-->
|
|
<lib:IDPDescriptor xmlns:lib="http://projectliberty.org/schemas/core/2002/12" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
|
<!--
|
|
Customize the following line to match the ProviderID of the remote provider; if the other
|
|
provider is SourceID-SSO, then the ProviderID below should match the <provider-id> element
|
|
in the other deployment's sourceid-sso.xml.
|
|
-->
|
|
<lib:ProviderID>SourceID-Sample-IDP</lib:ProviderID>
|
|
<!--
|
|
The following KeyInfo represents the public key contained in the sample "sourceid.keystore"
|
|
file bundled with SourceID-SSO
|
|
-->
|
|
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
|
<ds:X509Data xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
|
|
<ds:X509Certificate xmlns:ds="http://www.w3.org/2000/09/xmldsig#">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</ds:X509Certificate>
|
|
</ds:X509Data>
|
|
</ds:KeyInfo>
|
|
<!--
|
|
The endpoints in the following URL's are correct for services offered by SourceID-SSO.
|
|
If federating this installation with another instance of SourceID-SSO, then all you need to do
|
|
is customize the URL's to match your deployment (e.g. replace "http://localhost:9080/sso-sample-idp"
|
|
with your server name and servlet context).
|
|
-->
|
|
<lib:SoapEndpoint>http://localhost:8080/sso-sample-idp/sso/soap/endpoint</lib:SoapEndpoint>
|
|
<lib:SingleLogoutServiceURL>http://localhost:8080/sso-sample-idp/sso/logout</lib:SingleLogoutServiceURL>
|
|
<lib:SingleLogoutServiceReturnURL>http://localhost:8080/sso-sample-idp/sso/logout</lib:SingleLogoutServiceReturnURL>
|
|
<lib:FederationTerminationServiceURL>http://localhost:8080/sso-sample-idp/sso/fedterm</lib:FederationTerminationServiceURL>
|
|
<lib:FederationTerminationServiceReturnURL>http://localhost:8080/sso-sample-idp/sso/fedterm</lib:FederationTerminationServiceReturnURL>
|
|
<lib:SingleSignOnServiceURL>http://localhost:8080/sso-sample-idp/sso/authn</lib:SingleSignOnServiceURL>
|
|
<!--
|
|
The following profile declarations indicate the variants of the Liberty Protocol which
|
|
this provider can speak.
|
|
-->
|
|
<lib:RegisterNameIdentifierProtocolProfile>http://projectliberty.org/profiles/rni-sp-soap</lib:RegisterNameIdentifierProtocolProfile>
|
|
<lib:FederationTerminationNotificationProtocolProfile>http://projectliberty.org/profiles/fedterm-sp-soap</lib:FederationTerminationNotificationProtocolProfile>
|
|
<lib:FederationTerminationNotificationProtocolProfile>http://projectliberty.org/profiles/fedterm-sp-http</lib:FederationTerminationNotificationProtocolProfile>
|
|
<lib:SingleLogoutProtocolProfile>http://projectliberty.org/profiles/slo-sp-soap</lib:SingleLogoutProtocolProfile>
|
|
<lib:SingleLogoutProtocolProfile>http://projectliberty.org/profiles/slo-sp-http</lib:SingleLogoutProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/brws-art</lib:SingleSignOnProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/brws-post</lib:SingleSignOnProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/wml-post</lib:SingleSignOnProtocolProfile>
|
|
<lib:SingleSignOnProtocolProfile>http://projectliberty.org/profiles/lecp</lib:SingleSignOnProtocolProfile>
|
|
</lib:IDPDescriptor>
|
|
|
|
</ProviderDirectory>
|