New parameters support
- add support of tranLogFormat attribute
- add polisbility to configure OpenSAML.MessageDecoder
- make native_format param optional for attributes
Change-Id: Iba59e45cf35fb07e1edf07c3462ee182001ed4ae
Related-Bug: PROD-24385
diff --git a/README.rst b/README.rst
index 5fe15d6..dd7befd 100644
--- a/README.rst
+++ b/README.rst
@@ -14,14 +14,16 @@
enabled: true
app:
entity_id: http://${_param:proxy_vip_address_public}:5000
- signing: false
- encryption: false
+ signing: "false"
+ encryption: "false"
idp_url: "https://saml.example.com/oam/fed"
idp_metadata_url: "https://saml.example.com/oamfed/idp/metadata"
attributes:
- name: test
id: test
name_format: urn:oasis:names:tc:SAML:2.0:attrname-format:basic
+ - name: test1
+ id: test1
key: |
-----BEGIN PRIVATE KEY-----
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDmM1NIxgQ3Y70Q
@@ -58,6 +60,20 @@
proxy: http://10.10.10.12:8888
+Shibboleth with Transaction logging
+==============
+
+.. code-block:: yaml
+
+ shibboleth:
+ server:
+ enabled: true
+ logging:
+ message_decoder: DEBUG
+ outofprocess:
+ tran_log_format: "%u|%a|%s|%SP|%IDP|%t|%b|%ac|%attr|%E|%e|%S|%SS|%SM|%URI|%URL|%UA|%app|%p|%n|%D|%d|%I|%II"
+
+
Override IdP metadata from file
==============
Sometimes the metadata is not publicly aviailable from IPD. You can define the metadata in pillar. In this case the idp_metadata_url parameter will be ignored.