picketlink.xml

<!--
  ~ Copyright 2016 Red Hat, Inc. and/or its affiliates
  ~ and other contributors as indicated by the @author tags.
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~ http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->

<PicketLink xmlns="urn:picketlink:identity-federation:config:2.1">
	<PicketLinkSP xmlns="urn:picketlink:identity-federation:config:2.1"
		ServerEnvironment="tomcat" BindingType="POST" SupportsSignatures="true">
		<IdentityURL>${idp-sig.url::http://localhost:8081/auth/realms/demo/protocol/saml}
		</IdentityURL>
		<ServiceURL>${sales-post-sig.url::http://localhost:8081/sales-metadata/}
		</ServiceURL>
		<KeyProvider
			ClassName="org.picketlink.identity.federation.core.impl.KeyStoreKeyManager">
			<Auth Key="KeyStoreURL" Value="saml/signed-post/WEB-INF/keystore.jks" />
			<Auth Key="KeyStorePass" Value="store123" />
			<Auth Key="SigningKeyPass" Value="test123" />
			<Auth Key="SigningKeyAlias" Value="http://localhost:8080/sales-post-sig/" />
			<ValidatingAlias Key="0.0.0.0" Value="demo" />
			<ValidatingAlias Key="127.0.0.1" Value="demo" />
		</KeyProvider>

	</PicketLinkSP>
	<Handlers xmlns="urn:picketlink:identity-federation:handler:config:2.1">
		<Handler
			class="org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler" />
        <Handler
                class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler">
            <Option Key="NAMEID_FORMAT" Value="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/>
        </Handler>
		<Handler
			class="org.picketlink.identity.federation.web.handlers.saml2.RolesGenerationHandler" />
		<Handler
			class="org.picketlink.identity.federation.web.handlers.saml2.SAML2SignatureGenerationHandler" />
		<Handler
			class="org.picketlink.identity.federation.web.handlers.saml2.SAML2SignatureValidationHandler" />
	</Handlers>
</PicketLink>