1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
#!/usr/bin/env python
from saml2.saml import AUTHN_PASSWORD
__author__ = 'rolandh'
import json
BASE = "http://localhost:8087"
#BASE= "http://lingon.catalogix.se:8087"
metadata = open("./sp/sp.xml").read()
AUTHN = {"class_ref": AUTHN_PASSWORD,
"authn_auth": "http://lingon.catalogix.se/login"}
info = {
"start_page": BASE,
"entity_id": "%s/sp.xml" % BASE,
"result": {
"matches": {
"content": "<h2>Your identity are"
},
},
"metadata": metadata,
"args":
{
"AuthnResponse": {
"sign_assertion": "always", # always, never
"sign_response": "never", # always, never
"sign_digest_alg": ds.DIGEST_SHA256,
"sign_signature_alg": ds.SIG_RSA_SHA256,
"authn": AUTHN
}
},
# This is the set of attributes and values that are returned in the
# SAML Assertion
"identity": {
"given_name": "Roland",
"sn": "Hedberg"
},
# This is the value of the NameID that is return in the Subject in the
# Assertion
"userid": "roland",
# regex pattern that must be contained in the resulting echo page to validate
# that the SP returned the right page after Login.
"echopageIdPattern": r"<title>SAML Echo Service</title>",
# list of regex patterns that must be contained in the resulting echo page to validate
# that the SP's echo page returns expected SAMLe response values (e.g. attribute values)
"echopageContentPattern": [r"Given Name\s*</td>\s*<td>Roland</td>",
r"Userid\s*</td>\s*<td>roalnd</td>",
r"Surname\s*</td>\s*<td>Hedberg</td>",
],
"constraints": {
"authnRequest_signature_required": True,
# allowed for assertion & response signature:
"signature_algorithm": [
#ds.SIG_RSA_SHA1, # you may need this for legacy deployments
ds.SIG_RSA_SHA224,
ds.SIG_RSA_SHA256,
ds.SIG_RSA_SHA384,
ds.SIG_RSA_SHA512,
],
"digest_algorithm": [
#ds.DIGEST_SHA1, # you may need this for legacy deployments
ds.DIGEST_SHA1,
ds.DIGEST_SHA224,
ds.DIGEST_SHA256,
ds.DIGEST_SHA384,
ds.DIGEST_SHA512,
ds.DIGEST_RIPEMD160,
],
},
}
print(json.dumps(info))
|
