From 3aca74adb3ad5f8e00c134b5637c1ed538932726 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Wed, 30 Sep 2015 09:25:24 +0000
Subject: [PATCH] Use separate nameid salt for stg

---
 roles/ipsilon/templates/configuration.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/roles/ipsilon/templates/configuration.conf b/roles/ipsilon/templates/configuration.conf
index c8c115e882..b8067d78fa 100644
--- a/roles/ipsilon/templates/configuration.conf
+++ b/roles/ipsilon/templates/configuration.conf
@@ -39,7 +39,11 @@ openid enabled extensions=Teams,Attribute Exchange,CLAs,Simple Registration,API
 
 saml2 idp storage path=/etc/ipsilon/saml2
 saml2 idp metadata file=metadata.xml
+{% if env == 'staging' %}
+saml2 idp nameid salt={{ ipsilon_saml2_stg_nameid_salt }}
+{% else %}
 saml2 idp nameid salt={{ ipsilon_saml2_nameid_salt }}
+{% endif %}
 saml2 allow self registration=False
 saml2 default nameid=transient
 saml2 default email domain=fedoraproject.org