Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Use separate nameid salt for stg

Browse source
This commit is contained in:
Patrick Uiterwijk 2015-09-30 09:25:24 +00:00
parent 88f5b045d4
commit 3aca74adb3
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/ipsilon/templates/configuration.conf
View file

@ -39,7 +39,11 @@ openid enabled extensions=Teams,Attribute Exchange,CLAs,Simple Registration,API
saml2 idp storage path=/etc/ipsilon/saml2
saml2 idp metadata file=metadata.xml
{% if env == 'staging' %}
saml2 idp nameid salt={{ ipsilon_saml2_stg_nameid_salt }}
{% else %}
saml2 idp nameid salt={{ ipsilon_saml2_nameid_salt }}
{% endif %}
saml2 allow self registration=False
saml2 default nameid=transient
saml2 default email domain=fedoraproject.org