Module: SAML::SSOeSettingsService

Defined in:
lib/saml/ssoe_settings_service.rb

Overview

This class is responsible for putting together a complete ruby-saml SETTINGS object, meaning, our static SP settings + the IDP settings loaded from a file

Class Method Summary collapse

Class Method Details

.base_settings ⇒ Object 



19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'lib/saml/ssoe_settings_service.rb', line 19

def base_settings
  idp_metadata_parser = OneLogin::RubySaml::IdpMetadataParser.new
  settings = idp_metadata_parser.parse(File.read(Settings.saml_ssoe.idp_metadata_file))

  if pki_needed?
    settings.certificate = Settings.saml_ssoe.certificate
    settings.private_key = Settings.saml_ssoe.key
    settings.certificate_new = Settings.saml_ssoe.certificate_new
  end
  settings.sp_entity_id = Settings.saml_ssoe.issuer
  settings.assertion_consumer_service_url = Settings.saml_ssoe.callback_url
  settings.compress_request = false

  settings.idp_sso_service_binding = Settings.saml_ssoe.idp_sso_service_binding
  settings.security[:authn_requests_signed] = Settings.saml_ssoe.request_signing
  settings.security[:want_assertions_signed] = Settings.saml_ssoe.response_signing
  settings.security[:want_assertions_encrypted] = Settings.saml_ssoe.response_encryption
  settings.security[:digest_method] = XMLSecurity::Document::SHA256
  settings.security[:signature_method] = XMLSecurity::Document::RSA_SHA256
  settings
end

.pki_needed? ⇒ Boolean

Returns:

  • (Boolean) 


41
42
43
 
# File 'lib/saml/ssoe_settings_service.rb', line 41

def pki_needed?
  Settings.saml_ssoe.request_signing || Settings.saml_ssoe.response_encryption
end

.saml_settings(options = {}) ⇒ Object 



9
10
11
12
13
14
15
16
17
 
# File 'lib/saml/ssoe_settings_service.rb', line 9

def saml_settings(options = {})
  settings = base_settings.dup
  options.each do |option, value|
    next if value.nil?

    settings.send("#{option}=", value)
  end
  settings
end