From 9bb24871c36b4410f38e4f6991f5d4d2dcd13728 Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Nov 30 2021 15:37:33 +0000
Subject: ipsilon: add saml2 for gitlab.com


Signed-off-by: Kevin Fenzi <kevin@scrye.com>

---

diff --git a/roles/ipsilon/templates/saml2_data b/roles/ipsilon/templates/saml2_data
index 35f2507..fbfa5cd 100644
--- a/roles/ipsilon/templates/saml2_data
+++ b/roles/ipsilon/templates/saml2_data
@@ -73,3 +73,9 @@ rhbzstage type = SP
 rhbzstage name = Bugzilla Stage Environment
 rhbzstage Allowed Attributes = ["email"]
 rhbzstage metadata = <?xml version="1.0" encoding="UTF-8"?><md:EntityDescriptor xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://bugzilla.stage.redhat.com/saml2_metadata.cgi" validUntil="2021-04-15T05:24:00Z"><md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>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</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bugzilla.stage.redhat.com/saml2_acs.cgi" index="0"/> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bugzilla.stage.redhat.com/saml2_acs.cgi" index="1"/> </md:SPSSODescriptor> <md:ContactPerson contactType="technical"> <md:GivenName>Administrator</md:GivenName> <md:EmailAddress>bugzilla-owner@redhat.com</md:EmailAddress> </md:ContactPerson></md:EntityDescriptor>
+
+gitlab id = https://gitlab.com/groups/fedora
+gitlab type = SP
+gitlab name = gitlab.com
+gitlab Allowed Attributes = ["email"]
+gitlab metadata = <?xml version='1.0' encoding='UTF-8'?><md:EntityDescriptor ID='_1b989820-b3a1-4fda-bed3-39c77422a44e' entityID='https://gitlab.com/groups/fedora' xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata' xmlns:saml='urn:oasis:names:tc:SAML:2.0:assertion'><md:SPSSODescriptor AuthnRequestsSigned='false' WantAssertionsSigned='false' protocolSupportEnumeration='urn:oasis:names:tc:SAML:2.0:protocol'><md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat><md:AssertionConsumerService Binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' Location='https://gitlab.com/groups/fedora/-/saml/callback' index='0' isDefault='true'/><md:AttributeConsumingService index='1' isDefault='true'><md:ServiceName xml:lang='en'>Required attributes</md:ServiceName><md:RequestedAttribute FriendlyName='Email address' Name='email' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/><md:RequestedAttribute FriendlyName='Full name' Name='name' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/><md:RequestedAttribute FriendlyName='Given name' Name='first_name' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/><md:RequestedAttribute FriendlyName='Family name' Name='last_name' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:basic' isRequired='false'/></md:AttributeConsumingService></md:SPSSODescriptor></md:EntityDescriptor>