url_sp = url + args['saml_sp']

      url_logout = url + args['saml_sp_logout']

      url_post = url + args['saml_sp_post']

      # Generate metadata

      m = Metadata('sp')

      m.add_service(SAML2_SERVICE_MAP['logout-redirect'], url_logout)

      if not args['no_saml_soap_logout']:

          m.add_service(SAML2_SERVICE_MAP['slo-soap'], url_logout)

      m.add_allowed_name_format(SAML2_NAMEID_MAP[args['saml_nameid']])

      sp_metafile = os.path.join(path, 'metadata.xml')

      m.output(sp_metafile)

                          help="Single Logout URL")

      parser.add_argument('--saml-sp-post', default=None,

                          help="Post response URL")

      parser.add_argument('--no-saml-soap-logout', action='store_true',

                          default=False,

                          help="Disable Single Logout over SOAP")

      # Validate that all path options begin with '/'

      path_args = ['saml_base', 'saml_auth', 'saml_sp', 'saml_sp_logout',

      for path_arg in path_args:

          if args[path_arg] is not None and not args[path_arg].startswith('/'):

              raise ValueError('--%s must begin with a / character.' %

      if not args['saml_sp'].startswith(args['saml_base']):

          raise ValueError('--saml-sp must be a subpath of --saml-base.')

      path_args = {'saml_sp_logout': 'logout',

      for path_arg, default_path in path_args.items():

          if args[path_arg] is None:

              args[path_arg] = '%s/%s' % (args['saml_sp'].rstrip('/'),

      'slo-soap': ('SingleLogoutService',

                   lasso.SAML2_METADATA_BINDING_SOAP),

      'response-post': ('AssertionConsumerService',

  }

  EDESC = '{%s}EntityDescriptor' % lasso.SAML2_METADATA_HREF