ready to pull req

Author: dzanin

demo-tornado/README.md

@@ -1,9 +1,9 @@
-#Tornado Demo#
+# Tornado Demo #
 Fully-working tornado-demo.
 
-###ABOUT ISSUE###
+### About issues ###
 This is only a demo, some issues about session still remain. 
 Actually the session is global.
 
-###PRODUCTION###
+### Production ###
 Remember to disable debugging in production.

demo-tornado/saml/advanced_settings.json

@@ -1,15 +1,12 @@
 {
     "security": {
         "nameIdEncrypted": false,
-        "authnRequestsSigned": true,
-        "logoutRequestSigned": true,
-        "logoutResponseSigned": true,
-        "signMetadata": {
-                                            "keyFileName": "metadata.key",
-                                            "certFileName": "metadata.crt"
-                                         },
+        "authnRequestsSigned": false,
+        "logoutRequestSigned": false,
+        "logoutResponseSigned": false,
+        "signMetadata": false,
         "wantMessagesSigned": false,
-        "wantAssertionsSigned": true,
+        "wantAssertionsSigned": false,
         "wantNameId" : true,
         "wantNameIdEncrypted": false,
         "wantAssertionsEncrypted": false,
@@ -33,4 +30,4 @@
             "url": "http://sp.example.com"
         }
     }
-}
+}

demo-tornado/saml/settings.json

@@ -2,29 +2,29 @@
     "strict": true,
     "debug": true,
     "sp": {
-        "entityId": "http://localhost:8000/metadata/",
+        "entityId": "https://<sp_domain>/metadata/",
         "assertionConsumerService": {
-            "url": "http://localhost:8000/?acs",
+            "url": "https://<sp_domain>/?acs",
             "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
         },
         "singleLogoutService": {
-            "url": "http://localhost:8000/?sls",
+            "url": "https://<sp_domain>/?sls",
             "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
         },
         "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
         "x509cert": "",
         "privateKey": ""
     },
     "idp": {
-        "entityId": "http://localhost:8080/auth/realms/idp_dacd",
+        "entityId": "https://app.onelogin.com/saml/metadata/<onelogin_connector_id>",
         "singleSignOnService": {
-            "url": "http://localhost:8080/auth/realms/idp_dacd/protocol/saml",
+            "url": "https://app.onelogin.com/trust/saml2/http-post/sso/<onelogin_connector_id>",
             "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
         },
         "singleLogoutService": {
-            "url": "http://localhost:8080/auth/realms/idp_dacd/protocol/saml",
+            "url": "https://app.onelogin.com/trust/saml2/http-redirect/slo/<onelogin_connector_id>",
             "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
         },
-        "x509cert": "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"
+        "x509cert": "<onelogin_connector_cert>"
     }
-}
+}