<?php
// WAYF Identity Provider Configuration file

// In the following you see some example entries of Identity Providers and 
// cascaded WAYFs
// The keys of $IDProviders must correspond to the entityId of the 
// Identity Providers or a unique value in case of a cascaded WAYF/DS or 
// a category
// The sequence of IdPs and SPs play a role. No sorting is done.

// A general entry for an IdP can consist of the form:
// Type:   [Optional]    Some type that is used for the embedded wayf to hide
//                       or show certain categories. Default type will 
//                       be 'unknown' if not specified.
// Name:   [Mandatory]   Default name to display in drop-down list
// [en|it|fr||de|pt][Name]: [Optional] Display name in other languages
// SSO:    [Mandatory]   Should be the SAML1 SSO endpoint of the IdP
// Realm:  [Optional]    Kerberos Realm
// IP[]:   [Optional]    IP ranges of that organizations that can be used to guess
//                       a user's Identity Provider

// An entry for another WAYF that the user shall be redirected to should have:
// Type:   'wayf'

// A category entry can be used to group multiple IdP entries into a optgroup
// The category entries should look like:
// Name:   [Mandatory]   Default name to display in drop-down list
// [en|it|fr||de|pt][Name]: [Optional] Display name in other languages
// Type:   'category'    Category type 
// As stated above, the sequence of entries is important. So, one is completely
// flexible when it comes to ordering the category and IdP entries.
// 

// Category
//$IDProviders['university'] = array (
//		'Type' => 'category',
//		'Name' => 'Universities',
//);

$IDProviders['touchstone'] = array (
		'Type' => 'category',
		'Name' => 'MIT Touchstone',
);

# MIT Core IdP
# For now, this will be our "guess" for all IP addresses, but we might
# want to change this to just nets 18 and 128.30, with all others
# using Cams for the guess.
$IDProviders['https://idp.mit.edu/shibboleth'] = array (
		'Type' => 'touchstone',
		'Name' => 'MIT Kerberos account (or MIT web certificate)',
		'SSO' => 'https://idp.mit.edu/idp/profile/Shibboleth/SSO',
		'IP' => array ('0.0.0.0/0.0.0.0', '18.0.0.0/8', '128.30.0.0/16'),
);

# Cams IdP
$IDProviders['https://idp.touchstonenetwork.net/shibboleth-idp'] = array (
		'Type' => 'touchstone',
		'Name' => 'Touchstone Collaboration account',
		'SSO' => 'https://idp.touchstonenetwork.net/idp/profile/Shibboleth/SSO',
		'IP' => array ('0.0.0.0/0.0.0.0'),
);

$IDProviders['federations'] = array (
		'Type' => 'category',
		'Name' => 'Other Federations',
);

# InCommon Discovery Service
$IDProviders['InCommon'] = array(
		'Type' => 'wayf',
		'Name' => 'InCommon Federation',
		'SSO' => 'https://wayf.incommonfederation.org/DS/WAYF',
);

// Example of a Kerberos-enabled Identity Provider
//$IDProviders['bristol.ac.uk'] = array (
//		'Type' => 'university',
//		'Name' => 'University of Bristol',
//		'SSO' => 'https://sso.bris.ac.uk/sso/index.jsp',
//		'Realm' => 'ADS.BRIS.AC.UK',
//);

// Example with optional network blocks that can be used as an 
// additional IdP preselection hint
//$IDProviders['aitta.funet.fi'] = array (
//		'Type' => 'university',
//		'Name' => 'Tampere University of Technology',
//		'SSO' => 'https://idp.tut.fi/shibboleth-idp/SSO',
//		'IP' => array ('193.166.2.0/24','130.233.0.0/16'),
//);


// Category
//$IDProviders['vho'] = array (
//		'Type' => 'category',
//		'Name' => 'Virtual Home Organization',
//);

// An example of a configuration with multiple network blocks and multiple languages 
//$IDProviders['urn:mace:switch.ch:SWITCHaai:vho-switchaai.ch'] = array (
//		'Type' => 'vho',
//		'Name' => 'Virtual Home Organisation',
//		'de' => array ('Name' => 'Virtuelle Home Organisation'),
//		'fr' => array ('Name' => 'Home Organisation Virtuelle'),
//		'it' => array ('Name' => 'Virtuale Home Organisation'),
//		'IP' => array ('130.59.6.0/16','127.0.0.0/24'),
//		'SSO' => 'https://aai.vho-switchaai.ch/shibboleth-idp/SSO',
//);


// Example of a WAYF entry that would redirect the user to this cascaded WAYF
// For SAML2 authentication requests, you must set the type to 'wayf' so that
// The user is not returned back to the Service Provider but forwarded to this
// additional Discovery Service
//$IDProviders['urn:mace:switch.ch:SWITCHaai:edugain.net'] = array (
//		'SSO' => 'https://maclh.switch.ch/ShiBE-R/ShiBEWebSSORequester',
//		'Name' => 'Login via eduGAIN (testing)',
//		'Type' => 'wayf',
//);

//$IDProviders['urn:geant:edugain:component:be:switch:development.switch.ch'] = array (
//		'Type' => 'other',
//		'Name' => 'Login via eduGAIN (development)',
//		'SSO' => 'https://maclh.switch.ch/ShiBE-H/WebSSORequestListener',
//);

// Example of an IDP you want not to be displayed when IDPs are parsed from
// a metadata file and SAML2MetaOverLocalConf is set to false
//$IDProviders['urn:mace:switch.ch:SWITCHaai:invisibleidp'] = '-';


// Category
//$IDProviders['other'] = array (
//		'Type' => 'category',
//		'Name' => 'Others',
//		'de' => array ('Name' => 'Andere'),
//		'fr' => array ('Name' => 'Autres'),
//		'it' => array ('Name' => 'Altri'),
//);


// Standard example with a Type that could be used to hide certain
// Identity Providers in the list of an embedded WAYF according to their type
//$IDProviders['https://toba.switch.ch/idp/shibboleth'] = array(
//		'Type' => 'other',
//		'Name' => 'SWITCH - Serving Swiss Universities',
//		'SSO' => 'https://toba.switch.ch/idp/profile/Shibboleth/SSO',
//);

?>