...
- reads a file
path/to/metadata.xml
containing SAML metadata - removes any person or organization contact information
- wraps the results in an
EntitiesDescriptor
- signs the document using a private key taken from the file :
- a PKCS#11 token
- a separate certificate read from
path/to/
certificate.pem
- writes the results into the file
path/to/output.xml
...