{"type":"doc","content":[{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"paragraph","content":[{"text":"The latest release (and future releases) of this plugin are incompatible with the command line options in the ","type":"text"},{"text":"original 1.0 version","type":"text","marks":[{"type":"link","attrs":{"href":"https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1381269765"}}]},{"text":", as the purpose of this tool has shifted dramatically from the original release. While the options are different, the new version is a strict superset of the capabilities of the original version.","type":"text"}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"The MetadataGen plugin provides a command line utility to generate SAML metadata based on a variety of potential inputs. It can handle several different metadata “roles” but is primarily expected to be useful in generating SP metadata. It is a Java-based port of some of the features of the ","type":"text"},{"text":"metagen.sh","type":"text","marks":[{"type":"em"}]},{"text":" shell script that was included with the SP software. Porting it to Java allows the utility to be portable to Windows and makes it a bit easier to maintain, albeit with the overhead of a plugin release.","type":"text"}]},{"type":"paragraph","content":[{"text":"The previous release of this plugin was centered around replicating the functionality of the IdP installer to allow the IdP configuration to be introspected to a limited degree to produce example metadata for the IdP itself. This version is more generic, and does not have any particular knowledge of the IdP itself. It is still delivered as an IdP plugin simply to facilitate delivery and installation of the code, and because a tool like this can be very helpful in managing a Shibboleth IdP deployment.","type":"text"}]},{"type":"paragraph","content":[{"text":"This utility is actually a wrapper around a generic metadata generation API added to OpenSAML. It relies on the Velocity template language to plug its inputs into a set of templates inside the library that contain the general structure of various metadata elements. For enhanced customization, it is an option to install these templates to disk and edit them (or point to an entirely different set).","type":"text"}]},{"type":"paragraph","content":[{"text":"There are a number of command line options to control metadata generation, spanning the roles to generate, protocols to support, various means of specifying enpdoints, and an advanced “batch” option allowing multiple invocations of the tool via a single process without the overhead of running Java every time.","type":"text"}]},{"type":"paragraph","content":[{"text":"There is some limited support at present for generating ","type":"text"},{"text":"CAS","type":"text","marks":[{"type":"link","attrs":{"href":"https://shibboleth.atlassian.net/wiki/spaces/SC/pages/1879344655"}}]},{"text":" metadata, and even less so for generating ","type":"text"},{"text":"OIDC/OAuth","type":"text","marks":[{"type":"link","attrs":{"href":"https://shibboleth.atlassian.net/wiki/spaces/SC/pages/1912406916"}}]},{"text":" metadata, but we hope to improve the latter over time. Both are limited to SP/RP roles only.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Plugin Installation","type":"text"}]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"You can the install the latest plugin version supported on your IdP version with ","type":"text"},{"text":".\\plugin.sh -I net.shibboleth.idp.plugin.metadatagen","type":"text","marks":[{"type":"code"}]}]}]},{"type":"table","attrs":{"layout":"default","width":1205.0,"localId":"ab803176-5a19-470b-a7f8-7a0fbdcd294c"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[143.0]},"content":[{"type":"paragraph","content":[{"text":"Plugin","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[346.0]},"content":[{"type":"paragraph","content":[{"text":"Plugin ID","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[376.0]},"content":[{"type":"paragraph","content":[{"text":"Module(s)","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[340.0]},"content":[{"type":"paragraph","content":[{"text":"Bug Reporting","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[143.0]},"content":[{"type":"paragraph","content":[{"text":"Metadatagen","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[346.0]},"content":[{"type":"paragraph","content":[{"text":"net.shibboleth.idp.plugin.metadatagen","type":"text","marks":[{"type":"textColor","attrs":{"color":"#000000"}}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[376.0]},"content":[{"type":"paragraph","content":[{"text":"idp.plugin.MetadataGen.plugin","type":"text"}]},{"type":"paragraph","content":[{"text":"idp.plugin.MetadataGen.Templates.plugin","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[340.0]},"content":[{"type":"paragraph","content":[{"type":"inlineCard","attrs":{"url":"https://shibboleth.atlassian.net/browse/JMETAGEN"}},{"text":" ","type":"text"}]}]}]}]},{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"include","parameters":{"macroParams":{"":{"value":"PluginInstallation"}},"macroMetadata":{"macroId":{"value":"f526747b-16ed-4d92-9edf-a0eb14cc8841"},"schemaVersion":{"value":"1"},"title":"Include Page"}},"localId":"68f4c621-eaa4-4b87-98ae-e284b7808211"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"Command Line Options","type":"text"}]},{"type":"paragraph","content":[{"text":"Notably, none of the options are actually required, as the tool is quite laissez-faire about what it’s generating. While it is designed to the extent possible to produce well-formed XML, it is not inherently attempting to produce valid metadata in either a schema sense or in a “this is sensible to use” sense. It simply does what it’s told to do, and leaves out anything that isn’t specified.","type":"text"}]},{"type":"paragraph","content":[{"text":"The options are also case-insensitive (most of our CLI tools are not).","type":"text"}]},{"type":"paragraph","content":[{"text":"Take care to wrap options containing whitespace in double quotes. The generator will automatically encode any XML-unsafe characters, so you should not pre-encode any of them.","type":"text"}]},{"type":"table","attrs":{"layout":"full-width","width":1800.0,"localId":"6665b944-3068-46b8-a7ab-5b1d509b2fe2"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"Paremeter","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","content":[{"text":"Multiple?","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--file, --out","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Output file to write to (stdout is used if not specified)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--batch-file, --batch","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Path to a batch file of individual commands to execute (see section below)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--omit-namespaces","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Prevents the generation of various XML namespace declarations in the root element, useful mainly for batches","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--entityID, --client_id, --id","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Populates the entityID attribute, generally required to produce meaningful output","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--scope","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Populates ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" element(s)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--sp","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" role (this is the default)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--idp","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" role","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--aa","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" role","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--want-assertions-signed, -w","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Toggles on the ","type":"text"},{"text":"WantAssertionsSigned","type":"text","marks":[{"type":"code"}]},{"text":" flag in SP metadata","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--nameid-format, -f","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Populates ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--certificate, --cert, -c","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Path to certificate file(s) intended for dual use (both signing and encryption)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--signing, -x","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Path to certificate file(s) specific to signing only","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--encryption, -e","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Path to certificate file(s) specific to encryption only","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--sso","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Manually specifies ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" endpoint(s) (see below)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--attribute-query, --query","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Manually specifies ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" endpoint(s) (see below)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--artifact","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Manually specifies ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" endpoint(s) (see below)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--logout","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Manually specifies ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" endpoint(s) (see below)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--acs","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Manually specifies ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" endpoint(s) (see below)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--layout-file, --layout","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Path to a “layout template”, in effect a fragment of metadata containing an that specifies the endpoints to populate the output with (used in conjunction with the --hostname option)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--hostname, -h","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Specifies the hostname(s) to plug into the layout template specified with the --layout-file option","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--lang","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Language tag to use for any i18n-supporting elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--display-name, -y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" extension element","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--description, -d","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" extension element","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--logo-url, --logo","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" extension element (only external URI references supported)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--logo-width, --width","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Sets ","type":"text"},{"text":"Width","type":"text","marks":[{"type":"code"}]},{"text":" attribute of ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" extension element","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--logo-height, --height","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Sets ","type":"text"},{"text":"Height","type":"text","marks":[{"type":"code"}]},{"text":" attribute of ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" extension element","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--org-name, -o","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" elements","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--org-url, -u","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph"}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Generates ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" element","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--contact-admin, -a","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Splits a string containing first/last/email on the forward slash character and generates a of the “administrative” type","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--contact-support, -s","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Splits a string containing first/last/email on the forward slash character and generates a of the “support” type","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--contact-tech, -t","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"Splits a string containing first/last/email on the forward slash character and generates a of the “technical” type","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[240.4]},"content":[{"type":"paragraph","content":[{"text":"--entity-attr, --tag","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[89.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Y","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[932.0]},"content":[{"type":"paragraph","content":[{"text":"An expression of the form “name=value”, which will generate a ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" in an ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" extension (note that this tool assumes all tags will have URI names)","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"The full set of options can be viewed with the ","type":"text"},{"text":"--help","type":"text","marks":[{"type":"code"}]},{"text":" option.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Endpoint Expressions","type":"text"}]},{"type":"paragraph","content":[{"text":"Various manual options for specifying the endpoints to generate (e.g., --sso, --logout, --acs, etc.) rely on built-in “tokens” that represent the various protocols and bindings supported by the tool, to simplfy expressing these parameters. While bindings are in principle extensible, the set is generally known at this point and isn’t changing substantially. Notably, the layout template feature (see below) can also handle any possible endpoints not already supported by this tool.","type":"text"}]},{"type":"paragraph","content":[{"text":"Endpoint expressions are in the form ","type":"text"},{"text":"/","type":"text","marks":[{"type":"code"}]},{"text":". The location portion may contain a scheme, or if none, the “https://” scheme will be applied automatically. The binding portion must be one of the following values:","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":1800.0,"localId":"d9b005e1-ee52-493b-bc01-e8df1d6b8290"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"Token","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"Protocol and Binding","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"Redirect","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 2.0, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"POST","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 2.0, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"SimpleSign","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 2.0, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"Artifact","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 2.0, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"SOAP","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 2.0, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:2.0:bindings:SOAP","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"PAOS","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 2.0, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:2.0:bindings:PAOS","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"POST1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 1.1, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:1.0:profiles:browser-post","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"Artifact1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 1.1, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:1.0:profiles:artifact-01","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"SOAP1","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"SAML 1.1, ","type":"text"},{"text":"urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"CAS","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"CAS, ","type":"text"},{"text":"https://www.apereo.org/cas/protocol/login","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"CAS (logout)","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"CAS, ","type":"text"},{"text":"https://www.apereo.org/cas/protocol/logout","type":"text","marks":[{"type":"code"}]},{"text":" (location portion ignored)","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"CASProxy","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"CAS, ","type":"text"},{"text":"https://www.apereo.org/cas/protocol/proxy","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[162.0]},"content":[{"type":"paragraph","content":[{"text":"OIDC","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[598.0]},"content":[{"type":"paragraph","content":[{"text":"OIDC/OAuth, ","type":"text"},{"text":"https://tools.ietf.org/html/rfc6749#section-3.1.2","type":"text","marks":[{"type":"code"}]}]}]}]}]},{"type":"paragraph","content":[{"text":"Note that when endpoints require an index attribute, the generator will auto-generate those values by tracking them and incrementing the index. The indexes should not in general be used at runtime at thie point.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Endpoint Example","type":"text"}]},{"type":"paragraph","content":[{"text":"The parameter ","type":"text"},{"text":"--sso Redirect/webauth.example.org/idp/profile/SAML2/Redirect/SSO","type":"text","marks":[{"type":"code"}]},{"text":" will produce this endpoint:","type":"text"}]},{"type":"codeBlock","attrs":{"language":"xml"},"content":[{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" in a file in which the endpoint elements' ","type":"text"},{"text":"Location","type":"text","marks":[{"type":"code"}]},{"text":" values contain the replacement string \"${hostname}\", into which the generator will plug in the value(s) of the --hostname parameter in a loop to produce the desired endpoints.","type":"text"}]},{"type":"paragraph","content":[{"text":"There are some exceptions to the iteration process; some endpoints (particularly non-SP endpoints) that are by design assumed to appear only once per Binding are only output using the first --hostname option supplied.","type":"text"}]},{"type":"paragraph","content":[{"text":"After installation, an editable example is provided under ","type":"text"},{"text":"conf/examples/shibmd-layout.xml","type":"text","marks":[{"type":"em"}]},{"text":" that illustrate how this works, and provide a starting point to copy from that includes the “default” endpoints used by the Shibboleth IdP and SP software. One should not ordinarily use it directly, but should copy/edit it to exclude anything unneeded for one’s use.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Batch Use","type":"text"}]},{"type":"paragraph","content":[{"text":"In order to allow for batching, without the overhead of a separate Java process for each command (as would occur if a real shell script was used), the tool supports the processing of simple batches of commands loaded from a single file. At present, this is a fairly primitive mechanism as it does not allow for shell variables and other sorts of tricks that would make authoring batches more convenient.","type":"text"}]},{"type":"paragraph","content":[{"text":"Batches are essentially sets of command line options, either one per line, or separated by whitespace, that are terminated by a single period plus line feed, or by the end of the file. Each batch is parsed into a new command line fed into the tool and the output is captured in a single stream that is wrapped by a surrounding (unnamed) tag. The “--omit-namespaces” option is also passed into each subcommand so that the namespaces can be declared only once, on the root element.","type":"text"}]},{"type":"paragraph","content":[{"text":"A limited form of escaping is permitted, with the backslash character (\\) delineating a literal character to add into the command line.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Examples","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Example Command Line","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"shell"},"content":[{"text":"$ metadatagen.sh --lang US-en \\\n --logo https://idp.example.org/logo.png \\\n --logo-width 128 \\\n -o \"Example & Org\" \\\n -u \"https://example.org?foo=bar&foo=baz\" \\\n -a /Bono/ \\\n -t John/Doe/mailto\\:doe@example.org \\\n --contact-support \"Help & Desk//support@example.org\" \\\n --sp -w \\\n --nameid-format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress \\\n --idp \\\n --aa \\\n --entityID https://sp.example.org \\\n --scope example.org \\\n --cert /Users/example/Desktop/webauth.crt \\\n --sso Redirect1/idp.example.org/idp/profile/SAML/SSO/Redirect \\\n --sso Redirect/idp.example.org/idp/profile/SAML2/Redirect/SSO \\\n --sso POST/idp.example.org/idp/profile/SAML2/POST/SSO \\\n --sso SOAP/idp.example.org/idp/profile/SAML2/SSO/SOAP \\\n --query SOAP/idp.example.org:8443/idp/profile/SAML2/AttributeQuery/SOAP \\\n --query SOAP1/idp.example.org:8443/idp/profile/SAML/AttributeQuery/SOAP \\\n --logout Redirect/sp.example.org/Shibboleth.sso/SLO/Redirect \\\n --logout Artifact/sp.example.org/Shibboleth.sso/SLO/Artifact \\\n --acs POST1/sp.example.org/Shibboleth.sso/SAML/POST \\\n --acs POST/sp.example.org/Shibboleth.sso/SAML2/POST \\\n --acs POST/sp2.example.org/Shibboleth.sso/SAML2/POST \\\n --acs PAOS/sp.example.org/Shibboleth.sso/SAML2/ECP \\\n --tag urn:oasis:names:tc:SAML:profiles:subject-id:req=subject-id","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Example Batch File","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"Below is a single “command” to run. Any number can be added to a file, with the period terminator separating the commands. In principal, a shell script could be used to generate these commands, of course, which would recover some of the fancier substitution ability of the shell.","type":"text"}]},{"type":"codeBlock","attrs":{"language":"java"},"content":[{"text":"--lang US-en\n--logo https://idp.example.org/logo.png\n--logo-width 128\n-o Example\\ &\\ Org\n-u https://example.org?foo=bar&foo=baz\n-a /Bono/\n-t John/Doe/mailto:doe@example.org\n--contact-support Help\\ &\\ Desk//support@example.org\n--sp -w\n--idp\n--aa\n--entityID https://sp.example.org\n--scope example.org\n--nameid-format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\n--cert /Users/scantor/Desktop/webauth2.crt\n--sso Redirect1/idp.example.org/idp/profile/SAML/SSO/Redirect\n--sso Redirect/idp.example.org/idp/profile/SAML2/Redirect/SSO\n--sso POST/idp.example.org/idp/profile/SAML2/POST/SSO\n--sso SOAP/idp.example.org/idp/profile/SAML2/SSO/SOAP\n--query SOAP/idp.example.org:8443/idp/profile/SAML2/AttributeQuery/SOAP\n--query SOAP1/idp.example.org:8443/idp/profile/SAML/AttributeQuery/SOAP\n--logout Redirect/sp.example.org/Shibboleth.sso/SLO/Redirect\n--logout Artifact/sp.example.org/Shibboleth.sso/SLO/Artifact\n--acs POST1/sp.example.org/Shibboleth.sso/SAML/POST\n--acs POST/sp.example.org/Shibboleth.sso/SAML2/POST\n--acs POST/sp2.example.org/Shibboleth.sso/SAML2/POST\n--acs PAOS/sp.example.org/Shibboleth.sso/SAML2/ECP\n--tag urn:oasis:names:tc:SAML:profiles:subject-id:req=subject-id\n.","type":"text"}]},{"type":"paragraph"}],"version":1}