Update default configuration.

Take into account specific ECAS parameters.
ecphp · Jan 20, 2020 · 4c10067 · 4c10067
1 parent c262c10
commit 4c10067
Showing 1 changed file with 46 additions and 8 deletions.
diff --git a/Resources/config/packages/dev/cas_bundle.yaml b/Resources/config/packages/dev/cas_bundle.yaml
@@ -7,22 +7,41 @@ cas:
         - service
         - renew
         - gateway
+        - acceptStrengths
       default_parameters:
+        # Comma separated list of user strengths: PASSWORD, MOBILE_APP, PASSWORD_SMS, PASSWORD_TOKEN, PASSWORD_TOKEN_CRAM, PASSWORD_SOFTWARE_TOKEN, PASSWORD_MOBILE_APP, CLIENT_CERT, BASIC
+        # For a mock-up server, use BASIC, default is PASSWORD.
+        acceptStrengths: "PASSWORD"
         service: cas_bundle_homepage
     serviceValidate:
       allowed_parameters:
-        - service
-        - ticket
+        - assuranceLevel
+        - format
+        - groups
         - pgtUrl
         - renew
-        - format
-        - userDetails
+        - service
+        - ticket
         - ticketTypes
+        - userDetails
+      # Could be /serviceValidate, /strictValidate, /interinstitutionalValidate, /sponsorValidate, /laxValidate
+      # Make sure to read the "ECAS Client Installation and Configuration Guide - Advanced.pdf" before changing those parameters.
       path: /serviceValidate
       default_parameters:
-        userDetails: "true"
+        # Type of assurance level: TOP, HIGH, MEDIUM, LOW
+        # Default is TOP.
+        assuranceLevel: "TOP"
+        # Do not change this parameter, it won't work with ECAS.
         format: XML
+        # Allowed user groups. "*" means all the groups.
+        groups: "*"
+        # Enable proxy authentication by setting this parameter.
         #pgtUrl: cas_bundle_proxy_callback
+        # Comma separated list of allowed ticket types: SERVICE, DESKTOP, PROXY.
+        # Default is SERVICE,PROXY
+        ticketTypes: "SERVICE,PROXY"
+        # Boolean. If true, all the user fields will be retrieved from ECAS.
+        userDetails: "true"
     logout:
       path: /logout
       allowed_parameters:
@@ -37,12 +56,31 @@ cas:
     proxyValidate:
       path: /proxyValidate
       allowed_parameters:
+        - assuranceLevel
+        - format
+        - groups
+        - pgtUrl
+        - renew
         - service
         - ticket
+        - ticketTypes
         - userDetails
-        - pgtUrl
-        - format
+        - userStrengths
       default_parameters:
-        userDetails: "true"
+        # Type of assurance level: TOP, HIGH, MEDIUM, LOW
+        # Default is TOP.
+        assuranceLevel: "TOP"
+        # Do not change this parameter, it won't work with ECAS.
         format: XML
+        # Allowed user groups. "*" means all the groups.
+        groups: "*"
+        # Enable proxy authentication by setting this parameter.
         #pgtUrl: cas_bundle_proxy_callback
+        # Comma separated list of allowed ticket types: SERVICE, DESKTOP, PROXY.
+        # Default is SERVICE,PROXY
+        ticketTypes: "SERVICE,PROXY"
+        # Boolean. If true, all the user fields from ECAS server and available will be retrieved.
+        userDetails: "true"
+        # Comma separated list of user strengths: PASSWORD, MOBILE_APP, PASSWORD_SMS, PASSWORD_TOKEN, PASSWORD_TOKEN_CRAM, PASSWORD_SOFTWARE_TOKEN, PASSWORD_MOBILE_APP, CLIENT_CERT, BASIC
+        # For a mock-up server, use BASIC, default is PASSWORD.
+        userStrengths: "PASSWORD"