diff --git a/Resources/config/packages/dev/cas_bundle.yaml b/Resources/config/packages/dev/cas_bundle.yaml index 88ce4ec..e6a32cc 100644 --- a/Resources/config/packages/dev/cas_bundle.yaml +++ b/Resources/config/packages/dev/cas_bundle.yaml @@ -7,22 +7,41 @@ cas: - service - renew - gateway + - acceptStrengths default_parameters: + # Comma separated list of user strengths: PASSWORD, MOBILE_APP, PASSWORD_SMS, PASSWORD_TOKEN, PASSWORD_TOKEN_CRAM, PASSWORD_SOFTWARE_TOKEN, PASSWORD_MOBILE_APP, CLIENT_CERT, BASIC + # For a mock-up server, use BASIC, default is PASSWORD. + acceptStrengths: "PASSWORD" service: cas_bundle_homepage serviceValidate: allowed_parameters: - - service - - ticket + - assuranceLevel + - format + - groups - pgtUrl - renew - - format - - userDetails + - service + - ticket - ticketTypes + - userDetails + # Could be /serviceValidate, /strictValidate, /interinstitutionalValidate, /sponsorValidate, /laxValidate + # Make sure to read the "ECAS Client Installation and Configuration Guide - Advanced.pdf" before changing those parameters. path: /serviceValidate default_parameters: - userDetails: "true" + # Type of assurance level: TOP, HIGH, MEDIUM, LOW + # Default is TOP. + assuranceLevel: "TOP" + # Do not change this parameter, it won't work with ECAS. format: XML + # Allowed user groups. "*" means all the groups. + groups: "*" + # Enable proxy authentication by setting this parameter. #pgtUrl: cas_bundle_proxy_callback + # Comma separated list of allowed ticket types: SERVICE, DESKTOP, PROXY. + # Default is SERVICE,PROXY + ticketTypes: "SERVICE,PROXY" + # Boolean. If true, all the user fields will be retrieved from ECAS. + userDetails: "true" logout: path: /logout allowed_parameters: @@ -37,12 +56,31 @@ cas: proxyValidate: path: /proxyValidate allowed_parameters: + - assuranceLevel + - format + - groups + - pgtUrl + - renew - service - ticket + - ticketTypes - userDetails - - pgtUrl - - format + - userStrengths default_parameters: - userDetails: "true" + # Type of assurance level: TOP, HIGH, MEDIUM, LOW + # Default is TOP. + assuranceLevel: "TOP" + # Do not change this parameter, it won't work with ECAS. format: XML + # Allowed user groups. "*" means all the groups. + groups: "*" + # Enable proxy authentication by setting this parameter. #pgtUrl: cas_bundle_proxy_callback + # Comma separated list of allowed ticket types: SERVICE, DESKTOP, PROXY. + # Default is SERVICE,PROXY + ticketTypes: "SERVICE,PROXY" + # Boolean. If true, all the user fields from ECAS server and available will be retrieved. + userDetails: "true" + # Comma separated list of user strengths: PASSWORD, MOBILE_APP, PASSWORD_SMS, PASSWORD_TOKEN, PASSWORD_TOKEN_CRAM, PASSWORD_SOFTWARE_TOKEN, PASSWORD_MOBILE_APP, CLIENT_CERT, BASIC + # For a mock-up server, use BASIC, default is PASSWORD. + userStrengths: "PASSWORD"