23,25c23,24
<     <ApplicationDefaults entityID="https://dev.duracloud.org/shibboleth"
< 			 homeURL="https://dev.duracloud.org/"
<                          REMOTE_USER="principal-id">
---
>     <ApplicationDefaults entityID="https://sp.example.org/shibboleth"
>                          REMOTE_USER="eppn persistent-id targeted-id">
39,51d37
<             SessionInitiators handle session requests and relay them to a Discovery page,
<             or to an IdP if possible. Automatic session setup will use the default or first
<             element (or requireSessionWith can specify a specific id to use).
<             -->
<             <SessionInitiator type="Chaining" Location="/Login" isDefault="true"
<                     relayState="cookie" entityID="https://ama.duracloud.org/idp/shibboleth">
< 
<                 <SessionInitiator type="SAML2" defaultACSIndex="1" template="/etc/shibboleth/bindingTemplate.html"/>
<                 <SessionInitiator type="Shib1" defaultACSIndex="5"/>
<             </SessionInitiator>
< 
< 
<             <!--
56a43,46
>             <SSO entityID="https://idp.example.org/shibboleth"
>                  discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
>               SAML2 SAML1
>             </SSO>
58,110c48,49
<             <!--
<             md:AssertionConsumerService locations handle specific SSO protocol bindings,
<             such as SAML 2.0 POST or SAML 1.1 Artifact. The isDefault and index attributes
<             are used when sessions are initiated to determine how to tell the IdP where and
<             how to return the response.
<             -->
<             <md:AssertionConsumerService Location="/SAML2/POST" index="1"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
<             <md:AssertionConsumerService Location="/SAML2/POST-SimpleSign" index="2"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"/>
<             <md:AssertionConsumerService Location="/SAML2/Artifact" index="3"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>
<             <md:AssertionConsumerService Location="/SAML2/ECP" index="4"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"/>
<             <md:AssertionConsumerService Location="/SAML/POST" index="5"
<                 Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"/>
< 
<             <md:AssertionConsumerService Location="/SAML/Artifact" index="6"
<                 Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"/>
< 
<             <!-- LogoutInitiators enable SP-initiated local or global/single logout of sessions. -->
<             <LogoutInitiator type="Chaining" Location="/Logout" relayState="cookie">
<                 <LogoutInitiator type="SAML2" template="/etc/shibboleth/bindingTemplate.html"/>
<                 <LogoutInitiator type="Local"/>
<             </LogoutInitiator>
< 
<             <!-- md:SingleLogoutService locations handle single logout (SLO) protocol messages. -->
<             <md:SingleLogoutService Location="/SLO/SOAP"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
< 
<             <md:SingleLogoutService Location="/SLO/Redirect" conf:template="/etc/shibboleth/bindingTemplate.html"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/>
<             <md:SingleLogoutService Location="/SLO/POST" conf:template="/etc/shibboleth/bindingTemplate.html"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
<             <md:SingleLogoutService Location="/SLO/Artifact" conf:template="/etc/shibboleth/bindingTemplate.html"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>
< 
<             <!-- md:ManageNameIDService locations handle NameID management (NIM) protocol messages. -->
<             <md:ManageNameIDService Location="/NIM/SOAP"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
<             <md:ManageNameIDService Location="/NIM/Redirect" conf:template="/etc/shibboleth/bindingTemplate.html"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/>
<             <md:ManageNameIDService Location="/NIM/POST" conf:template="/etc/shibboleth/bindingTemplate.html"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
<             <md:ManageNameIDService Location="/NIM/Artifact" conf:template="/etc/shibboleth/bindingTemplate.html"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>
< 
<             <!--
<             md:ArtifactResolutionService locations resolve artifacts issued when using the
<             SAML 2.0 HTTP-Artifact binding on outgoing messages, generally uses SOAP.
<             -->
<             <md:ArtifactResolutionService Location="/Artifact/SOAP" index="1"
<                 Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
---
>             <!-- SAML and local-only logout. -->
>             <Logout>SAML2 Local</Logout>
134,135d72
<         <MetadataProvider type="XML" uri="https://ama.duracloud.org/idp/profile/Metadata/SAML"
<               backingFilePath="/var/run/shibboleth/dfr-idp-metadata.xml" reloadInterval="7200">
136a74,75
>         <MetadataProvider type="XML" uri="http://federation.org/federation-metadata.xml"
>               backingFilePath="federation-metadata.xml" reloadInterval="7200">
139d77
<         -->
140a79
>         -->
143,146c82,84
< 
<         <!-- TrustEngines run in order to evaluate peer keys and certificates. -->
<         <TrustEngine type="ExplicitKey"/>
<         <TrustEngine type="PKIX"/>
---
>         <!--
>         <MetadataProvider type="XML" file="partner-metadata.xml"/>
>         -->
158c96
<         <CredentialResolver type="File" key="/etc/shibboleth/sp-key.pem" certificate="/etc/shibboleth/sp-cert.pem"/>
---
>         <CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>