saml20-idp-remote.php

<?php

/**
 * SAML 2.0 remote IdP metadata for SimpleSAMLphp.
 *
 * Remember to remove the IdPs you don't use from this file.
 *
 * See: https://simplesamlphp.org/docs/stable/simplesamlphp-reference-idp-remote
 */


/**
 * Environment based switching at bottom of file
 */
$metadata['https://sts.windows.net/sample/'] = [
  'entityid' => 'https://sts.windows.net/sample/',
  'metadata-set' => 'saml20-idp-remote',
  'sign.authnrequest' => true,
  'SingleSignOnService' =>
    [
      [
        'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
        'Location' => 'https://login.microsoftonline.com/sample/saml2',
       ],
      [
        'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
        'Location' => 'https://login.microsoftonline.com/sample/saml2',
      ]
    ],
  'SingleLogoutService' =>
    [
      [
          'Binding' => 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
          'Location' => 'https://login.microsoftonline.com/sample/saml2',
      ],
    ],
  'certificate' => 'sample.cer',
];

/**
 * Env based switching
 */
// Acquia dev
if(isset($_ENV['AH_SITE_ENVIRONMENT']) && $_ENV['AH_SITE_ENVIRONMENT'] == 'dev') {
  $metadata['https://sts.windows.net/sample/']['certificate'] = 'sample2.cer';
}