Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

USAGOV-2001 samlauth default config and stage config #1999

Merged
merged 2 commits into from
Oct 8, 2024
Merged

USAGOV-2001 samlauth default config and stage config #1999

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
234b04d
USAGOV-2001-samlauth-default-config: Make SecureAuth the default if n…
arpage Oct 8, 2024
9e7a4ef
USAGOV-2001-samlauth-default-config: Previous commit tested the "defa…
arpage Oct 8, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 16 additions & 13 deletions scripts/gsaauth/configset.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,19 +12,22 @@ SPACE=$(echo "$SPACE" | tr '[:upper:]' '[:lower:]')

#echo=echo

SAMLCONF=$SCRIPT_DIR/gsaauth.default.conf
if [ -f $SCRIPT_DIR/gsaauth.$SPACE.conf ]; then
while read -r f v; do
if [ -n "$f" -a -n "$v" ]; then
key=$(echo "$f" | sed "s/\.1//")
#echo $key
#echo $f
echo drush cdel -y samlauth.authentication "$key"
$echo drush cdel -y samlauth.authentication "$key"
echo drush cset -y --input-format=yaml samlauth.authentication "$f" "$v"
$echo drush cset -y --input-format=yaml samlauth.authentication "$f" "$v"
fi
done < $SCRIPT_DIR/gsaauth.$SPACE.conf
SAMLCONF=$SCRIPT_DIR/gsaauth.$SPACE.conf
else
echo Cannot find GSA Auth config file for $SPACE: $SCRIPT_DIR/gsaauth.$SPACE.conf
exit 1
echo "WARNING: Cannot find GSA Auth config file for $SPACE ($SCRIPT_DIR/gsaauth.$SPACE.conf)"
echo "WARNING: Using default SecureAuth configuration: $SAMLCONF"
fi

while read -r f v; do
if [ -n "$f" -a -n "$v" ]; then
key=$(echo "$f" | sed "s/\.1//")
#echo $key
#echo $f
echo drush cdel -y samlauth.authentication "$key"
$echo drush cdel -y samlauth.authentication "$key"
echo drush cset -y --input-format=yaml samlauth.authentication "$f" "$v"
$echo drush cset -y --input-format=yaml samlauth.authentication "$f" "$v"
fi
done < $SAMLCONF
4 changes: 4 additions & 0 deletions scripts/gsaauth/gsaauth.stage.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
sp_entity_id 'https://cms-stage.usa.gov'
idp_entity_id 'http://www.okta.com/exkckvndvxBTTcw594h7'
idp_single_sign_on_service 'https://auth-preprod.gsa.gov/app/gsauth-preprod_usagovcmsstage_1/exkckvndvxBTTcw594h7/sso/saml'
idp_certs.1 'MIIDrDCCApSgAwIBAgIGAZJsneCiMA0GCSqGSIb3DQEBCwUAMIGWMQswCQYDVQQGEwJVUzETMBEG A1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwET2t0YTEU MBIGA1UECwwLU1NPUHJvdmlkZXIxFzAVBgNVBAMMDmdzYXV0aC1wcmVwcm9kMRwwGgYJKoZIhvcN AQkBFg1pbmZvQG9rdGEuY29tMB4XDTI0MTAwODE0NTExOFoXDTM0MTAwODE0NTIxOFowgZYxCzAJ BgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMQ0w CwYDVQQKDARPa3RhMRQwEgYDVQQLDAtTU09Qcm92aWRlcjEXMBUGA1UEAwwOZ3NhdXRoLXByZXBy b2QxHDAaBgkqhkiG9w0BCQEWDWluZm9Ab2t0YS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDQw3fYJylKPEVx843iKYfI3SHR6lWExCkQel0IVBkwo8ihVVVTxrcoAe9USL3yPKUI o4mTwXT6fSr229i6wk49zL0PmTyNNnRyD/Wfk7SmhJfic+86InTYsCmLU2BS4F78RWrE+DnJNgUY 6ONCQMX6iR8PB8WuRHw/DSHn0XxcPJO7caOspevfWYqla+INqWEQyNhnF3kKCnJcTRJElKVWqNlS 5HTok9J+dQDY94GdqofdJhrgdSoMd8WJyci4R8ckSP76PVr4drd3gXEd5QURdDniKdyQkGLHB7yh oABPblVS4CctYwoqOxXJ7zM2e3YTHbGQWz7rbS/BSGI6AocRAgMBAAEwDQYJKoZIhvcNAQELBQAD ggEBAIiWIK+Ul13z8mHgvSFYRMk7V2ZUK15jyMpeS2iwNQmKCTEKvunqmVQ1XU1xUQ/CYpI1iLHe mF+u71IUxmidPFME5MITcQF5qFxun3yxQKtowws7OR+O/ROrS3Ia+xpDqZJLX7EuBiE8DRRaRmqt CIV0jvmGdMN8Ju2CgRjPMra8CxySZgsXUd+B2F66/3ZsL1sdU+CpP1cdm81e4z1oKAUM/OrSfp0D gpc3Ot9dFqBW/FtEQASgEVfwx2ZrrVq0v5/z9Zs4QMTtWFOPVohPW0fP0nP384IfMHpWF/s5RscK AmTcx9UOWVsjq5rrTud+Vz5QvlsPVDU6hlZo6CRHkMk='
Loading