Keystone Saml Mellon

Identity Provider metadata XML file that conforms to saml-metadata-2.0-os specification. This file contains idP identification information and its certificates with public keys that can be used for signing and encryption on the idP side in IDPSSODescriptor and other information which can be used on the service provider side to interact with that idP.

Private key used by Service Provider (mod_auth_mellon) to sign and/or SAML-level (not transport-level) encryption.

Specifies a signing KeyInfo portion of SPSSODescriptor to be used in Service Provider metadata. This should be an XML portion which in the simplest case is formatted as shown below: This fragment should contain a certificate that contains a public key of a Service Provider in case an idP requires that SAML requests are signed. The term "signing certificate" is a misnomer. A signing certificate in metadata is actually used for signature verification, not signing. The private signing key is held securely by the signing party (SP in this case). In a SAML exchange an SP signs SAML messages with its private key and idP validates them via a public key embedded in a certificate present in the SP's metadata XML and vice versa for idP.