Skip to content

Commit 6b25732

Browse files
committed
add configuration options for idp/aa specific directives
1 parent 0afaddc commit 6b25732

File tree

1 file changed

+25
-4
lines changed

1 file changed

+25
-4
lines changed

docs/howto/config.rst

Lines changed: 25 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -268,7 +268,8 @@ Example::
268268
verify_ssl_cert
269269
^^^^^^^^^^^^^^^
270270

271-
A boolean value (``True`` or ``False``). The default configuration is ``False``.
271+
Specifies if the SSL certificates should be verified. Can be ``True`` or ``False``.
272+
The default configuration is ``False``.
272273

273274
Example::
274275

@@ -327,7 +328,8 @@ Indicates which certificates will be used for encryption capabilities::
327328
generate_cert_info
328329
^^^^^^^^^^^^^^^^^^
329330

330-
A boolean value.
331+
Specifies if information about the certificate should be generated.
332+
A boolean value can be ``True`` or ``False``.
331333

332334
Example::
333335

@@ -612,7 +614,8 @@ Example::
612614
verify_encrypt_advice
613615
^^^^^^^^^^^^^^^^^^^^^
614616

615-
A boolean value.
617+
Specifies if the encrypted assertions in the advice element should be verified.
618+
Can be ``True`` or ``False``.
616619

617620
Example::
618621

@@ -630,7 +633,8 @@ Example::
630633
verify_encrypt_cert_assertion
631634
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
632635

633-
A boolean value.
636+
Specifies if the encrypted assertions should be verified.
637+
Can be ``True`` or ``False``.
634638

635639
Example::
636640

@@ -659,6 +663,23 @@ sign_response
659663
Specifies if the IdP should sign the authentication response or not. Can be
660664
True or False. Default is False.
661665

666+
encrypt_assertion
667+
"""""""""""""""""
668+
669+
Specifies if the IdP should encrypt the assertions. Can be ``True`` or ``False``.
670+
Default is ``False``.
671+
672+
encrypted_advice_attributes
673+
"""""""""""""""""""""""""""
674+
Specifies if assertions in the advice element should be encrypted.
675+
Can be ``True`` or ``False``. Default is ``False``.
676+
677+
encrypt_assertion_self_contained
678+
""""""""""""""""""""""""""""""""
679+
680+
Specifies if all encrypted assertions should have all namespaces self contained.
681+
Can be ``True`` or ``False``. Default is ``True``.
682+
662683
want_authn_requests_signed
663684
""""""""""""""""""""""""""
664685

0 commit comments

Comments
 (0)