imagePullSecrets:
  - name: maps-shibboleth-sp-helm-chart-registry

route:
  enabled: true

global:
  domainName: "shibboleth-sp-helm-chart.zh.shift.switchengines.ch"

backend:
  shibboleth:
    applicationDefaults:
      entityID: "https://shibboleth-sp-helm-chart.zh.shift.switchengines.ch/shibboleth"
      homeURL: "/Shibboleth.sso/Session"
      
      sessions:
        handlerSSL: "false"

      errors:
        supportContact: "services-support@switch.ch"

      credentialResolver:
        activeSecretName: "shibboleth-sp-helm-chart-certs"

frontend:
  apache:
    enableSSL: true

    # example SWITCHengines S3 bucket hosting a static website:
    # remoteURL: "https://os.zhdk.cloud.switch.ch/swift/v1/shibboleth-sp-helm-chart-demo-page/"
    # example apache deployment in the same namespace:
    remoteURL: "http://shibboleth-sp-helm-chart-example-webserver"

    accessRules: |
      Require shib-attr homeOrganization switch.ch