imagePullSecrets:
  - name: maps-shibboleth-sp-helm-chart-registry

route:
  enabled: true

global:
  domainName: "shibboleth-sp-helm-chart.zh.shift.switchengines.ch"

backend:
  shibboleth:
    applicationDefaults:
      entityID: "https://shibboleth-sp-helm-chart.zh.shift.switchengines.ch/shibboleth"
      homeURL: "/Shibboleth.sso/Session"
      
      sessions:
        handlerSSL: "false"

      errors:
        supportContact: "services-support@switch.ch"

      credentialResolver:
        activeSecretName: "shibboleth-sp-helm-chart-certs"

frontend:
  apache:
    remoteURL: https://www.switch.ch

    accessRules: |
      Require shib-attr homeOrganization switch.ch