<PicketLink xmlns="urn:picketlink:identity-federation:config:2.1">
  <PicketLinkSP xmlns="urn:picketlink:identity-federation:config:2.1"
                ServerEnvironment="tomcat" BindingType="POST" SupportsSignatures="true" LogOutPage="/">
    <IdentityURL>${gatein.sso.idp.url}</IdentityURL>
    <ServiceURL>${gatein.sso.sp.url}</ServiceURL>

    <!-- WARNING: This bundled keystore is only for testing purposes. You should generate and configure your own keystore!-->
    <KeyProvider ClassName="org.picketlink.identity.federation.core.impl.KeyStoreKeyManager">
      <Auth Key="KeyStoreURL" Value="${gatein.sso.picketlink.keystore}"/>
      <!-- <Auth Key="KeyStorePass" Value="store123" /> -->
      <Auth Key="KeyStorePass" Value="MASK-O1P+U1Domeec8lCaoIkTGg=="/>
      <!-- <Auth Key="SigningKeyPass" Value="test123" /> -->
      <Auth Key="SigningKeyPass" Value="MASK-AJbh4WmHwy8="/>
      <Auth Key="SigningKeyAlias" Value="servercert"/>
      <Auth Key="salt" Value="18273645"/>
      <Auth Key="iterationCount" Value="11"/>
      <ValidatingAlias Key="${gatein.sso.idp.host}" Value="servercert"/>
    </KeyProvider>

  </PicketLinkSP>

  <Handlers xmlns="urn:picketlink:identity-federation:handler:config:2.1">
    <Handler
        class="org.gatein.sso.agent.saml.PortalSAML2LogOutHandler"/>
    <Handler
        class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/>
    <Handler
        class="org.picketlink.identity.federation.web.handlers.saml2.RolesGenerationHandler"/>
  </Handlers>
</PicketLink>
