<PicketLink xmlns="urn:picketlink:identity-federation:config:2.1">
  <PicketLinkIDP xmlns="urn:picketlink:identity-federation:config:2.1"
                 ServerEnvironment="tomcat" BindingType="POST" SupportsSignatures="true"
                 RoleGenerator="org.picketlink.identity.federation.bindings.wildfly.idp.UndertowRoleGenerator"
                 AttributeManager="org.picketlink.identity.federation.bindings.wildfly.idp.UndertowAttributeManager">
    <IdentityURL>${gatein.sso.idp.url}</IdentityURL>
    <Trust>
      <Domains>${gatein.sso.sp.domains}</Domains>
    </Trust>
    <KeyProvider ClassName="org.picketlink.identity.federation.core.impl.KeyStoreKeyManager">
      <Auth Key="KeyStoreURL" Value="${gatein.sso.picketlink.keystore}"/>
      <!-- <Auth Key="KeyStorePass" Value="store123" /> -->
      <Auth Key="KeyStorePass" Value="MASK-O1P+U1Domeec8lCaoIkTGg=="/>
      <!-- <Auth Key="SigningKeyPass" Value="test123" /> -->
      <Auth Key="SigningKeyPass" Value="MASK-AJbh4WmHwy8="/>
      <Auth Key="SigningKeyAlias" Value="servercert"/>
      <Auth Key="salt" Value="18273645"/>
      <Auth Key="iterationCount" Value="11"/>
      <ValidatingAlias Key="${gatein.sso.sp.host}" Value="servercert"/>
    </KeyProvider>
  </PicketLinkIDP>

  <Handlers xmlns="urn:picketlink:identity-federation:handler:config:2.1">
    <Handler
        class="org.picketlink.identity.federation.web.handlers.saml2.SAML2IssuerTrustHandler"/>
    <Handler
        class="org.gatein.sso.agent.saml.PortalSAML2LogOutHandler"/>
    <Handler
        class="org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler"/>
    <Handler
        class="org.picketlink.identity.federation.web.handlers.saml2.RolesGenerationHandler"/>
    <Handler
        class="org.picketlink.identity.federation.web.handlers.saml2.SAML2SignatureGenerationHandler"/>
  </Handlers>
</PicketLink>

