<DefaultRelyingParty provider="$IDP_ENTITY_ID$"
defaultSigningCredentialRef="IdPCredential">
- <ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile" />
- <ProfileConfiguration xsi:type="saml:SAML1AttributeQueryProfile" />
+ <!--
+ The attributes provided for each of these profile is set to its default value
+ that is, the values that would be in effect if those attributes were not present.
+ We list them here so that people are aware of them (since they seem reluctant to
+ read the documentation).
+ -->
+ <ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile"
+ includeAttributeStatement="false"
+ assertionLifetime="300000" />
+
+ <ProfileConfiguration xsi:type="saml:SAML1AttributeQueryProfile"
+ assertionLifetime="300000" />
+
<ProfileConfiguration xsi:type="saml:SAML1ArtifactResolutionProfile" />
- <ProfileConfiguration xsi:type="saml:SAML2SSOProfile" />
- <ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile" />
+
+ <ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
+ includeAttributeStatement="true"
+ assertionLifetime="300000"
+ assertionProxyCount="0" />
+
+ <ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile"
+ assertionLifetime="300000"
+ assertionProxyCount="0" />
+
<ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" />
+
</DefaultRelyingParty>