<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright 2002-2021 the original author or authors.
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~      https://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->

<b:beans xmlns:b="http://www.springframework.org/schema/beans"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xmlns="http://www.springframework.org/schema/security"
         xsi:schemaLocation="
			http://www.springframework.org/schema/security
			https://www.springframework.org/schema/security/spring-security.xsd
			http://www.springframework.org/schema/beans
			https://www.springframework.org/schema/beans/spring-beans.xsd">
  <relying-party-registrations>
    <relying-party-registration registration-id="one"
                                entity-id="{baseUrl}/saml2/service-provider-metadata/{registrationId}"
                                assertion-consumer-service-location="{baseUrl}/login/saml2/sso/{registrationId}"
                                assertion-consumer-service-binding="REDIRECT"
                                asserting-party-id="google"/>
    
    <asserting-party asserting-party-id="google" entity-id="https://accounts.google.com/o/saml2/idp/entity-id"
                     want-authn-requests-signed="true"
                     single-sign-on-service-location="https://accounts.google.com/o/saml2/idp/sso-url"
                     single-sign-on-service-binding="POST">
      <verification-credential
          certificate-location="classpath:org/springframework/security/config/saml2/idp-certificate.crt"
          private-key-location="classpath:org/springframework/security/config/saml2/rp-private.key"/>
      <encryption-credential
          certificate-location="classpath:org/springframework/security/config/saml2/idp-certificate.crt"
          private-key-location="classpath:org/springframework/security/config/saml2/rp-private.key"/>
    </asserting-party>
  </relying-party-registrations>
</b:beans>
