Merge branch '105-onboard-kearney-salesforce-sp' into 'master'

Helpful to use a SP metadata file

Closes #105

See merge request !132

nefed.xml

@@ -14406,7 +14406,7 @@ KNGked4df0r1o5CozJ35FjKx1fiYucuvGXU+UZd5Yg6sF6MRhQqud32X3eOFJXS/ndm/jGit7B6A
                 <mdui:Logo height="85" width="141" xml:lang="en">https://c1.sfdcstatic.com/content/dam/sfdc-docs/www/logos/logo-salesforce.svg</mdui:Logo>
             </mdui:UIInfo>
         </Extensions>
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+        <SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
             <KeyDescriptor use="signing">
                 <ds:KeyInfo>
                     <ds:X509Data>
@@ -14414,12 +14414,18 @@ KNGked4df0r1o5CozJ35FjKx1fiYucuvGXU+UZd5Yg6sF6MRhQqud32X3eOFJXS/ndm/jGit7B6A
                     </ds:X509Data>
                 </ds:KeyInfo>
             </KeyDescriptor>
-            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unkearney.my.salesforce.com/services/auth/idp/saml2/logout" />
-            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://unkearney.my.salesforce.com/services/auth/idp/saml2/logout" />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unkearney.my.salesforce.com/services/auth/sp/saml2/logout" />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://unkearney.my.salesforce.com/services/auth/sp/saml2/logout" />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unk-kearney.force.com/portal/services/auth/sp/saml2/logout" />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://unk-kearney.force.com/portal/services/auth/sp/saml2/logout" />
             <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
-            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unkearney.my.salesforce.com/idp/endpoint/HttpPost" />
-            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://unkearney.my.salesforce.com/idp/endpoint/HttpRedirect" />
-        </IDPSSODescriptor>
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unkearney.my.salesforce.com" index="0" isDefault="true" />
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unk-kearney.force.com/portal/login" index="1" />
+            <AttributeConsumingService index="0" isDefault="true">
+                <ServiceName xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">Salesforce.com</ServiceName>
+                <RequestedAttribute Name="urn:oid:1.3.6.1.4.1.9904.5.1.1.1.1" isRequired="true" />
+            </AttributeConsumingService>
+        </SPSSODescriptor>
         <Organization>
             <OrganizationName xml:lang="en">Salesforce</OrganizationName>
             <OrganizationDisplayName xml:lang="en">Salesforce</OrganizationDisplayName>