@@ -223,6 +223,8 @@ parameters:
223223 feature_run_all_manipulations_prior_to_consent: false
224224 feature_block_user_on_violation: false
225225 feature_enable_consent: true
226+ feature_stepup_sfo_override_engine_entityid: false
227+ feature_enable_idp_initiated_flow: true
226228
227229 ##########################################################################################
228230 ## PROFILE SETTINGS
@@ -261,6 +263,7 @@ parameters:
261263 stepup.gateway.sfo.sso_location: 'https://gateway.dev.openconext.local/second-factor-only/single-sign-on'
262264 ## The public key from the Stepup Gateway IdP
263265 stepup.gateway.sfo.key_file: /config/engine/engineblock.crt
266+ stepup.sfo.override_engine_entityid: 'https://engine.dev.openconext.local/new/stepup/metadata'
264267
265268 ##########################################################################################
266269 ## THEME SETTINGS
@@ -291,3 +294,12 @@ parameters:
291294 # If set to 0 the cookie will expire at the end of the session (when the browser closes).
292295 sso_session_cookie_max_age: 0
293296
297+ ##########################################################################################
298+ ## Authentication log enrichment
299+ ##########################################################################################
300+ # When a user successfully authenticates and additional logging to the authentication log is desired, the following
301+ # parameter can be used to define a mapping of attributes that will be used to enrich the authentication log.
302+ # A (list) mapping is for example <attributeLabel>: <attributeName> where the label represents the label that is
303+ # used in the authentication log record. The attributeName will be searched in the response attributes and if present
304+ # the log data will be enriched. The values of the response attributes are the final values after ARP and Attribute Manipulation.
305+ auth.log.attributes: []
0 commit comments