{
  "@class" : "org.apereo.cas.support.saml.services.SamlRegisteredService",
  "serviceId" : "urn:amazon:webservices",
  "name" : "amazon webservices",
  "description":"KU IT AWS Instance",
  "id" : 1160,
  "evaluationOrder" : 1160,
  "accessStrategy" : {
    "@class" : "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy",
    "delegatedAuthenticationPolicy" : {
      "@class" : "org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy",
      "allowedProviders" : [ "java.util.ArrayList", [ "CAS"] ]
    }
  },
  "metadataLocation" : "/etc/cas/services/saml/amazon.com.xml",
  "requiredNameIdFormat": "urn:oasis:names:tc:SAML:2.0:nameid-format:transient",
  "logoutType": "BACK_CHANNEL",
  "logoutUrl": "https://login.ku.edu/cas/logout",
  "attributeReleasePolicy": {
   "@class": "org.apereo.cas.services.ChainingAttributeReleasePolicy",
   "policies": [ "java.util.ArrayList",
     [
       {"@class" : "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy",
         "allowedAttributes" : {
           "@class" : "java.util.TreeMap",
           "eduPersonPrincipalName" : "urn:oid:1.3.6.1.4.1.5923.1.1.1.6",
           "eduPersonPrimaryAffiliation" : "urn:oid:1.3.6.1.4.1.5923.1.1.1.5",
           "eduPersonPrincipalName" : "https://aws.amazon.com/SAML/Attributes/RoleSessionName",
         }
       },
       {"@class" : "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy",
          "allowedAttributes" : {
            "@class" : "java.util.TreeMap",
            "https://aws.amazon.com/SAML/Attributes/Role" : "file:/etc/cas/config/scripts/aws-roles.groovy"
         }
       }
     ]
    ]
   },
   "encryptAssertions": false,
   "signAssertions":true,
  "signResponses":true
}
/*
IDP Initiated URL: https://login.ku.edu/cas/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:amazon:webservices
*/