<?php

return [
    'compress' => [
        'requests'  => true,
        'responses' => true,
    ],
    'security' => [
        'nameIdEncrypted'              => false,
        'authnRequestsSigned'          => false,
        'logoutRequestSigned'         => false,
        'logoutResponseSigned'        => false,
        'signMetadata'                => false,
        'wantMessagesSigned'          => false,
        'wantAssertionsEncrypted'     => false,
        'wantAssertionsSigned'        => false,
        'wantNameId'                  => true,
        'wantNameIdEncrypted'         => false,
        'requestedAuthnContext'       => false,
        'wantXMLValidation'           => true,
        'relaxDestinationValidation'  => false,
        'destinationStrictlyMatches'  => false,
        'signatureAlgorithm'          => 'http://www.w3.org/2001/04/xmldsig-more#rsa-sha256',
        'digestAlgorithm'             => 'http://www.w3.org/2001/04/xmlenc#sha256',
        'lowercaseUrlencoding'        => false,
    ],
    // Add contactPerson/organization only when fully populated.
];