✨(saml) use FER MDQ server

MDQ is a modern alternative to fetching the full metadata which better
handles expiration.

docker-compose.yml

@@ -30,7 +30,7 @@ services:
           }
         }
       SAML2_DISCOVERY_URL: https://discovery.renater.fr/test/
-      SAML2_METADATA_URL: https://pub.federation.renater.fr/metadata/test/preview/preview-idps-test-metadata.xml
+      SAML2_MDQ_URL: https://mdq.federation.renater.fr/test
       SAML2_ENTITY_ID: https://satosa.traefik.me/Saml2/proxy_saml2_backend.xml
     env_file:
       - env.d/development/common

src/helm/env.d/dev/values.oidc2fer.yaml.gotmpl

@@ -12,7 +12,7 @@ satosa:
     LOG_LEVEL: debug
 
     SAML2_DISCOVERY_URL: https://discovery.renater.fr/test/
-    SAML2_METADATA_URL: https://pub.federation.renater.fr/metadata/test/preview/preview-idps-test-metadata.xml
+    SAML2_MDQ_URL: https://mdq.federation.renater.fr/test
     SAML2_ENTITY_ID:  https://oidc2fer.127.0.0.1.nip.io/Saml2/proxy_saml2_backend.xml
 
     STATE_ENCRYPTION_KEY: { secretKeyRef: { name: oidc2fer, key: STATE_ENCRYPTION_KEY } }

src/helm/env.d/outscale-production/values.oidc2fer.yaml.gotmpl

@@ -13,7 +13,7 @@ satosa:
     LOG_LEVELS: '{ "satosa.backends.saml2": "DEBUG" }'
 
     SAML2_DISCOVERY_URL: https://discovery.renater.fr/agentconnect/
-    SAML2_METADATA_URL: https://pub.federation.renater.fr/metadata/renater/main/main-idps-renater-metadata.xml
+    SAML2_MDQ_URL: https://mdq.federation.renater.fr/fer
     SAML2_ENTITY_ID:  https://renater.agentconnect.gouv.fr/Saml2/proxy_saml2_backend.xml
 
     STATE_ENCRYPTION_KEY: { secretKeyRef: { name: oidc2fer, key: STATE_ENCRYPTION_KEY } }

src/helm/env.d/staging/values.oidc2fer.yaml.gotmpl

@@ -13,7 +13,7 @@ satosa:
     LOG_LEVELS: '{ "satosa.backends.saml2": "DEBUG" }'
 
     SAML2_DISCOVERY_URL: https://discovery.renater.fr/test/
-    SAML2_METADATA_URL: https://pub.federation.renater.fr/metadata/test/preview/preview-idps-test-metadata.xml
+    SAML2_MDQ_URL: https://mdq.federation.renater.fr/test
     SAML2_ENTITY_ID:  https://oidc2fer-staging.beta.numerique.gouv.fr/Saml2/proxy_saml2_backend.xml-test
 
     STATE_ENCRYPTION_KEY: { secretKeyRef: { name: oidc2fer, key: STATE_ENCRYPTION_KEY } }

src/satosa/plugins/backends/saml2_backend.yaml

@@ -19,10 +19,9 @@ config:
       display_name: DINUM
       url: https://beta.gouv.fr/incubateurs/dinum_produits_interministeriels.html
     metadata:
-      # mdq:
-      #   - url: https://mdq.federation.renater.fr
-      remote:
-        - url: !ENV SAML2_METADATA_URL
+      mdq:
+        - url: !ENV SAML2_MDQ_URL
+          freshness_period: "P0Y0M0DT1H0M10S"
     entityid: !ENV SAML2_ENTITY_ID
     accepted_time_diff: 60
     allow_unknown_attributes: true