Merge pull request #2145 from 18F/stevegsa-add-secret-service-pix-sp

LG-237 Add Secret Service PIX SP to Production

certs/sp/usss_prod.crt

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

config/agencies.yml

@@ -11,6 +11,8 @@ test:
     name: 'NGA'
   6:
     name: 'DOT'
+  7:
+    name: 'DHS'
 
 development:
   1:
@@ -25,6 +27,8 @@ development:
     name: 'NGA'
   6:
     name: 'DOT'
+  7:
+    name: 'USSS'
 
 production:
   1:
@@ -39,3 +43,5 @@ production:
     name: 'NGA'
   6:
     name: 'DOT'
+  7:
+    name: 'USSS'

config/service_providers.yml

@@ -598,3 +598,18 @@ production:
       - 'https://symphony.nga-geoworks.com/guacamole/#/'
       - 'https://symphony.nga-geoworks.com/secured'
     restrict_to_deploy_env: 'prod'
+
+  # Secret Service PIX
+  'urn:gov:gsa:SAML:2.0.profiles:sp:sso:usss:pix':
+    agency_id: 7
+    friendly_name: 'PIX'
+    agency: 'USSS'
+    logo: 'usss_pix.png'
+    acs_url: 'https://pix.secretservice.gov/auth'
+    sp_initiated_login_url: 'https://pix.secretservice.gov/logingov'
+    return_to_sp_url: 'https://pix.secretservice.gov/'
+    block_encryption: 'aes256-cbc'
+    cert: 'usss_prod'
+    attribute_bundle:
+      - email
+    restrict_to_deploy_env: 'prod'