title: NodeJS ADFS integration using Passport-SAML
body: <p>I am trying to integrate my NodeJS, Express and PassportJS application with ADFS for the single sign-on using <a href="https://github.com/bergie/passport-saml/blob/master/docs/adfs/README.md" rel="nofollow noreferrer">bergie/passport-saml</a>. </p>
  
  <p>As part of the 'Create Relying Party' step, I have generated this XML.</p>
  
  <pre><code>&lt;EntityDescriptor entityID="my-app" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
    &lt;SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"&gt;
      &lt;KeyDescriptor use="signing"&gt;
        &lt;ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"&gt;
          &lt;ds:X509Data&gt;
            &lt;ds:X509Certificate&gt;MIICvDCCAaQC...&lt;truncated for brevity&gt;...Mbz0=&lt;/ds:X509Certificate&gt;
          &lt;/ds:X509Data&gt;
        &lt;/ds:KeyInfo&gt;
      &lt;/KeyDescriptor&gt;
      &lt;SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://testapp.my-company.com/my-app/logout"/&gt;
      &lt;AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testapp.my-company.com/my-app/authenticated" index="0"/&gt;
    &lt;/SPSSODescriptor&gt;
  &lt;/EntityDescriptor&gt;
  </code></pre>
  
  <p>Our IT team handling ADFS side of things is advising me that this XML may not be correct ( for ex: it does not have the fully qualified domain name of my app testapp.my-company.com). 
  Please can someone suggest me if the above relaying party XML correct or what modifications I need.</p>