knoxssopac4jsaml.xml

<topology>
   <gateway>
      ...
      <provider>
            <role>federation</role>
            <name>pac4j</name>
            <enabled>true</enabled>
            <param>
                <name>pac4j.callbackUrl</name>
                <value>https://localhost:8443/gateway/knoxssopac4jsaml/api/v1/websso</value>
            </param>
            <param>
                <name>clientName</name>
                <value>SAML2Client</value>
            </param>
            <param>
                <name>saml.serviceProviderMetadataPath</name>
                <value>./KnoxTestMetadata.xml</value>
            </param>
            <param>
                <name>saml.identityProviderMetadataPath</name>
                <value>https://www.testshib.org/metadata/testshib-providers.xml</value>     
            </param>
      </provider>
      ...
  </gateway>
</topology>