diff --git a/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks b/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks
new file mode 100644
index 0000000..9cf9fff
--- /dev/null
+++ b/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks
Binary files differ

diff --git a/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks b/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks
new file mode 100644
index 0000000..9cf9fff
--- /dev/null
+++ b/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks
Binary files differ
diff --git a/casic-web/src/main/resources/idp-metadata-all.xml b/casic-web/src/main/resources/idp-metadata-all.xml
new file mode 100644
index 0000000..3297704
--- /dev/null
+++ b/casic-web/src/main/resources/idp-metadata-all.xml
@@ -0,0 +1,174 @@
+<?xml version="1.0" encoding="UTF-8"?><md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
+   <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://auth.uat.siam.sinopec.com/idp" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    <shibmd:jmxEndpoint/>
+         </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>
+    	<ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL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=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>                
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>        
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://auth.uat.siam.sinopec.com/idp/profile/Shibboleth/SSO"/>                
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/SSO"/>        
+    <!-- add Global logout Service -->        
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/GLO"/>    
+    </IDPSSODescriptor>    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>                    
+    <ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL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=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>        
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/AttributeQuery"/>                
+    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/AttributeQuery"/>                
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>        
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>            
+    </AttributeAuthorityDescriptor>    
+</EntityDescriptor>
+   <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="http://auth.uat.siam.sinopec.com/idp" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    <shibmd:jmxEndpoint/>
+         </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>
+    	<ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL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=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>                
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>        
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="http://auth.uat.siam.sinopec.com/idp/profile/Shibboleth/SSO"/>                
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/SSO"/>        
+    <!-- add Global logout Service -->        
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/GLO"/>    
+    </IDPSSODescriptor>    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>                    
+    <ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL
+MAkGA1UEBhMCQ04xEDAOBgNVBAoMB1NJTk9QRUMxCzAJBgNVBAMMAkNBMB4XDTE3
+MTAxNjAwMDAwMFoXDTMyMTAxNjAwMDAwMFowZzELMAkGA1UEBhMCQ04xEDAOBgNV
+BAcMB2JlaWppbmcxEDAOBgNVBAoMB1NJTk9QRUMxEDAOBgNVBAsMB1NJTk9QRUMx
+IjAgBgNVBAMMGWF1dGgudWF0LnNpYW0uc2lub3BlYy5jb20wggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQCz2eYi5mX9WWd8SnaMI8/XnTuIJVMKJ/BVWewJ
+PjillSzPbZ1LbYBvvzkMB6KIHp+xgcr6hNDz0uyQuWdPomOv632eTZC1rDbx9J6G
+1GFeuAClR2JuMmukzStpEWyCWIKDLFSnmjyLg0tcJ+VGUW73qBDiX7294xgklDhC
+PJ+TVfNpAmZ3E4mxVDfY7fm8cNSkDnHC60IldvTGiukhmg+tl20Pu0eAhe7cTQIo
+ZOSOSIjCmvb7wbZexdWqyAj/DMtozPFTozaV8qAhZMh/tfOlWECvi8TDeTU7B9sF
+DzGJJSbxQeO1VwOqsEBxGidnfQcqyZxMbh0MDoPptUI4xw0xAgMBAAGjggHfMIIB
+2zAOBgNVHQ8BAf8EBAMCBPAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
+BQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUcf//9OJM5mOOQPP4JNx29YRyvHgw
+HQYDVR0OBBYEFKLf8whNQzfXhOhKeB2A6WdH+6nNMEQGCSqGSIb3DQEJDwQ3MDUw
+DgYIKoZIhvcNAwICAgCAMA4GCCqGSIb3DQMEAgIAgDAHBgUrDgMCBzAKBggqhkiG
+9w0DBzAkBgNVHREEHTAbghlhdXRoLnVhdC5zaWFtLnNpbm9wZWMuY29tMDcGA1Ud
+HwQwMC4wLKAqoCiGJmh0dHA6Ly94a21zLnNpbm9wZWMuY29tL25ld2NhL3l5Y2Eu
+Y3JsMDkGCCsGAQUFBwEBBC0wKzApBggrBgEFBQcwAYYdaHR0cDovL29jc3Auc2lu
+b3BlYy5jb206ODgwMC8wIwYKKwYBBAGpQ2QFCAQVDBMwMS0wMDAxMDMxMTYyOTEy
+ODcyMCMGCisGAQQBqUNkBQkEFQwTMDEtMDAwMTAzMTE2MjkxMjg3MjASBgorBgEE
+AalDZAIBBAQMAjE5MB4GCGCGSAGG+EMJBBIMEDAxMDAwMTAwMDEwMDc0MDYwDQYJ
+KoZIhvcNAQELBQADgYEAmI7AbCEnNS+K9d7fR6qZwyFMkVU91v+dlvSMNWLTATCH
+kV71pqFYMWSZuNjTYFTsbcJl9DeLJXSvkJYSKDqWI9mYyXgPBG44y3rQjY86FjR0
+VyqPfjB0tj7oaJBB1cONkcYIFFGzP+1lAmzg4q/gvCJVqF9T51HZVugubZWzUGs=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>        
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/AttributeQuery"/>                
+    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/AttributeQuery"/>                
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>        
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>            
+    </AttributeAuthorityDescriptor>    
+</EntityDescriptor>
+</md:EntitiesDescriptor>

diff --git a/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks b/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks
new file mode 100644
index 0000000..9cf9fff
--- /dev/null
+++ b/casic-web/src/main/resources/certs/test.uat.siam.sinopec.com.jks
Binary files differ
diff --git a/casic-web/src/main/resources/idp-metadata-all.xml b/casic-web/src/main/resources/idp-metadata-all.xml
new file mode 100644
index 0000000..3297704
--- /dev/null
+++ b/casic-web/src/main/resources/idp-metadata-all.xml
@@ -0,0 +1,174 @@
+<?xml version="1.0" encoding="UTF-8"?><md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
+   <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://auth.uat.siam.sinopec.com/idp" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    <shibmd:jmxEndpoint/>
+         </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>
+    	<ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL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=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>                
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>        
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://auth.uat.siam.sinopec.com/idp/profile/Shibboleth/SSO"/>                
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/SSO"/>        
+    <!-- add Global logout Service -->        
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/GLO"/>    
+    </IDPSSODescriptor>    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>                    
+    <ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL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=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>        
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/AttributeQuery"/>                
+    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/AttributeQuery"/>                
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>        
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>            
+    </AttributeAuthorityDescriptor>    
+</EntityDescriptor>
+   <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="http://auth.uat.siam.sinopec.com/idp" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    <shibmd:jmxEndpoint/>
+         </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>
+    	<ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL
+MAkGA1UEBhMCQ04xEDAOBgNVBAoMB1NJTk9QRUMxCzAJBgNVBAMMAkNBMB4XDTE3
+MTAxNjAwMDAwMFoXDTMyMTAxNjAwMDAwMFowZzELMAkGA1UEBhMCQ04xEDAOBgNV
+BAcMB2JlaWppbmcxEDAOBgNVBAoMB1NJTk9QRUMxEDAOBgNVBAsMB1NJTk9QRUMx
+IjAgBgNVBAMMGWF1dGgudWF0LnNpYW0uc2lub3BlYy5jb20wggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQCz2eYi5mX9WWd8SnaMI8/XnTuIJVMKJ/BVWewJ
+PjillSzPbZ1LbYBvvzkMB6KIHp+xgcr6hNDz0uyQuWdPomOv632eTZC1rDbx9J6G
+1GFeuAClR2JuMmukzStpEWyCWIKDLFSnmjyLg0tcJ+VGUW73qBDiX7294xgklDhC
+PJ+TVfNpAmZ3E4mxVDfY7fm8cNSkDnHC60IldvTGiukhmg+tl20Pu0eAhe7cTQIo
+ZOSOSIjCmvb7wbZexdWqyAj/DMtozPFTozaV8qAhZMh/tfOlWECvi8TDeTU7B9sF
+DzGJJSbxQeO1VwOqsEBxGidnfQcqyZxMbh0MDoPptUI4xw0xAgMBAAGjggHfMIIB
+2zAOBgNVHQ8BAf8EBAMCBPAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
+BQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUcf//9OJM5mOOQPP4JNx29YRyvHgw
+HQYDVR0OBBYEFKLf8whNQzfXhOhKeB2A6WdH+6nNMEQGCSqGSIb3DQEJDwQ3MDUw
+DgYIKoZIhvcNAwICAgCAMA4GCCqGSIb3DQMEAgIAgDAHBgUrDgMCBzAKBggqhkiG
+9w0DBzAkBgNVHREEHTAbghlhdXRoLnVhdC5zaWFtLnNpbm9wZWMuY29tMDcGA1Ud
+HwQwMC4wLKAqoCiGJmh0dHA6Ly94a21zLnNpbm9wZWMuY29tL25ld2NhL3l5Y2Eu
+Y3JsMDkGCCsGAQUFBwEBBC0wKzApBggrBgEFBQcwAYYdaHR0cDovL29jc3Auc2lu
+b3BlYy5jb206ODgwMC8wIwYKKwYBBAGpQ2QFCAQVDBMwMS0wMDAxMDMxMTYyOTEy
+ODcyMCMGCisGAQQBqUNkBQkEFQwTMDEtMDAwMTAzMTE2MjkxMjg3MjASBgorBgEE
+AalDZAIBBAQMAjE5MB4GCGCGSAGG+EMJBBIMEDAxMDAwMTAwMDEwMDc0MDYwDQYJ
+KoZIhvcNAQELBQADgYEAmI7AbCEnNS+K9d7fR6qZwyFMkVU91v+dlvSMNWLTATCH
+kV71pqFYMWSZuNjTYFTsbcJl9DeLJXSvkJYSKDqWI9mYyXgPBG44y3rQjY86FjR0
+VyqPfjB0tj7oaJBB1cONkcYIFFGzP+1lAmzg4q/gvCJVqF9T51HZVugubZWzUGs=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>                
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>        
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="http://auth.uat.siam.sinopec.com/idp/profile/Shibboleth/SSO"/>                
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>        
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/SSO"/>        
+    <!-- add Global logout Service -->        
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/Redirect/GLO"/>    
+    </IDPSSODescriptor>    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">        
+    <Extensions>            
+    <shibmd:Scope regexp="false">siam.sinopec.com</shibmd:Scope>        
+    </Extensions>        
+    <KeyDescriptor>            
+    <ds:KeyInfo>                
+    <ds:X509Data>                    
+    <ds:X509Certificate>MIIEezCCA+SgAwIBAgIOQzAwMTAwMDAwMDM1MDEwDQYJKoZIhvcNAQELBQAwLDEL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=</ds:X509Certificate>                
+    </ds:X509Data>            
+    </ds:KeyInfo>        
+    </KeyDescriptor>        
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML1/SOAP/AttributeQuery"/>                
+    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="http://auth.uat.siam.sinopec.com/idp/profile/SAML2/SOAP/AttributeQuery"/>                
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>        
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>            
+    </AttributeAuthorityDescriptor>    
+</EntityDescriptor>
+</md:EntitiesDescriptor>
diff --git a/casic-web/src/main/resources/sp-metadata.xml b/casic-web/src/main/resources/sp-metadata.xml
new file mode 100644
index 0000000..2ed5c02
--- /dev/null
+++ b/casic-web/src/main/resources/sp-metadata.xml
@@ -0,0 +1,64 @@
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_c54913c07ac3dcb1630ad2aeda0002507b80d808"
+  entityID="https://test.java.sinopec.com:9443">
+  <md:SPSSODescriptor
+    protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
+        Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://test.java.sinopec.com:9443/Login" />
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
+                 Location="https://test.java.sinopec.com:9443/SSO/SAML2/DS/RESPONSE" index="1"/>
+    <shibmd:startPageUrl xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">https://test.java.sinopec.com:9443/</shibmd:startPageUrl>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>localhost.localdomain</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=test.uat.siam.sinopec.com,OU=SINOPEC,O=SINOPEC,L=beijing,C=CN</ds:X509SubjectName>
+          <ds:X509Certificate>MIIE9zCCA9+gAwIBAgIINBUY9Z4u2DcwDQYJKoZIhvcNAQELBQAwQjELMAkGA1UE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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"                 Location="https://test.java.sinopec.com:9443/SSO/Artifact/SOAP" index="0" />
+    
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"              Location="https://test.java.sinopec.com:9443/SSO/LLO/Redirect"/>
+   
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"                       Location="https://test.java.sinopec.com:9443/SSO/SLO/SOAP" />
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"              Location="https://test.java.sinopec.com:9443/SSO/SLO/Redirect" />
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"                  Location="https://test.java.sinopec.com:9443/SSO/SLO/POST" />
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"              Location="https://test.java.sinopec.com:9443/SSO/SLO/Artifact" />
+    
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"             Location="https://test.java.sinopec.com:9443/SSO/SAML2/POST" index="0" />
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"  Location="https://test.java.sinopec.com:9443/SSO/SAML2/POST-SimpleSign" index="1" />
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"         Location="https://test.java.sinopec.com:9443/SSO/SAML2/Artifact" index="2" />
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"                  Location="https://test.java.sinopec.com:9443/SSO/SAML2/ECP" index="3" />
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"          Location="https://test.java.sinopec.com:9443/SSO/SAML/POST" index="4" />
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"           Location="https://test.java.sinopec.com:9443/SSO/SAML/Artifact" index="5" />
+  </md:SPSSODescriptor>
+
+</md:EntityDescriptor>
\ No newline at end of file