{
  "services": {
    "wildcard-app1": {
      "entity_id": "service:(?<owner>\\w+):(?<service>\\w+)",
      "acs": "https://(?<service>\\w+).services.example.com/saml/acs",
      "tokens": [ "service" ],
      "template": {
        "name": "Application 1 ({{service}})",
        "privileges": {
          "resource": "sso:{{entity_id}}",
          "roles": [ "sso:(.*)" ]
        },
        "attributes": {
          "principal": "saml:attribute:principal",
          "name": "saml:attribute:name",
          "email": "saml:attribute:email",
          "roles": "saml:attribute:roles"
        }
      }
    },
    "wildcard-app2": {
      "entity_id": "service:(?<owner>\\w+):(?<service>\\w+)",
      "acs": "https://(?<service>\\w+).services.example.com/api/v1/saml",
      "tokens": [ "service" ],
      "template": {
        "name": "Application 2 ({{service}})",
        "privileges": {
          "resource": "sso:{{entity_id}}",
          "roles": [ "sso:(.*)" ]
        },
        "attributes": {
          "principal": "saml:attribute:principal",
          "name": "saml:attribute:name",
          "email": "saml:attribute:email",
          "roles": "saml:attribute:roles"
        }
      }
    }
  }
}