Merge pull request #3076 from 18F/as-config-beta_sam

Adds BETA SAM service provider config

certs/sp/beta_sam_prod.crt

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

config/service_providers.yml

@@ -1111,3 +1111,19 @@ production:
     attribute_bundle:
       - email
     restrict_to_deploy_env: 'prod'
+
+  # BETA SAM
+  'urn:gov:gsa:openidconnect.profiles:sp:sso:gsa:beta_sam_prod':
+    friendly_name: 'beta.sam.gov'
+    agency: 'GSA'
+    agency_id: 9
+    logo: 'beta-sam.png'
+    cert: 'beta_sam_prod'
+    ial: 2
+    return_to_sp_url: 'https://beta.sam.gov'
+    redirect_uris:
+      - 'https://beta.sam.gov/'
+      - 'https://beta.sam.gov/openid_connect_login'
+    attribute_bundle:
+      - 'email'
+    restrict_to_deploy_env: 'prod'