Please follow the DualShield Authentication Delegation section in the following GitHub article...
https://github.com/omnine/cas-overlay-template/tree/dualshield
For for this section here....
...Please refer to Download the IDP Metadata file as instructed in DualShield Configuration for Apereo Part 1.