diff --git a/utils/extract-idp-csp.sh b/utils/extract-idp-csp.sh
new file mode 100755
index 0000000..c414014
--- /dev/null
+++ b/utils/extract-idp-csp.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+IDP=$(curl --silent 'http://metadata.aai.switch.ch/metadata.switchaai+idp.xml'| \
+    grep 'entityID=' | \
+    grep -Eo '(http|https)://[^/"]+')
+
+for url in $IDP; do
+    echo "    \$static_response->addContentSecurityPolicyURI('form-action', '${url}');"
+done