Resolves SWAMIDOPS-227
[swamid-metadata.git] / swamid-2.0 / swamid-idp.sys.kth.se-idp-shibboleth.xml
1 <?xml version="1.0" encoding="UTF-8"?>
2 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://swamid-idp.sys.kth.se/idp/shibboleth">
3   <md:Extensions>
4     <mdattr:EntityAttributes xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
5       <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
6         <saml:AttributeValue>http://www.swamid.se/policy/assurance/al1</saml:AttributeValue>
7         <saml:AttributeValue>http://www.swamid.se/policy/assurance/al2</saml:AttributeValue>
8       </saml:Attribute>
9       <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
10         <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
11       </saml:Attribute>
12     </mdattr:EntityAttributes>
13   </md:Extensions>
14   <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
15     <md:Extensions>
16       <shibmd:Scope regexp="false">kth.se</shibmd:Scope>
17       <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
18         <mdui:DisplayName xml:lang="sv">Kungliga Tekniska högskolan (KTH) (old)</mdui:DisplayName>
19         <mdui:DisplayName xml:lang="en">KTH Royal Institute of Technology (old)</mdui:DisplayName>
20         <mdui:Description xml:lang="sv">Identity Provider för KTH</mdui:Description>
21         <mdui:Description xml:lang="en">Identity Provider for KTH</mdui:Description>
22         <mdui:InformationURL xml:lang="sv">https://www.kth.se/</mdui:InformationURL>
23         <mdui:InformationURL xml:lang="en">https://www.kth.se/en</mdui:InformationURL>
24         <mdui:Logo height="166" width="166">https://swamid-idp.sys.kth.se/idp/images/logo.png</mdui:Logo>
25         <mdui:Keywords xml:lang="sv">stockholm</mdui:Keywords>
26         <mdui:Keywords xml:lang="en">stockholm</mdui:Keywords>
27       </mdui:UIInfo>
28       <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
29         <mdui:DomainHint>kth.se</mdui:DomainHint>
30         <mdui:IPHint>130.237.0.0/18</mdui:IPHint>
31         <mdui:IPHint>130.237.64.0/20</mdui:IPHint>
32         <mdui:IPHint>130.237.80.0/22</mdui:IPHint>
33         <mdui:IPHint>130.237.84.0/24</mdui:IPHint>
34         <mdui:IPHint>130.237.202.0/23</mdui:IPHint>
35         <mdui:IPHint>130.237.206.0/24</mdui:IPHint>
36         <mdui:IPHint>130.237.209.0/24</mdui:IPHint>
37         <mdui:IPHint>130.237.210.0/23</mdui:IPHint>
38         <mdui:IPHint>130.237.212.0/22</mdui:IPHint>
39         <mdui:IPHint>130.237.216.0/24</mdui:IPHint>
40         <mdui:IPHint>130.237.218.0/23</mdui:IPHint>
41         <mdui:IPHint>130.237.220.0/22</mdui:IPHint>
42         <mdui:IPHint>130.237.224.0/22</mdui:IPHint>
43         <mdui:IPHint>130.237.228.0/22</mdui:IPHint>
44         <mdui:IPHint>130.237.232.0/21</mdui:IPHint>
45         <mdui:IPHint>130.237.249.0/24</mdui:IPHint>
46         <mdui:IPHint>130.237.250.0/23</mdui:IPHint>
47         <mdui:IPHint>130.237.255.0/24</mdui:IPHint>
48         <mdui:IPHint>130.229.128.0/18</mdui:IPHint>
49         <mdui:IPHint>193.10.37.0/24</mdui:IPHint>
50         <mdui:IPHint>193.10.38.0/24</mdui:IPHint>
51         <mdui:IPHint>193.10.39.0/24</mdui:IPHint>
52         <mdui:IPHint>2001:6b0:1::/48</mdui:IPHint>
53         <mdui:GeolocationHint>geo:59.346123,18.072305</mdui:GeolocationHint>
54       </mdui:DiscoHints>
55     </md:Extensions>
56     <md:KeyDescriptor use="signing">
57       <ds:KeyInfo>
58         <ds:X509Data>
59           <ds:X509Certificate>
60 MIIDLzCCAhegAwIBAgIUJ4PH4+fFgJRXkeDT5AU2kjzM0cowDQYJKoZIhvcNAQEL
61 BQAwHDEaMBgGA1UEAwwRc2FtbC00LnN5cy5rdGguc2UwHhcNMTcwNjIyMDczODEz
62 WhcNMzcwNjIyMDczODEzWjAcMRowGAYDVQQDDBFzYW1sLTQuc3lzLmt0aC5zZTCC
63 ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKBIQk0f0/zwbuKef9yce9G5
64 lJyQOD39lkECVSoNQ25vUNKguBxyfSC2Uq4eJFSrXc8gdLa/TEYkxNWuw0ZM3yoV
65 RGnn6NPVspuhDjinVoCaCHTJgtLe0udwCZt/7tybNRwpFzo1T7kV2LxMXBuWfRa8
66 d7trgvspDxQ0WX8TsBVVkjtDPJdxuuvEPFkNG4OiGmPyLLJNkSn08zjHPCAxnKyA
67 Gyh3Jb0aKUHDcPtVlWaTj66FNxJGPDoNk9RD1VpwxoNhnQR1GvIYwH5GmMVusmHa
68 vdHk8p+AJCg+bUWQ4mWUAWwJ9S+oBivLazTX14FHkaoUF+m+ozhxOfa949ltxuMC
69 AwEAAaNpMGcwHQYDVR0OBBYEFEW2LuId9XeR96veOJMfyc9DjMQzMEYGA1UdEQQ/
70 MD2CEXNhbWwtNC5zeXMua3RoLnNlhihodHRwczovL3NhbWwtNC5zeXMua3RoLnNl
71 L2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQAZOBsZ8Alq4aWn/zwS
72 T9AQ5D7sXLLYwUCdIaGwLzdvpzs7Aia/zjADJ7KliR5mMJS50ropXLyMTxaJMwUD
73 tV1HB/QZgw5XhB7X6I8Eh/G3q58i6j/RszYcPBmMIo3y8K7vy4T7IDP+ZoUwwyeL
74 MUtRH+bCvLNt590HF64RKBsN6ZNIOM2YzaZfpv1gq1qHgufcAzhkuBvM3bKx5bTt
75 Ccusy7b2EZtNam0pk0BK2lSH7DZ4+QvNkGHEGbk2rQOTDBK2ZufEwAzdCNGrdUcD
76 d0IuBl2HMWiq0mt8mqdlUCQeXX/kMOy5q1DbCcBF+e5wMUCyYUjjnOT0fJbRPkv5
77 YXMM
78           </ds:X509Certificate>
79         </ds:X509Data>
80       </ds:KeyInfo>
81     </md:KeyDescriptor>
82     <md:KeyDescriptor use="signing">
83       <ds:KeyInfo>
84         <ds:X509Data>
85           <ds:X509Certificate>
86 MIIDMDCCAhigAwIBAgIVAMeF2Eb50rNqMQWtJEyyMMEH+nqEMA0GCSqGSIb3DQEB
87 CwUAMBwxGjAYBgNVBAMMEXNhbWwtNC5zeXMua3RoLnNlMB4XDTE3MDYyMjA3Mzgx
88 MloXDTM3MDYyMjA3MzgxMlowHDEaMBgGA1UEAwwRc2FtbC00LnN5cy5rdGguc2Uw
89 ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlCYHg/Itth1UJ6vmLxlFQ
90 xAUECSPV1Y27FGwgr+N1wglS4+cqzJPp1GGStLh+i3PDBIUJvMege1TtDiaVhDjw
91 vbnNZ4VFu+WMTuQLeENEltvrFPa6S15BxX7DiYpjwTeFsVFq65jyXIJkqpXb8xgm
92 W58n8IKgKmGeXO35FaPERt/X1DZ6X9T3U4M6xqVJk0OdXgOM1zrJBtYt0FHXIs9z
93 VzwRdKkSSJ2AATbuCS1T7uq9mmNkKNbIqu3PLwdTG58sPW+AxUziy0VadS8JbniB
94 ZVpWpTxaseZ9xULjcGSizBaYJRUpn8p4pj6c8QlKQ7iq2SiYMtq5NYOISTJajfVB
95 AgMBAAGjaTBnMB0GA1UdDgQWBBTst6dJnCK+d/E/G3S+a9c2TjmwHDBGBgNVHREE
96 PzA9ghFzYW1sLTQuc3lzLmt0aC5zZYYoaHR0cHM6Ly9zYW1sLTQuc3lzLmt0aC5z
97 ZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAlo2sKxnAKSTjYyrj
98 /KIsNp3IQbRYKPxLyCfW5y1o1dJwHhBaIz/+6nervahlvTHjmTbYyqIfUGziILrG
99 xTXsAvwrxy1HQSqKJO7Hr/VOaTHjPWeMfW/WkSIW4pZS2kCPZPQv2MxQ6dw4/o25
100 KP2JJalcYYWvAim34o63lYhZoeCWPngBdOPnx8ncz5+Z9yObcdGDYhHkplkYzmM6
101 4vUZf8AP9eV+hRu0jmmgsosUkIdiL0PeZyP+vJ0r3dMr37JkC/5uapKZrlV1i2bf
102 Cu1uZ/z8tUO1ojulAaITsh6reYg5dkJCHk3Od0OMWPYKy7xOCYVf5YpyU5eaBdma
103 q5GBOQ==
104           </ds:X509Certificate>
105         </ds:X509Data>
106       </ds:KeyInfo>
107     </md:KeyDescriptor>
108     <md:KeyDescriptor use="encryption">
109       <ds:KeyInfo>
110         <ds:X509Data>
111           <ds:X509Certificate>
112 MIIDMDCCAhigAwIBAgIVAP4GLDKBcWbPcHKABSqI1SsdpHXDMA0GCSqGSIb3DQEB
113 CwUAMBwxGjAYBgNVBAMMEXNhbWwtNC5zeXMua3RoLnNlMB4XDTE3MDYyMjA3Mzgx
114 M1oXDTM3MDYyMjA3MzgxM1owHDEaMBgGA1UEAwwRc2FtbC00LnN5cy5rdGguc2Uw
115 ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+aDtkaYiQfSs3k36Wfs7
116 2fLCaKITIP8NemLP1/6gyKIY+i9w17zRJEdiMDgBUSzehmMrUPzgFbNMHT3BXAeT
117 TGoUsUXwLGWZ5Z5CabExTDqR8VZ8fuxI5+r+P214HDuDKpNQV/rLZfkVLL0Z4gRk
118 qBQcVZl8bKMvdCH5RP2BqhpNmsDpZnOVH1Hkb8dE0dgYr/vTENeT8nIa4Oviz9fM
119 6l7KcrQeoi5LH4nLHbu5WGB9oCJ7NDJyv0JatYp0uWGWZgvFBXXnktfiA6ZxpT0Y
120 sgZt4ci24shRHPlgrhQdamFBWdngIQ98Ssh7WFqxH+qHjsSWQoDOSns9Qra55YoZ
121 AgMBAAGjaTBnMB0GA1UdDgQWBBQA5ffyrlSWchr8TjoOKpwR97OWCDBGBgNVHREE
122 PzA9ghFzYW1sLTQuc3lzLmt0aC5zZYYoaHR0cHM6Ly9zYW1sLTQuc3lzLmt0aC5z
123 ZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAKFSYdy0fQXBPKZVF
124 QsITY7svWg9vBS/Oa6mX49wi5feSGiB1dpC4IKR8oApD4aOur/XtWHNByun0RMeQ
125 RIHMDYQhKJ77+/pmMGDFvbcWwM3cx3bf+HFR0fXsQ7lpLJAGY3ggdBneIvuBJ9H6
126 cMP9ZKbaRAEkWg/WVjmx9of1T8tpRJSF4ZA20BZgYBVGNTgZfXNPb93EagykUpyb
127 swSa7l0xNWgLWusFWFMxnB/SEAKGvcRqnNcwHD5GEeLhcoPXJDQ+oapGa481oj0z
128 Y6owwlQG4c9jo42ax9akMTb22C4ANRGVXODBA7kftyKkE+xXB6EZuPY65jC15yWT
129 f0LwMg==
130           </ds:X509Certificate>
131         </ds:X509Data>
132       </ds:KeyInfo>
133     </md:KeyDescriptor>
134     <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://saml-4.sys.kth.se/idp/profile/Shibboleth/SSO"/>
135     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://saml-4.sys.kth.se/idp/profile/SAML2/POST/SSO"/>
136     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://saml-4.sys.kth.se/idp/profile/SAML2/Redirect/SSO"/>
137   </md:IDPSSODescriptor>
138   <md:Organization>
139     <md:OrganizationName xml:lang="en">KTH</md:OrganizationName>
140     <md:OrganizationDisplayName xml:lang="sv">Kungliga Tekniska högskolan (KTH) (old)</md:OrganizationDisplayName>
141     <md:OrganizationDisplayName xml:lang="en">KTH Royal Institute of Technology (old)</md:OrganizationDisplayName>
142     <md:OrganizationURL xml:lang="en">http://www.kth.se</md:OrganizationURL>
143   </md:Organization>
144   <md:ContactPerson contactType="administrative">
145     <md:Company>KTH Royal Institute of Technology</md:Company>
146     <md:SurName>UF/ITA Infra (Alexander Boström, Hans Berggren, Jonas Andersson)</md:SurName>
147     <md:EmailAddress>mailto:ita-infra-saml-contact@kth.se</md:EmailAddress>
148     <md:TelephoneNumber>+46 8 790 6000</md:TelephoneNumber>
149   </md:ContactPerson>
150   <md:ContactPerson contactType="technical">
151     <md:Company>KTH Royal Institute of Technology</md:Company>
152     <md:SurName>UF/ITA Infra (Alexander Boström, Hans Berggren, Jonas Andersson)</md:SurName>
153     <md:EmailAddress>mailto:ita-infra-saml-contact@kth.se</md:EmailAddress>
154     <md:TelephoneNumber>+46 8 790 6000</md:TelephoneNumber>
155   </md:ContactPerson>
156   <md:ContactPerson contactType="support">
157     <md:Company>KTH Royal Institute of Technology</md:Company>
158     <md:SurName>KTH IT-Support</md:SurName>
159     <md:EmailAddress>mailto:it-support@kth.se</md:EmailAddress>
160     <md:TelephoneNumber>+46 8 790 6600</md:TelephoneNumber>
161   </md:ContactPerson>
162   <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
163     <md:GivenName>Security Response Team</md:GivenName>
164     <md:EmailAddress>mailto:abuse@kth.se</md:EmailAddress>
165   </md:ContactPerson>
166 </md:EntityDescriptor>