Resolves SWAMID-2095

2 files changed, 116 insertions, 0 deletions

diff --git a/swamid-2.0/bdh.local-85-shibboleth.xml b/swamid-2.0/bdh.local-85-shibboleth.xml
new file mode 100644
index 00000000..f098b53a
--- /dev/null
+++ b/swamid-2.0/bdh.local-85-shibboleth.xml
@@ -0,0 +1,115 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://bdh.local:85/shibboleth">
+  <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue>
+        <samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://bdh.local:85/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://bdh.local:85/Shibboleth.sso/Login" index="1"/>
+      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+        <mdui:DisplayName xml:lang="sv">Bedömningshandboken ACC</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Bedömningshandboken ACC</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Bedömningshandbokens acceptanstest-miljö.</mdui:Description>
+        <mdui:Description xml:lang="en"> Bedömningshandbokens acceptance test environment</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://acc.bedomningshandboken.uhr.se/om-bedomningshandboken/</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://acc.bedomningshandboken.uhr.se/om-bedomningshandboken/personuppgifter2/</mdui:PrivacyStatementURL>
+        <mdui:Logo height="83" width="83"> https://acc.bedomningshandboken.uhr.se/static/gfx/uhr_symbol_lila.png</mdui:Logo>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>bdh.local:85</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=bdh.local:85</ds:X509SubjectName>
+          <ds:X509Certificate>MIID9jCCAl6gAwIBAgIUFXASnnNmVTVyOWe8LV0Ro+MoVHgwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bdh.local:85/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bdh.local:85/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bdh.local:85/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bdh.local:85/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bdh.local:85/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bdh.local:85/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bdh.local:85/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://bdh.local:85/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://bdh.local:85/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://bdh.local:85/Shibboleth.sso/SAML/Artifact" index="6"/>
+    <md:AttributeConsumingService index="0">
+      <md:ServiceName xml:lang="en">Bedömningshandboken ACC</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Bedömningshandboken ACC</md:ServiceName>
+      <md:ServiceDescription xml:lang="en">Bedömningshandbokens acceptance test environment</md:ServiceDescription>
+      <md:ServiceDescription xml:lang="sv">Bedömningshandbokens acceptanstest-miljö.</md:ServiceDescription>
+      <md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>Therese</md:GivenName>
+    <md:SurName>Majlöf</md:SurName>
+    <md:EmailAddress>mailto:therese.majlov@umu.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>Therese</md:GivenName>
+    <md:SurName>Majlöf</md:SurName>
+    <md:EmailAddress>mailto:therese.majlov@umu.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>Therese</md:GivenName>
+    <md:SurName>Majlöf</md:SurName>
+    <md:EmailAddress>mailto:therese.majlov@umu.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-testing-sp-1.0.mxml b/swamid-testing-sp-1.0.mxml
index 199056c7..ce8793fa 100644
--- a/swamid-testing-sp-1.0.mxml
+++ b/swamid-testing-sp-1.0.mxml
@@ -58,4 +58,5 @@
   <xi:include href="swamid-2.0/ladok3-demo-07.its.umu.se-student-sp.xml"/>
   <xi:include href="swamid-2.0/ladok3-demo-08.its.umu.se-gui-sp.xml"/>
   <xi:include href="swamid-2.0/ladok3-demo-08.its.umu.se-student-sp.xml"/>
+  <xi:include href="swamid-2.0/bdh.local-85-shibboleth.xml"/>
 </EntitiesDescriptor>