SWAMID-5176: demo04.extutv.ladok.se addedHEADmd-2024-12-17-v03master

2 files changed, 279 insertions, 0 deletions

diff --git a/metadata/swamid-2.0/demo04.extutv.ladok.se-gui-sp.xml b/metadata/swamid-2.0/demo04.extutv.ladok.se-gui-sp.xml
new file mode 100644
index 00000000..d967361c
--- /dev/null
+++ b/metadata/swamid-2.0/demo04.extutv.ladok.se-gui-sp.xml
@@ -0,0 +1,136 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://demo04.extutv.ladok.se/gui-sp">
+  <md:Extensions>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes>
+      <samla:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>https://refeds.org/sirtfi</samla:AttributeValue>
+        <samla:AttributeValue>https://refeds.org/sirtfi2</samla:AttributeValue>
+      </samla:Attribute>
+      <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>https://refeds.org/category/personalized</samla:AttributeValue>
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2024-12-17T20:03:49Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/Login" index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Ladok för personal demo04.extutv.ladok.se</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Ladok for employees demo04.extutv.ladok.se</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Ladok är en central tjänst för studieadministration riktad till studenter och studieadministrativ personal på universitet och högskolor i Sverige.</mdui:Description>
+        <mdui:Description xml:lang="en">Ladok is a central service for study administration aimed at students and study administrative staff at higher education institutions in Sweden.</mdui:Description>
+        <mdui:Logo xml:lang="sv" width="64" height="64">https://www.start.ladok.se/logo/ladok_sv.png</mdui:Logo>
+        <mdui:Logo xml:lang="en" width="64" height="64">https://www.start.ladok.se/logo/ladok_en.png</mdui:Logo>
+        <mdui:InformationURL xml:lang="sv">https://ladokkonsortiet.se/vara-tjanster/systemet-ladok</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://ladokkonsortiet.se/in-english/about-us/the-ladok-system</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://ladokkonsortiet.se/om-oss/policies-och-dokument/overforing-av-personuppgifter-till-ladok-i-samband-med-federerad-inloggning</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://ladokkonsortiet.se/in-english/about-us/policies-and-documents/transfer-of-personal-data-to-ladok-when-using-federated-login</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:KeyName>https://demo04.extutv.ladok.se/gui-sp</ds:KeyName>
+        <ds:KeyName>demo04.extutv.ladok.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=demo04.extutv.ladok.se</ds:X509SubjectName>
+          <ds:X509Certificate>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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>https://demo04.extutv.ladok.se/gui-sp</ds:KeyName>
+        <ds:KeyName>demo04.extutv.ladok.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=demo04.extutv.ladok.se</ds:X509SubjectName>
+          <ds:X509Certificate>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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/Artifact"/>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="sv">Ladok för personal</md:ServiceName>
+      <md:ServiceName xml:lang="en">Ladok for employees</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="sv">Umeå universitet</md:OrganizationName>
+    <md:OrganizationName xml:lang="en">Umea University</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="sv">Ladokkonsortiet</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="en">Ladok Consortium</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="sv">https://ladokkonsortiet.se/</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="en">https://ladokkonsortiet.se/</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladokincident@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/metadata/swamid-2.0/demo04.extutv.ladok.se-student-sp.xml b/metadata/swamid-2.0/demo04.extutv.ladok.se-student-sp.xml
new file mode 100644
index 00000000..f599f9db
--- /dev/null
+++ b/metadata/swamid-2.0/demo04.extutv.ladok.se-student-sp.xml
@@ -0,0 +1,143 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://demo04.extutv.ladok.se/student-sp">
+  <md:Extensions>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes>
+      <samla:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>https://refeds.org/sirtfi</samla:AttributeValue>
+        <samla:AttributeValue>https://refeds.org/sirtfi2</samla:AttributeValue>
+      </samla:Attribute>
+      <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>https://refeds.org/category/personalized</samla:AttributeValue>
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+        <samla:AttributeValue>https://myacademicid.org/entity-categories/esi</samla:AttributeValue>
+        <samla:AttributeValue>http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</samla:AttributeValue>
+        <samla:AttributeValue>http://id.elegnamnden.se/ec/1.0/loa3-pnr</samla:AttributeValue>
+        <samla:AttributeValue>http://id.elegnamnden.se/st/1.0/public-sector-sp</samla:AttributeValue>
+        <samla:AttributeValue>http://id.swedenconnect.se/contract/sc/eid-choice-2017</samla:AttributeValue>
+        <samla:AttributeValue>http://id.swedenconnect.se/contract/Sunet/BankID-idp</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2024-12-17T20:04:10Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/Login" index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Ladok för studenter demo04.extutv.ladok.se</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Ladok for students demo04.extutv.ladok.se</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Ladok är en central tjänst för studieadministration riktad till studenter och studieadministrativ personal på universitet och högskolor i Sverige.</mdui:Description>
+        <mdui:Description xml:lang="en">Ladok is a central service for study administration aimed at students and study administrative staff at higher education institutions in Sweden.</mdui:Description>
+        <mdui:Logo xml:lang="sv" width="64" height="64">https://www.student.ladok.se/logo/ladok_sv.png</mdui:Logo>
+        <mdui:Logo xml:lang="en" width="64" height="64">https://www.student.ladok.se/logo/ladok_en.png</mdui:Logo>
+        <mdui:InformationURL xml:lang="sv">https://ladokkonsortiet.se/vara-tjanster/systemet-ladok</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://ladokkonsortiet.se/in-english/about-us/the-ladok-system</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://ladokkonsortiet.se/om-oss/policies-och-dokument/overforing-av-personuppgifter-till-ladok-i-samband-med-federerad-inloggning</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://ladokkonsortiet.se/in-english/about-us/policies-and-documents/transfer-of-personal-data-to-ladok-when-using-federated-login</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:KeyName>https://demo04.extutv.ladok.se/student-sp</ds:KeyName>
+        <ds:KeyName>demo04.extutv.ladok.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=demo04.extutv.ladok.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIFIDCCAwigAwIBAgIUNPA6/D5qbI3unO3pzoIrvH3RSPgwDQYJKoZIhvcNAQELBQAwITEfMB0GA1UEAwwWZGVtbzA0LmV4dHV0di5sYWRvay5zZTAeFw0yNDA4MTIxNTE5MzVaFw0zNDA4MTAxNTE5MzVaMCExHzAdBgNVBAMMFmRlbW8wNC5leHR1dHYubGFkb2suc2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCksgxnx8nKgaqEV+fr+q2d+2soqsb8GlhnxJaQ6LA1aOxqQVH8R734ylu9Co7bLmKVEhKQBxGSt6Pj0JtCSVWfiJfxKXBI36UGK/eHDoHtbbBbsjGCM5+aA8fzjOUMg8yT5EJrO96x6k9Oc4KWcizCfjxTL3uHIt+6nO44RR37d7yuKR3kHQoNs+YKJKH8HJxOIAXb4yEDAGf5ckIhgegJyFntzxGw7J50cu+HuK2YylQvLj53gfi0wZh0Dre+Y5toDH+TlEeDfKwPWqB5OnmSeMBBWcT9PG7CyCgzFHDrcA5bTqf6NAonxOGh+h5XqrdVnr5Gi8Sd3j4IihvJ3sKWL9YbZZqiueTkn+sdyTwvQVVTz3augAQeEIsMAg/4SBFyPvt6lmqyDqChObmJjY3zRmaK1yYxpj9fgBGbhvzb2OZBHj0XBJ+9icX5xTDG3fAvP43JQ2pnvDPEhtAY6n2zwhorw+na67WGOfglXHdwtYseUHxidy4MHD4pQwmnvK7iJqWCbrAmLNBRKiQSkjin80hREQcQ4/1DnminQ/IWiPpNqm3W0uhmL1Pmvn+TcJZoBz0LYn8DfDbyhNzC0zIx+FjpyUAZBrCMF9GN0KIUA7eINKb3aEUqIS1CT/QqITrLDmmRyoC/6STLV1khSIYtikF7uz0QQ78chDxlJu4akwIDAQABo1AwTjAdBgNVHQ4EFgQUrOEYkBIuImLY4S3pa7QvYfYRYI0wHwYDVR0jBBgwFoAUrOEYkBIuImLY4S3pa7QvYfYRYI0wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAY7WpURIFDLSs759YGtu41eglas1WgM1jNQGQQGONnCxJX6OOed73B2c7dPz2ILIc2xNIDJEPezEJki/yfyrQeZGXVTQvz7+7RdO6b7toq1Kegcq2NPgAHuuUxHNxHLRoDs6UNrNO6cD6bPbZpLPwzjdQ7SmJ7e1RXK+vZLomQnpjz9uB793TBZ1XnNXS8+RIrPd3Z8lzhFNPct9+o6a8J0t4qnqlrUFBra1UbmLEJAEULhr3253/d51KqXDuKUt8y0G0uRPGEQAPr+eHQxFUMGl8447w6ieSgdZ4gTgJRTPX4cDfdJfFruTmIN+u+9fyO2un0CbBF2g5xEkYiy9upAZdTeFBcY5qp2r3NuLpyg76acHxYScdAKP4PFID+otNxoY/HQsOTfniKNYYBz6MRrnDO5/mrr3pTbKNx0a4vJxLbHH8mtUGM4PWjkw9rUGnz33EomwBV71d1fkwfaoidEXomP3Ai9ilr7kp3RfC1Gr9eKJDr28A7fTC9IjSpskGLBGKhmwnGchN20Q+5998vaXPAWS3KgMl0a78U3ykmNLkRk6mWlzlGiJ7wjrY6nf+30gnhPEhayRrs0JTdQQFDkSWyp48iCNZSvwifzwbJRFFQ10MD9l8TUnmKBITm1O78ng7TqKlURjav26OR8MnsHsi9K+/kZAJenVhE1uxIT4=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>https://demo04.extutv.ladok.se/student-sp</ds:KeyName>
+        <ds:KeyName>demo04.extutv.ladok.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=demo04.extutv.ladok.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIFIDCCAwigAwIBAgIUNPA6/D5qbI3unO3pzoIrvH3RSPgwDQYJKoZIhvcNAQELBQAwITEfMB0GA1UEAwwWZGVtbzA0LmV4dHV0di5sYWRvay5zZTAeFw0yNDA4MTIxNTE5MzVaFw0zNDA4MTAxNTE5MzVaMCExHzAdBgNVBAMMFmRlbW8wNC5leHR1dHYubGFkb2suc2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCksgxnx8nKgaqEV+fr+q2d+2soqsb8GlhnxJaQ6LA1aOxqQVH8R734ylu9Co7bLmKVEhKQBxGSt6Pj0JtCSVWfiJfxKXBI36UGK/eHDoHtbbBbsjGCM5+aA8fzjOUMg8yT5EJrO96x6k9Oc4KWcizCfjxTL3uHIt+6nO44RR37d7yuKR3kHQoNs+YKJKH8HJxOIAXb4yEDAGf5ckIhgegJyFntzxGw7J50cu+HuK2YylQvLj53gfi0wZh0Dre+Y5toDH+TlEeDfKwPWqB5OnmSeMBBWcT9PG7CyCgzFHDrcA5bTqf6NAonxOGh+h5XqrdVnr5Gi8Sd3j4IihvJ3sKWL9YbZZqiueTkn+sdyTwvQVVTz3augAQeEIsMAg/4SBFyPvt6lmqyDqChObmJjY3zRmaK1yYxpj9fgBGbhvzb2OZBHj0XBJ+9icX5xTDG3fAvP43JQ2pnvDPEhtAY6n2zwhorw+na67WGOfglXHdwtYseUHxidy4MHD4pQwmnvK7iJqWCbrAmLNBRKiQSkjin80hREQcQ4/1DnminQ/IWiPpNqm3W0uhmL1Pmvn+TcJZoBz0LYn8DfDbyhNzC0zIx+FjpyUAZBrCMF9GN0KIUA7eINKb3aEUqIS1CT/QqITrLDmmRyoC/6STLV1khSIYtikF7uz0QQ78chDxlJu4akwIDAQABo1AwTjAdBgNVHQ4EFgQUrOEYkBIuImLY4S3pa7QvYfYRYI0wHwYDVR0jBBgwFoAUrOEYkBIuImLY4S3pa7QvYfYRYI0wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAY7WpURIFDLSs759YGtu41eglas1WgM1jNQGQQGONnCxJX6OOed73B2c7dPz2ILIc2xNIDJEPezEJki/yfyrQeZGXVTQvz7+7RdO6b7toq1Kegcq2NPgAHuuUxHNxHLRoDs6UNrNO6cD6bPbZpLPwzjdQ7SmJ7e1RXK+vZLomQnpjz9uB793TBZ1XnNXS8+RIrPd3Z8lzhFNPct9+o6a8J0t4qnqlrUFBra1UbmLEJAEULhr3253/d51KqXDuKUt8y0G0uRPGEQAPr+eHQxFUMGl8447w6ieSgdZ4gTgJRTPX4cDfdJfFruTmIN+u+9fyO2un0CbBF2g5xEkYiy9upAZdTeFBcY5qp2r3NuLpyg76acHxYScdAKP4PFID+otNxoY/HQsOTfniKNYYBz6MRrnDO5/mrr3pTbKNx0a4vJxLbHH8mtUGM4PWjkw9rUGnz33EomwBV71d1fkwfaoidEXomP3Ai9ilr7kp3RfC1Gr9eKJDr28A7fTC9IjSpskGLBGKhmwnGchN20Q+5998vaXPAWS3KgMl0a78U3ykmNLkRk6mWlzlGiJ7wjrY6nf+30gnhPEhayRrs0JTdQQFDkSWyp48iCNZSvwifzwbJRFFQ10MD9l8TUnmKBITm1O78ng7TqKlURjav26OR8MnsHsi9K+/kZAJenVhE1uxIT4=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/NIM/Artifact"/>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://demo04.extutv.ladok.se:442/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="sv">Ladok för studenter</md:ServiceName>
+      <md:ServiceName xml:lang="en">Ladok for students</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="personalIdentityNumber" Name="urn:oid:1.2.752.29.4.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="schacDateOfBirth" Name="urn:oid:1.3.6.1.4.1.25178.1.2.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="sv">Umeå universitet</md:OrganizationName>
+    <md:OrganizationName xml:lang="en">Umea University</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="sv">Ladokkonsortiet</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="en">Ladok Consortium</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="sv">https://ladokkonsortiet.se/</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="en">https://ladokkonsortiet.se/</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:Company>ITS, Umeå universitet</md:Company>
+    <md:GivenName>Ladok-supporten</md:GivenName>
+    <md:EmailAddress>mailto:ladokincident@its.umu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46907866600</md:TelephoneNumber>
+  </md:ContactPerson>
+</md:EntityDescriptor>