SWAMID-776: New cert and CoCo for www.universityadmissions.se/aws-sp-en

1 files changed, 105 insertions, 43 deletions

diff --git a/swamid-2.0/www.universityadmissions.se-aws-sp-en.xml b/swamid-2.0/www.universityadmissions.se-aws-sp-en.xml
index b148e285..d62200ab 100644
--- a/swamid-2.0/www.universityadmissions.se-aws-sp-en.xml
+++ b/swamid-2.0/www.universityadmissions.se-aws-sp-en.xml
@@ -1,31 +1,50 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://www.universityadmissions.se/aws-sp-en">
+<!--
+This is example metadata only. Do *NOT* supply it as is without review,
+and do *NOT* provide it in real time to your partners.
+ -->
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:remd="http://refeds.org/metadata" entityID="https://www.universityadmissions.se/aws-sp-en">
   <md:Extensions>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2014-03-14T10:29:19Z">
       <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
     </mdrpi:RegistrationInfo>
-    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
-      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
-        <samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue>
-        <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue>
-        <samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue>
-      </samla:Attribute>
-      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://www.swamid.se/assurance-requirement">
-        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al1</samla:AttributeValue>
-        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al2</samla:AttributeValue>
+    <mdattr:EntityAttributes>
+      <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
       </samla:Attribute>
     </mdattr:EntityAttributes>
   </md:Extensions>
-  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
-      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://www.universityadmissions.se/Shibboleth.sso/Login"/>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://www.universityadmissions.se/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://www.universityadmissions.se/Shibboleth.sso/Login" index="1"/>
       <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="sv">Antagning.se</mdui:DisplayName>
         <mdui:DisplayName xml:lang="en">Universityadmissions.se</mdui:DisplayName>
-        <mdui:Description xml:lang="sv">Antagning.se är sajten för anmälan till universitet och högskolor.</mdui:Description>
         <mdui:Description xml:lang="en">Apply online to Swedish universities and university colleges.</mdui:Description>
-        <mdui:Logo height="52" width="195" xml:lang="sv">https://www.antagning.se/images/logo/antagning_se.png</mdui:Logo>
-        <mdui:Logo height="52" width="205" xml:lang="en">https://www.universityadmissions.se/images/logo/university-admisssions.png</mdui:Logo>
+        <mdui:Logo xml:lang="en" height="52" width="205">https://www.universityadmissions.se/images/logo/university-admisssions.png</mdui:Logo>
+        <mdui:Description xml:lang="sv">Antagning.se är sajten för anmälan till universitet och högskolor.</mdui:Description>
+        <mdui:DisplayName xml:lang="sv">Antagning.se</mdui:DisplayName>
+        <mdui:Logo xml:lang="sv" height="52" width="195">https://www.antagning.se/images/logo/antagning_se.png</mdui:Logo>
+        <mdui:PrivacyStatementURL xml:lang="en">https://www.universityadmissions.se/en/service-provider-policy</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://www.antagning.se/sv/service-provider-policy</mdui:PrivacyStatementURL>
+        <mdui:InformationURL xml:lang="en">https://www.universityadmissions.se</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="sv">https://www.antagning.se</mdui:InformationURL>
       </mdui:UIInfo>
     </md:Extensions>
     <md:KeyDescriptor>
@@ -34,42 +53,85 @@
         <ds:KeyName>www.universityadmissions.se</ds:KeyName>
         <ds:X509Data>
           <ds:X509SubjectName>CN=www.universityadmissions.se</ds:X509SubjectName>
-          <ds:X509Certificate>MIIDRzCCAi+gAwIBAgIJAPXTNM83oP+DMA0GCSqGSIb3DQEBBQUAMCYxJDAiBgNV
-BAMTG3d3dy51bml2ZXJzaXR5YWRtaXNzaW9ucy5zZTAeFw0xMjAyMTMwOTUxMDFa
-Fw0yMjAyMTAwOTUxMDFaMCYxJDAiBgNVBAMTG3d3dy51bml2ZXJzaXR5YWRtaXNz
-aW9ucy5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/i8atiZRz6
-tGlOqjfywbRHg3BN22NXS0GDOCL7N7Ges+27Cir2X6cKxgkvkmIYTKM/CwxBpbVA
-6aCzwJR0aiwF7Yk+iCd+lZN1UZ+zqGAwVaYFWwJvJj9Pml1JBKtrI2UtWD6giUO1
-M4ADSc+v8c2GI99XuqicJ7RshRFfptzMgQD1EHzXrqcAWKWKcgk0cE7Im7i+Gf8t
-vqIGfWXTyQz/vLRN9TEuqC5lWUpxQthyydCfUxoNhVuP5r2C5f+xNspEmLXGCGy/
-LqPp8Qzti+A2ep93ycTYQ7UWsREjIc7mSSxJA2yNR0KiXAwhqCMEi2K2ifB5vQiA
-nw2d9qprbI8CAwEAAaN4MHYwVQYDVR0RBE4wTIIbd3d3LnVuaXZlcnNpdHlhZG1p
-c3Npb25zLnNlhi1odHRwczovL3d3dy51bml2ZXJzaXR5YWRtaXNzaW9ucy5zZS9h
-d3Mtc3AtZW4wHQYDVR0OBBYEFDCP8QQn4b49RQahrkPcr6O5x69eMA0GCSqGSIb3
-DQEBBQUAA4IBAQBx6LWrsGdO0RGf/p1gPt1Ss9x6FwqzFflqEwr1ogN9eLl+0svq
-r170nch935DrVqLU6v1CpMaCXrx2IG9OY3f9+JIU0xWCfjDwv8/l9JQ29cCZMBG5
-cer8XBtDmhZn/VZcCxD+E1USlg2kZdITY1PVH9V7BMNvGgAHFhWeGeSHPVNb6y0W
-j18Hf2KbZy+9Zod8DFQKzznA4j5qqAjX+4JsaXpJjcw2pteRbz6GwOWbMTDQYqc0
-UVO3Je8b81cYnxOzkTjcC46OOnwfKMCulFfBWoiza3xbuiS+Iv/lBbEPdRVN4HKa
-kLtKCIiImX90JFDcYwMMQyXM3dXWrJFi7exA
+          <ds:X509Certificate>MIIFRzCCAy+gAwIBAgIJAIIoBN/J4m76MA0GCSqGSIb3DQEBBQUAMCYxJDAiBgNV
+BAMTG3d3dy51bml2ZXJzaXR5YWRtaXNzaW9ucy5zZTAeFw0yMjAzMDcxMzMzMjJa
+Fw0zMjAzMDQxMzMzMjJaMCYxJDAiBgNVBAMTG3d3dy51bml2ZXJzaXR5YWRtaXNz
+aW9ucy5zZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM0njnLo2N9F
+zdkcZs2rFB+ipzMVgVNLYJm6jzP3uEKYRNFba+JSd0jS6TPY+BLvg+wzVmHrjwR+
+WYbxHNyzJiUY1RBssq22l9w+l83wrv44dxPUIBu9O3f5DovXvzb98y8u2zJMXhWT
+ngen04pSbceUAOvBG2Q2ajsARXduDOInCXRv4Ffcx1ReSF2fSx+21ajuHaoKk3NL
+YY875FWyLQIvUOP+gIkbZQzPe4xTQcc58YtUxNuroaU2Ue+koWKY5vDxKml3tNPq
+sP0ZH7AnLfss1ap6pKpLF0FCFghU3pu95zO1/57QekYXzatJ5J7AinwUEWji0YMJ
+veVE9/5K4WlH65SpOiW0RpCJROpOiFNqe+NzbIsUxpsG6qUeCbH0El9SLQq/WOyE
+wEjbgdcGutYVyxCwc9IWLVuOypSsJycg42MTDqAtllnqxwqgWgr2QFRDdxP4ZWbs
+Xelyzf4w2vPlSx0Ul5uEo0DMc4nu2QWpgNwaRTxsSMRlm2jsiAtFikWMZki8fOeI
+yV60tWFbpx69nMqFSae6yf6ad/WGLeE1LTffL0HiWuHAAvRpJ8NeBSk+a5b0N4Ic
+xIYlgq8VGEIVw+TGwke/UF1pGbp5vk08bxq0/AU4POS1ya8XMpaEhc6qO15DPcKC
+FeFionbCYFcK85qhLTdWMQJH0jTZ+KVBAgMBAAGjeDB2MFUGA1UdEQROMEyCG3d3
+dy51bml2ZXJzaXR5YWRtaXNzaW9ucy5zZYYtaHR0cHM6Ly93d3cudW5pdmVyc2l0
+eWFkbWlzc2lvbnMuc2UvYXdzLXNwLWVuMB0GA1UdDgQWBBSJzls2TtVdHzS33s8p
+HAITLxW7fzANBgkqhkiG9w0BAQUFAAOCAgEAF5yfIoYu4UsSix//KG0pkXSbzbR4
+xE/oSP+XRbuh0fDdV3fWyHk22OXbqgMXmBWvZs/ow0EC4T6UxEB+oRcrItjDFM9L
+8T2rvW0ORCZdjnV9qcIGAYzraHfexrfJvGqBb0/CbHPoH+PMHmxlUe7SyXBunIGn
+BxDHvajDVj7qZ7C3FMlt4zaDJa1KurfcQhAJ0Yq2CmZTlaYDjwPCTHdefS6QXFdn
+2zg9ip8W+QqaGaIxO9iRu6tKZM6pTpVrbNELV6AiFT7BHhdPNNSLCqUJq+EiKTc9
+jFeae9XA0iii5GOhCv4N4dZIXIZFAmGlksItSFKRHnLbUAkvYrQCNHLBRtBqxtNq
+goQNWCTBR7dPz4mDU8EXgNacgoHC47EHZ9UJr6VtV6jhk7ocbWAKnuV3pOzGLBVY
+wh6LMDAjzivhSMbqPCvzdYQMKVmSTdttm6zmulYYGfQM+YWiqjfDoxtwVRYR7zPr
+2L6+819Ih9a6XdHVbP9sbjF8M3tUuOZImA4iqG8cNbh5+H3B1S3JxP25NImVYw2T
+CM76LFS4uXLrtjWNhtlSELfJpV9guyLMlmiAOK6Np62g0CVODa1UixjhiNhVbCGj
+sWAcsux9lta0b+QL6D0J5c7yQhYn8enErK79Ld38Al3xPgm6bwULeeHeYNqSMj0G
+TJGDdw01psMDvgA=
 </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </md:KeyDescriptor>
     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.universityadmissions.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.universityadmissions.se/Shibboleth.sso/SLO/SOAP"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.universityadmissions.se/Shibboleth.sso/SLO/Redirect"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.universityadmissions.se/Shibboleth.sso/SLO/POST"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.universityadmissions.se/Shibboleth.sso/SLO/Artifact"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.universityadmissions.se/Shibboleth.sso/NIM/SOAP"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.universityadmissions.se/Shibboleth.sso/NIM/Redirect"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.universityadmissions.se/Shibboleth.sso/NIM/POST"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.universityadmissions.se/Shibboleth.sso/NIM/Artifact"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.universityadmissions.se/Shibboleth.sso/SAML2/POST" index="1"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.universityadmissions.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.universityadmissions.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.universityadmissions.se/Shibboleth.sso/SAML2/ECP" index="4"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.universityadmissions.se/Shibboleth.sso/SAML/POST" index="5"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.universityadmissions.se/Shibboleth.sso/SAML/Artifact" index="6"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Universityadmissions.se</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Antagning.se</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
   </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">The Swedish Council for Higher Education</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Universitets- och högskolerådet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="sv">Universitets- och högskolerådet</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="en">The Swedish Council for Higher Education</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.uhr.se/en/start/</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://www.uhr.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:Company>Universityadmissions.se</md:Company>
+    <md:EmailAddress>mailto:appldrift_saml@uhr.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:Company>Universityadmissions.se</md:Company>
+    <md:EmailAddress>mailto:appldrift_saml@uhr.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:Company>Universityadmissions.se</md:Company>
+    <md:EmailAddress>mailto:appldrift_saml@uhr.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:Company>Universityadmissions.se</md:Company>
+    <md:GivenName>NyAdrift</md:GivenName>
+    <md:EmailAddress>mailto:appldrift_saml@uhr.se</md:EmailAddress>
+  </md:ContactPerson>
 </md:EntityDescriptor>