Updates to SWAMID-3559

4 files changed, 190 insertions, 0 deletions

diff --git a/swamid-2.0/login.sto3.safespring.com-5000-mellon.xml b/swamid-2.0/login.sto3.safespring.com-5000-mellon.xml
new file mode 100644
index 00000000..f71f4466
--- /dev/null
+++ b/swamid-2.0/login.sto3.safespring.com-5000-mellon.xml
@@ -0,0 +1,93 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://login.sto3.safespring.com:5000/mellon">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <SPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Sunet Cloud Services</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Sunet Cloud Services OpenStack</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIICzjCCAbYCCQDwu05k3Z8WpDANBgkqhkiG9w0BAQsFADApMScwJQYDVQQDDB5s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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIICzjCCAbYCCQDwu05k3Z8WpDANBgkqhkiG9w0BAQsFADApMScwJQYDVQQDDB5s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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/postResponse"/>
+    <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/artifactResponse"/>
+    <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/paosResponse"/>
+  </SPSSODescriptor>
+  <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+    <OrganizationName xml:lang="en">Safespring</OrganizationName>
+    <OrganizationDisplayName xml:lang="sv">Blue Safespring AB</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Safespring</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">https://www.safespring.com</OrganizationURL>
+  </Organization>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+    <Company>Safespring AB</Company>
+    <GivenName>Safespring Support</GivenName>
+    <EmailAddress>mailto:support@safespring.com</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+    <GivenName>Anders Vaage</GivenName>
+    <EmailAddress>mailto:anders.vaage@safespring.com</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+    <Company>Safespring AB</Company>
+    <GivenName>Safespring Support</GivenName>
+    <EmailAddress>mailto:support@safespring.com</EmailAddress>
+  </ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml b/swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml
new file mode 100644
index 00000000..88b13b25
--- /dev/null
+++ b/swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://v2.api.sto4.safedc.net:5000/mellon">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <SPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Sunet Cloud Services</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Sunet Cloud Services OpenStack</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIICyDCCAbACCQCjm05KUR+CvDANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBt2
+Mi5hcGkuc3RvNC5zYWZlZGMubmV0OjUwMDAwHhcNMjAxMTMwMTAzMTEyWhcNMzAx
+MTMwMTAzMTEyWjAmMSQwIgYDVQQDDBt2Mi5hcGkuc3RvNC5zYWZlZGMubmV0OjUw
+MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXDCUfjVKYg+w6ExF
+jbbqoTQOEfngCTn8dwgHun9cEBOM5MN/6NFm1jVVJjwvq0zCIhnSFZXQAEJRx6t2
+UTL15ynW9r9hVj49sAzsZyyjSaTBqmrGkm2KVl9xeAlTV7tLDSaPt7IA5oCFbnis
+IA68og7xLcrg2hVIj3DLabi8Atc9k37McYV4ZxJYm4LvlPebzrzuqPAPIDvCbApW
+jbwyYEfU8HS9qAxLC3nOKqZ0EWNMV59uofpcn0jCBxGfeccMEOV0ITbZKb3HFC+k
+WzJFlFsBguYzJMUgAsykCnL0KjXM8Hlqj9xkc9pNSKj5kKqUery3OknZ+Jt4aJ6x
+VPCZAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAH7gsPBc/QoSpH47Oit/Cu5mnNZJ
+7SDj0td654ULuCfHQFowZavC8XflJsJ7Jx1q2X+tsK1+MnuFTxib+IuZ9JegLEim
+EmMKvRPCjjFpah+Ag6thvcSjGHnkXloNkP6eQPTkVpcEJ/vcy7evKczX3oCsV+9e
+0Oq0nX8mQlxIRJyYmP4Oo1rH5DfisLVZ5J6mrMX4py9SURye/1S/FELCKA6+M6Ci
+nJFJxR8PAoE8E3OSafL5DiuAf099ru1a84dUi3QE8382RM8CT3sxbtRyuW026ZCb
+x0nGlVC5qVyncNEGPC5ExIxPRCI/I/n5Ar/DS5Lc8NJe9FbsR6G/lmlAVEc=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIICyDCCAbACCQCjm05KUR+CvDANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBt2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=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/postResponse"/>
+    <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/artifactResponse"/>
+    <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/paosResponse"/>
+  </SPSSODescriptor>
+  <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+    <OrganizationName xml:lang="en">Safespring</OrganizationName>
+    <OrganizationDisplayName xml:lang="sv">Blue Safespring AB</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Safespring</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">https://www.safespring.com</OrganizationURL>
+  </Organization>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+    <Company>Safespring AB</Company>
+    <GivenName>Safespring Support</GivenName>
+    <EmailAddress>mailto:support@safespring.com</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+    <GivenName>Anders Vaage</GivenName>
+    <EmailAddress>mailto:anders.vaage@safespring.com</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+    <Company>Safespring AB</Company>
+    <GivenName>Safespring Support</GivenName>
+    <EmailAddress>mailto:support@safespring.com</EmailAddress>
+  </ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml b/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml
index 2d5ee49c..ee7b4baa 100644
--- a/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml
+++ b/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml
@@ -76,6 +76,15 @@ gxlUzeCg29hnmSDs+72Dc1C5sQJ44/Z+Jx1REEzitNeXUlykNfgT/fJsx95GIOPL
     <OrganizationDisplayName xml:lang="en">Safespring</OrganizationDisplayName>
     <OrganizationURL xml:lang="en">https://www.safespring.com</OrganizationURL>
   </Organization>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+    <Company>Safespring AB</Company>
+    <GivenName>Safespring Support</GivenName>
+    <EmailAddress>mailto:support@safespring.com</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+    <GivenName>Anders Vaage</GivenName>
+    <EmailAddress>mailto:anders.vaage@safespring.com</EmailAddress>
+  </ContactPerson>
   <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
     <Company>Safespring AB</Company>
     <GivenName>Safespring Support</GivenName>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index 179f321a..c52f7a48 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -663,4 +663,6 @@
   <xi:include href="swamid-2.0/miunid.miun.se-saml-miun-metadata.xml"/>
   <xi:include href="swamid-2.0/eduvpn.sunet.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml"/>
+  <xi:include href="swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml"/>
+  <xi:include href="swamid-2.0/login.sto3.safespring.com-5000-mellon.xml"/>
 </md:EntitiesDescriptor>