Resolved SWAMIDOPS-12482

3 files changed, 202 insertions, 0 deletions

diff --git a/sp-with-simplesign b/sp-with-simplesign
index 2a2b360a..18a9fce3 100644
--- a/sp-with-simplesign
+++ b/sp-with-simplesign
@@ -279,3 +279,4 @@ www07test.sub.su.se.xml
 www4.genuinetext.com-shibboleth.xml
 pingpong.uu.se-Shibboleth.SSO-Metadata.xml
 its-pd0328.ad.umu.se-shibboleth.xml
+shib-idp-2.oru.se-idp-shibboleth.xml
diff --git a/swamid-2.0/shib-idp-2.oru.se-idp-shibboleth.xml b/swamid-2.0/shib-idp-2.oru.se-idp-shibboleth.xml
new file mode 100644
index 00000000..cec88716
--- /dev/null
+++ b/swamid-2.0/shib-idp-2.oru.se-idp-shibboleth.xml
@@ -0,0 +1,200 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shib-idp-2.oru.se/idp/shibboleth">
+  <Extensions>
+    <attr:EntityAttributes xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:attr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
+      </saml:Attribute>
+    </attr:EntityAttributes>
+  </Extensions>
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">oru.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">shib-idp-2.oru.se</mdui:DisplayName>
+        <mdui:Description xml:lang="en">IdP för Örebro universitet - Shibboleth IdP v3</mdui:Description>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://www.oru.se</mdui:PrivacyStatementURL>
+        <mdui:Logo height="80" width="80">https://shib-idp-2.oru.se/Logo_txt_runt_farg.gif</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+MIIDOzCCAiOgAwIBAgIUNiSfKA1z7kqPZnZ6BvFj5alpNDgwDQYJKoZIhvcNAQEL
+BQAwHzEdMBsGA1UEAwwUc2hpYi1pZHAtdGVzdC5vcnUuc2UwHhcNMTYwOTAxMTI0
+OTU3WhcNMzYwOTAxMTI0OTU3WjAfMR0wGwYDVQQDDBRzaGliLWlkcC10ZXN0Lm9y
+dS5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM4xgsKQJZUjQQ/2
+w6IMXPyTzSsMlzAyLlb8U5NvskAV9Cy5MlfCn9az4XqR2rm/4FHblwETi2PuMpW1
+qy1DSDA3dL8zWunDuz8J+FhGvSd7xmTnQaOYp5Klqpm2hKUTNUPGPNyCBIOB8iB2
+iKVnTRmThzvr3yOTA0zFrwZZ177DQhkhbP2g/iqBscxYMes7CSNXeFTaI1dksIpi
+3uy2GcNCxDI6khYGC9YT0rcU9eLFQ+gP6hdVZcrPcjPC4J/u6D1YcwC2G7RCNCBp
+up9V0pcCRrcBoo/LJIghfGBat0hKTFUtxK/6GBX1gcrVqTvjBeQXJPqWpzL4qtkT
+/QuYhoMCAwEAAaNvMG0wHQYDVR0OBBYEFBEX0552+o8uctBk5u7x49By+jU8MEwG
+A1UdEQRFMEOCFHNoaWItaWRwLXRlc3Qub3J1LnNlhitodHRwczovL3NoaWItaWRw
+LXRlc3Qub3J1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQBT
+5WCk9TSGTsQNVvuz7zgqBsTasmc7cI6EjqWyhilonfT2orbnZG5+4zOyJnfYF8W3
+OO84YZSY+XozxZfz1sEaGQheiExJVpMfF7fNKr53jNTw8jcOcgSo4ThOfXSf37q9
+jmfLTiubpqiBpKxWhVvyhZEeDyROCli+3JKfomBO6jVBFs5xeYmuj/LCgavAvdBN
+iZ0aXelhNSJeuPksLkSy2zAWHB9Y+lUYCVZ+0ACFGbtruHUW3L5WSchE5d+KXDZ8
+25H2L/qtUpsi4735GVsBKieHohtT61Un0XKeSwEhWSX+ej5DbgzXH6F7XbMS6+RD
+WVSpbBf+Iky5/3hSJbjO
+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib-idp-2.oru.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib-idp-2.oru.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib-idp-2.oru.se/idp/profile/SAML2/Redirect/SLO"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib-idp-2.oru.se/idp/profile/SAML2/POST/SLO"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib-idp-2.oru.se/idp/profile/SAML2/POST-SimpleSign/SLO"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib-idp-2.oru.se:8443/idp/profile/SAML2/SOAP/SLO"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib-idp-2.oru.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib-idp-2.oru.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib-idp-2.oru.se/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib-idp-2.oru.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">oru.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+MIIDPDCCAiSgAwIBAgIVAM531TMg36on8Ql5UK2TziTQr9qRMA0GCSqGSIb3DQEB
+CwUAMB8xHTAbBgNVBAMMFHNoaWItaWRwLXRlc3Qub3J1LnNlMB4XDTE2MDkwMTEy
+NDk1NloXDTM2MDkwMTEyNDk1NlowHzEdMBsGA1UEAwwUc2hpYi1pZHAtdGVzdC5v
+cnUuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmyj1MWgE8NgPY
+tb3XsakHcEOrk6o79EDWTx6DtdTJfz9L2Nl7Z6K/oUZ0R3v1kT8zncS3uz5AlcM0
+vepZ9d4dLWXwKrmOcMTZlRoyQd8RlaC1X3kMinkpivkXduignD/pQter2pCLdoFT
+j0oKbmSHR130zm/uaigcPYjyqwPD/yuwE5mZ+sX1j0NrRU9pvMDZmrgU1XeNwLLD
+wBoCi8qedjGupkJCpvU4X/3+CvVYtzuEImBQmhDnvNpPk1UX6h8wFwNzWr9mkmIl
+qJ9HhakzkbDblsOOgSu+GkGEVaDTFLkoOKxVD8ohqfpYMmNWpCnHvICfbx+qyubx
+Y9qMQUTlAgMBAAGjbzBtMB0GA1UdDgQWBBS6hqhPe57NQMnrUyoK29RDzi4kQDBM
+BgNVHREERTBDghRzaGliLWlkcC10ZXN0Lm9ydS5zZYYraHR0cHM6Ly9zaGliLWlk
+cC10ZXN0Lm9ydS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEA
+Px98VAMrQj/axaEDyVWI+KmXV5JvM5CzJZV2Tt1QZAKG2D1qK/B8Kpri6tFLCK8S
+7cWdzU63gGaP5wONW1rD7uG2bCYlKkiEnJDafapKlS0/qJF2FNA1/6rEDOibwdT6
+yib8RrjklowyQ0pwAMm+YJ89n/MqB5SOL8jPjJEib83FZruRgTg2npKPkc7eWy6l
+XRk4jFV8NbemfAY/9o/JbecRM70stqFI0ihYPg8N7MPyB5Tr5w5OLaqRsEB+qyIy
+AqkS4O7+sMfqyRZz4qH/8s3MKspUmr7LncvBKSWOINun9P2gTJuqqOrJKg7wDHgL
+BAZNocu/Hh/kGS7R/8vneg==
+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib-idp-2.oru.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+  </AttributeAuthorityDescriptor>
+  <ContactPerson contactType="technical">
+    <Company>Örebro universitet</Company>
+    <SurName>IT-support</SurName>
+    <EmailAddress>itsupport@oru.se</EmailAddress>
+  </ContactPerson>
+</EntityDescriptor>
diff --git a/swamid-idp-2.0.mxml b/swamid-idp-2.0.mxml
index a9e04430..dd62911e 100644
--- a/swamid-idp-2.0.mxml
+++ b/swamid-idp-2.0.mxml
@@ -19,4 +19,5 @@
   <xi:include href="swamid-2.0/idp.his.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/login.liu.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idp.hb.se-idp-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/shib-idp-2.oru.se-idp-shibboleth.xml"/>
 </md:EntitiesDescriptor>