SWAMID-187 fully resolved, add production SP

2 files changed, 118 insertions, 0 deletions

diff --git a/swamid-2.0/mittkau.sae.kau.se-shibboleth.xml b/swamid-2.0/mittkau.sae.kau.se-shibboleth.xml
new file mode 100644
index 00000000..7789427b
--- /dev/null
+++ b/swamid-2.0/mittkau.sae.kau.se-shibboleth.xml
@@ -0,0 +1,117 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://mittkau.sae.kau.se/shibboleth">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://mitt.kau.se/Shibboleth.sso/Login"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Mitt Kau</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">My Kau</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Mitt Kau är en personlig digital tjänst för dig som är student vid Karlstads universitet.</mdui:Description>
+        <mdui:Description xml:lang="en">My Kau is a personalised digital service for students at Karlstad University.</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://mitt.kau.se/login/sv</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://mitt.kau.se/login/en</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://mitt.kau.se/login/policy/sv</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://mitt.kau.se/login/policy/en</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:KeyName>mittkau.sae.kau.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=mittkau.sae.kau.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIECDCCAnCgAwIBAgIURuRXIj9kQpaCvWoxcGD/PIwSTe8wDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://mitt.kau.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://mitt.kau.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://mitt.kau.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mitt.kau.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://mitt.kau.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mitt.kau.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://mitt.kau.se/Shibboleth.sso/SAML2/Artifact" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://mitt.kau.se/Shibboleth.sso/SAML2/ECP" index="3"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Mitt Kau</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">KAU</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">KAU</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Karlstad University</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Karlstads universitet</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.kau.se/en</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://www.kau.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="support">
+    <md:SurName>Mitt Kau</md:SurName>
+    <md:EmailAddress>mailto:mittkau@kau.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="administrative">
+    <md:SurName>Mitt Kau</md:SurName>
+    <md:EmailAddress>mailto:mittkau@kau.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:SurName>IT department</md:SurName>
+    <md:EmailAddress>mailto:2525@kau.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index b3fc89ac..6621921d 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -691,4 +691,5 @@
   <xi:include href="swamid-2.0/expert.hubbletest.antagning.se-ecs-sp.xml"/>
   <xi:include href="swamid-2.0/eu1.itslearning.com-integrations-samlmetadata-saml2v2-extensions-2.xml"/>
   <xi:include href="swamid-2.0/mittkau-stage.sai.kau.se-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/mittkau.sae.kau.se-shibboleth.xml"/>
 </md:EntitiesDescriptor>