Partially resolves SWAMIDOPS-8259

2 files changed, 113 insertions, 0 deletions

diff --git a/swamid-2.0/konto.hig.se-443-idm.xml b/swamid-2.0/konto.hig.se-443-idm.xml
new file mode 100644
index 00000000..55cee5b8
--- /dev/null
+++ b/swamid-2.0/konto.hig.se-443-idm.xml
@@ -0,0 +1,112 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://konto.hig.se:443/idm">
+  <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>MIIC0DCCAbigAwIBAgIJAJEQFd5GvH6uMA0GCSqGSIb3DQEBBQUAMA4xDDAKBgNVBAMTA2lkbTAe
+Fw0xNzAzMTUwOTU5NTRaFw0yNzAzMTMwOTU5NTRaMA4xDDAKBgNVBAMTA2lkbTCCASIwDQYJKoZI
+hvcNAQEBBQADggEPADCCAQoCggEBAKND+/+j5dw8lVvCDVB3kmEpsm7Y3Eg+CXcBowsbrUChssqa
+Knnni77xnpfGV2wruaTIP72wAoMJhM5ZU8rnydQkOs3SagZiajcmZ4WwYpZTfYXQ5Ct7I5bK7NFM
+NhjBc0/Nw0fg+49KhdCN+G3BIRXD9hHF1No0kcqVY4TBj2zDuZc4UJh5xBgaqLwjFdJgq7R+T/by
+55YDpZHFg9qLOPNuxBj45ZFL1IiZdX6MWhrJiFEEHOXu0UX1YTD9qWuN5c5Pu9UzBT5A/2F2Wb0r
+GQOwb8xBg3K6bW7/MK5iSnd9ZHQB4JxUhv6ZNJoTz61QMG74R4HEK/Ec4wxid2OjD8MCAwEAAaMx
+MC8wDgYDVR0RBAcwBYIDaWRtMB0GA1UdDgQWBBSvXwTfFmPlpW3GtcMWCEZHVfNEiDANBgkqhkiG
+9w0BAQUFAAOCAQEAFXWOymh7+gGFJPCB0X/WEZZZsW2a02WpB5b3i8XhrqhuWLZvHtw2wjFeW+6N
+cIVc245Q9XCuHJ8eBqgMFeUbKjJ1W4ErZErhhLzWSkemhx4lnCtk5f7L9ZQQXhCSv+jyzS186N4a
+qm9tCcYZrwmpn+zLlwzgmbe3MQfhCP2r1jDC05ALoExL1hNroBz/VwicR11XOZ17zPK1OYwP4ih8
+TnvGP4OWdlxveTP0xwoTTi3lDHoJpzBUHZtZC80w+OuBosPBaq2e2z2UgLOJ25/od3Pue+gfuNmn
+toK8L6pqaFCbNOcoCOFIF37SX7skdyefXRiYXwy8Ut7sS211qtLu8w==</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>MIIC0DCCAbigAwIBAgIJAJEQFd5GvH6uMA0GCSqGSIb3DQEBBQUAMA4xDDAKBgNVBAMTA2lkbTAe
+Fw0xNzAzMTUwOTU5NTRaFw0yNzAzMTMwOTU5NTRaMA4xDDAKBgNVBAMTA2lkbTCCASIwDQYJKoZI
+hvcNAQEBBQADggEPADCCAQoCggEBAKND+/+j5dw8lVvCDVB3kmEpsm7Y3Eg+CXcBowsbrUChssqa
+Knnni77xnpfGV2wruaTIP72wAoMJhM5ZU8rnydQkOs3SagZiajcmZ4WwYpZTfYXQ5Ct7I5bK7NFM
+NhjBc0/Nw0fg+49KhdCN+G3BIRXD9hHF1No0kcqVY4TBj2zDuZc4UJh5xBgaqLwjFdJgq7R+T/by
+55YDpZHFg9qLOPNuxBj45ZFL1IiZdX6MWhrJiFEEHOXu0UX1YTD9qWuN5c5Pu9UzBT5A/2F2Wb0r
+GQOwb8xBg3K6bW7/MK5iSnd9ZHQB4JxUhv6ZNJoTz61QMG74R4HEK/Ec4wxid2OjD8MCAwEAAaMx
+MC8wDgYDVR0RBAcwBYIDaWRtMB0GA1UdDgQWBBSvXwTfFmPlpW3GtcMWCEZHVfNEiDANBgkqhkiG
+9w0BAQUFAAOCAQEAFXWOymh7+gGFJPCB0X/WEZZZsW2a02WpB5b3i8XhrqhuWLZvHtw2wjFeW+6N
+cIVc245Q9XCuHJ8eBqgMFeUbKjJ1W4ErZErhhLzWSkemhx4lnCtk5f7L9ZQQXhCSv+jyzS186N4a
+qm9tCcYZrwmpn+zLlwzgmbe3MQfhCP2r1jDC05ALoExL1hNroBz/VwicR11XOZ17zPK1OYwP4ih8
+TnvGP4OWdlxveTP0xwoTTi3lDHoJpzBUHZtZC80w+OuBosPBaq2e2z2UgLOJ25/od3Pue+gfuNmn
+toK8L6pqaFCbNOcoCOFIF37SX7skdyefXRiYXwy8Ut7sS211qtLu8w==</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://konto.hig.se:443/idm/login/saml/SingleLogout"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://konto.hig.se:443/idm/login/saml/SingleLogout"/>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</md:NameIDFormat>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://konto.hig.se:443/idm/login/saml/SSO" index="0" isDefault="true"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://konto.hig.se:443/idm/login/saml/SSO" index="1"/>
+  </md:SPSSODescriptor>
+  <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>MIIC0DCCAbigAwIBAgIJAJEQFd5GvH6uMA0GCSqGSIb3DQEBBQUAMA4xDDAKBgNVBAMTA2lkbTAe
+Fw0xNzAzMTUwOTU5NTRaFw0yNzAzMTMwOTU5NTRaMA4xDDAKBgNVBAMTA2lkbTCCASIwDQYJKoZI
+hvcNAQEBBQADggEPADCCAQoCggEBAKND+/+j5dw8lVvCDVB3kmEpsm7Y3Eg+CXcBowsbrUChssqa
+Knnni77xnpfGV2wruaTIP72wAoMJhM5ZU8rnydQkOs3SagZiajcmZ4WwYpZTfYXQ5Ct7I5bK7NFM
+NhjBc0/Nw0fg+49KhdCN+G3BIRXD9hHF1No0kcqVY4TBj2zDuZc4UJh5xBgaqLwjFdJgq7R+T/by
+55YDpZHFg9qLOPNuxBj45ZFL1IiZdX6MWhrJiFEEHOXu0UX1YTD9qWuN5c5Pu9UzBT5A/2F2Wb0r
+GQOwb8xBg3K6bW7/MK5iSnd9ZHQB4JxUhv6ZNJoTz61QMG74R4HEK/Ec4wxid2OjD8MCAwEAAaMx
+MC8wDgYDVR0RBAcwBYIDaWRtMB0GA1UdDgQWBBSvXwTfFmPlpW3GtcMWCEZHVfNEiDANBgkqhkiG
+9w0BAQUFAAOCAQEAFXWOymh7+gGFJPCB0X/WEZZZsW2a02WpB5b3i8XhrqhuWLZvHtw2wjFeW+6N
+cIVc245Q9XCuHJ8eBqgMFeUbKjJ1W4ErZErhhLzWSkemhx4lnCtk5f7L9ZQQXhCSv+jyzS186N4a
+qm9tCcYZrwmpn+zLlwzgmbe3MQfhCP2r1jDC05ALoExL1hNroBz/VwicR11XOZ17zPK1OYwP4ih8
+TnvGP4OWdlxveTP0xwoTTi3lDHoJpzBUHZtZC80w+OuBosPBaq2e2z2UgLOJ25/od3Pue+gfuNmn
+toK8L6pqaFCbNOcoCOFIF37SX7skdyefXRiYXwy8Ut7sS211qtLu8w==</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>MIIC0DCCAbigAwIBAgIJAJEQFd5GvH6uMA0GCSqGSIb3DQEBBQUAMA4xDDAKBgNVBAMTA2lkbTAe
+Fw0xNzAzMTUwOTU5NTRaFw0yNzAzMTMwOTU5NTRaMA4xDDAKBgNVBAMTA2lkbTCCASIwDQYJKoZI
+hvcNAQEBBQADggEPADCCAQoCggEBAKND+/+j5dw8lVvCDVB3kmEpsm7Y3Eg+CXcBowsbrUChssqa
+Knnni77xnpfGV2wruaTIP72wAoMJhM5ZU8rnydQkOs3SagZiajcmZ4WwYpZTfYXQ5Ct7I5bK7NFM
+NhjBc0/Nw0fg+49KhdCN+G3BIRXD9hHF1No0kcqVY4TBj2zDuZc4UJh5xBgaqLwjFdJgq7R+T/by
+55YDpZHFg9qLOPNuxBj45ZFL1IiZdX6MWhrJiFEEHOXu0UX1YTD9qWuN5c5Pu9UzBT5A/2F2Wb0r
+GQOwb8xBg3K6bW7/MK5iSnd9ZHQB4JxUhv6ZNJoTz61QMG74R4HEK/Ec4wxid2OjD8MCAwEAAaMx
+MC8wDgYDVR0RBAcwBYIDaWRtMB0GA1UdDgQWBBSvXwTfFmPlpW3GtcMWCEZHVfNEiDANBgkqhkiG
+9w0BAQUFAAOCAQEAFXWOymh7+gGFJPCB0X/WEZZZsW2a02WpB5b3i8XhrqhuWLZvHtw2wjFeW+6N
+cIVc245Q9XCuHJ8eBqgMFeUbKjJ1W4ErZErhhLzWSkemhx4lnCtk5f7L9ZQQXhCSv+jyzS186N4a
+qm9tCcYZrwmpn+zLlwzgmbe3MQfhCP2r1jDC05ALoExL1hNroBz/VwicR11XOZ17zPK1OYwP4ih8
+TnvGP4OWdlxveTP0xwoTTi3lDHoJpzBUHZtZC80w+OuBosPBaq2e2z2UgLOJ25/od3Pue+gfuNmn
+toK8L6pqaFCbNOcoCOFIF37SX7skdyefXRiYXwy8Ut7sS211qtLu8w==</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://konto.hig.se:443/idm/profile/SAML2/SOAP/ArtifactResolution" index="1" isDefault="true"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://konto.hig.se:443/idm/profile/SAML2/POST/SLO"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://konto.hig.se:443/idm/profile/SAML2/Redirect/SLO"/>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</md:NameIDFormat>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://konto.hig.se:443/idm/profile/SAML2/POST/SSO"/>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://konto.hig.se:443/idm/profile/SAML2/Redirect/SSO"/>
+  </md:IDPSSODescriptor>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>Mona</md:GivenName>
+    <md:SurName>Åkerman</md:SurName>
+    <md:EmailAddress>mailto:mona.akerman@hig.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>Eetu</md:GivenName>
+    <md:SurName>Heino</md:SurName>
+    <md:EmailAddress>mailto:eetu.heino@efecte.com</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index 3bb84705..7781954a 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -649,4 +649,5 @@
   <xi:include href="swamid-2.0/www.utbildning.ladok.se-gui-sp.xml"/>
   <xi:include href="swamid-2.0/student.utbildning.ladok.se-student-sp.xml"/>
   <xi:include href="swamid-2.0/sp.snd.gu.se-module.php-saml-sp-metadata.php-default-sp.xml"/>
+  <xi:include href="swamid-2.0/konto.hig.se-443-idm.xml"/>
 </md:EntitiesDescriptor>