SWAMID-5161: Updated shibboleth.uhr.semd-2024-12-12-v02

1 files changed, 61 insertions, 71 deletions

diff --git a/metadata/swamid-2.0/shibboleth.uhr.se-idp-shibboleth.xml b/metadata/swamid-2.0/shibboleth.uhr.se-idp-shibboleth.xml
index 84ce5cc3..e0f0c044 100644
--- a/metadata/swamid-2.0/shibboleth.uhr.se-idp-shibboleth.xml
+++ b/metadata/swamid-2.0/shibboleth.uhr.se-idp-shibboleth.xml
@@ -39,30 +39,73 @@
         <mdui:GeolocationHint>geo:59.33760,18.05835</mdui:GeolocationHint>
       </mdui:DiscoHints>
     </md:Extensions>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIFBTCCAu2gAwIBAgIUWBohtP8fpt9UaT39H7JXKsyh5fgwDQYJKoZIhvcNAQEL
+BQAwHDEaMBgGA1UEAwwRc2hpYmJvbGV0aC51aHIuc2UwHhcNMjQxMTI1MTQxOTQz
+WhcNMzQxMTI1MTQxOTQzWjAcMRowGAYDVQQDDBFzaGliYm9sZXRoLnVoci5zZTCC
+AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMlEPa9HzaJqbuPLlJWggD3G
+DmK3a7n67PkubGfJ7x6k0fQyY8uGZWl4MWh/WIrVcl7eWl236Ik7PS5yr28GJQyg
+w8+anqIvf1Io6eGIGDDFxTVc9J+D1baU/F6tkcT4mHM5zgbZaYlMvCUweuHCLbry
+3hPM6KIAqJRXmYlHUgdP2fvphwnBmM2o5tqfWsEt2wqzGFzwyHIbkfEi/dSf/f43
++5ZfGBunjlLGlHc4fJHgahHXPloV7kzYBPhQiQsNeseG2+b41SPd22LX+LmstIEy
+H/x0Wz6owvcmKfQiOfwWWFJZnf/ZEzE6ucGEEwRQmYYPOqTwTFXOaROnRX3joAmx
+KReR/kVE3fTvvWQWqJ6I8rLdlb5j6c9r6dmAgDi/DNa/KfqLJ5O16Cs9HLxQ2YYD
+i4bbYAKEsgikuzDHoX2vaItVBeJFMcesp9MBWlFPyXXOCRH/Wt9e502R+Zs86nxb
+eSL75Y0Pi7XI/CVxQ3C/P849QHSBww5aF5kOWDN5j8lTvRmu8PsrZXDVxABeBmpV
+5s/Hza8/MslT5rqMRgA/kurvqRa/VU2zcSVzEGBBnCEUIeauOENQV7tos0pkYkkg
+rG0NG+ceYr7j4rf7fnNWXmttWTeSkf8TiHzem9B2mPM/PKEcjZMikjl/JxUJmlrO
+2SvM8c8KmZy6Qrg4gzL3AgMBAAGjPzA9MB0GA1UdDgQWBBRQRUD772JZmDDKxsFk
+MUqDBzA7hDAcBgNVHREEFTATghFzaGliYm9sZXRoLnVoci5zZTANBgkqhkiG9w0B
+AQsFAAOCAgEATfm+EXmvN2DCpDt0F3B/InBUSueN5MNy8dtrE11BMpUfsf3Me+F9
+NiNs5Bxeu4aJJs6hcaONhWSWlqdD8U8/3thqK1z7rwq/znRrpCTuA9179DAOaGK7
+RXCtpawtJOfhpI+cI6K6tTlQj04+EQeEew44edLKUk3y622B6RgBXTAVC8XjVHHQ
+yBGdGOyOndUJldgdrQ7E2u+f90w0vrGrbF8O+AF5mHLnNyWcyMq5lrUEyO1Ao4Ry
+SG4Mixmsk6McAX0CdNvdwbzdgNnngK8PrbmB8Exqyu3JU3LNAekIiuAzgSm/Epp0
+HnWFEM2fI3lpniO4C6xXmmb0WTBmCl1aHcJHHETp7K6l8csmuKm81O6v6vKxAYRg
+bop9Oo98tZHKcFaWkVGiAVu0Z7RzLGievzsZwV+y9U+izGl4iVAnTvw3QhAMBpCs
+4FhKiDVFt26nqkTWkSg+ta22yXT7YXVvwrAZ23OTdckU1dVsGrh1r3FoXTsuwrwN
+/Hnp4OUBbvMdIWEvp5m0kgp9Jgvm1eNxrhY0lgAcbBeFKLBmpYM6vBJpn+vF2GS6
+04X27hxmw2N1yojxku0wgX78moSJuXejXQdg39qGy3S0X2/DDWTy7FL1uI1iZg1L
+gQEXC5jE+S3Abdi2ghch2JVDWVP9uKTp2arc9ol4Hx1mpvcz6Gb2bh8=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
     <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
         <ds:X509Data>
-          <ds:X509Certificate>MIIDCzCCAfOgAwIBAgIJAPm+X8wR07n6MA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV
-BAMMEXNoaWJib2xldGgudWhyLnNlMB4XDTE0MTIxODEzMDAxOVoXDTI0MTIxNTEz
-MDAxOVowHDEaMBgGA1UEAwwRc2hpYmJvbGV0aC51aHIuc2UwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQC0ZeAWa/eGw+QxcBP6yjkGd1B+8aC+z29O3IJ5
-u171uRRfilAcCPQR6/t4O+dpLCTg17y7kACVc113sUr90G5qzYPRv9xW//FeG+Se
-uATy5+As8uh8E0J4WnScx9G0GwYsmbkXncit7EATOBJi468bD6+K2N10PWHouqIF
-fPIv+MVPRSYQnqCk5+PvEzq56izBxpWfAHcO3TmCQ3Y+UEtYcEB+dcFdPpMAfFlv
-YJySvsCwy4VBWY6atqFhsMUWIKQp042/DB18eUmvzYA4n+tR8E9WQTKza/AtOZZF
-VL1qOJRqrV/bc6z81KpAX9PuZr8bC7POAtI2QYYy6dEdP149AgMBAAGjUDBOMB0G
-A1UdDgQWBBSb+Wr9vnHPBITF2fo5iQr+eximeTAfBgNVHSMEGDAWgBSb+Wr9vnHP
-BITF2fo5iQr+eximeTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQAb
-PjD0cLzg6cM8Ftuyhs/fRttJuK2O8yTUBbZh0khY8XFwNaT1f7noOx7nw9XL/ZdU
-Fbedb+z/ncMmYhiB18wBxnNnAy0BK0Udef/gCtqPKlRxkxCuOMeQe92zrsYoqQgA
-VoZ0+1oHRCzBg6hzeGypg2AcnV46y58F6RNdLJAINLCJ7Flzh35b9M9Xzuxv6t9c
-rxFkRKuKa3AqBppaQFub7FoEeZlMruDJpp2LuC+8ML2BqQLf6ZqfgrX3dHBbLpa6
-jEOshjUyWKPPqAY3pnb71DVlMcLEcEK97YYQtYK/ZvnyFVRPpQ5FWBx9PsuLvKjY
-UIW4Y6GzlL7EfXr31lnv</ds:X509Certificate>
+          <ds:X509Certificate>MIIFBTCCAu2gAwIBAgIUATU31qjAo329JS7tkZTTqcZ1t0cwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
     </md:KeyDescriptor>
-    <md:KeyDescriptor use="encryption">
+    <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
         <ds:X509Data>
           <ds:X509Certificate>MIIDCzCCAfOgAwIBAgIJAPm+X8wR07n6MA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV
@@ -92,59 +135,6 @@ UIW4Y6GzlL7EfXr31lnv</ds:X509Certificate>
     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.uhr.se/idp/profile/SAML2/POST-SimpleSign/SSO"/>
     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.uhr.se/idp/profile/SAML2/Redirect/SSO"/>
   </md:IDPSSODescriptor>
-  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
-    <md:Extensions>
-      <shibmd:Scope regexp="false">uhr.se</shibmd:Scope>
-    </md:Extensions>
-    <md:KeyDescriptor use="signing">
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <ds:X509Certificate>MIIDCzCCAfOgAwIBAgIJAPm+X8wR07n6MA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV
-BAMMEXNoaWJib2xldGgudWhyLnNlMB4XDTE0MTIxODEzMDAxOVoXDTI0MTIxNTEz
-MDAxOVowHDEaMBgGA1UEAwwRc2hpYmJvbGV0aC51aHIuc2UwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQC0ZeAWa/eGw+QxcBP6yjkGd1B+8aC+z29O3IJ5
-u171uRRfilAcCPQR6/t4O+dpLCTg17y7kACVc113sUr90G5qzYPRv9xW//FeG+Se
-uATy5+As8uh8E0J4WnScx9G0GwYsmbkXncit7EATOBJi468bD6+K2N10PWHouqIF
-fPIv+MVPRSYQnqCk5+PvEzq56izBxpWfAHcO3TmCQ3Y+UEtYcEB+dcFdPpMAfFlv
-YJySvsCwy4VBWY6atqFhsMUWIKQp042/DB18eUmvzYA4n+tR8E9WQTKza/AtOZZF
-VL1qOJRqrV/bc6z81KpAX9PuZr8bC7POAtI2QYYy6dEdP149AgMBAAGjUDBOMB0G
-A1UdDgQWBBSb+Wr9vnHPBITF2fo5iQr+eximeTAfBgNVHSMEGDAWgBSb+Wr9vnHP
-BITF2fo5iQr+eximeTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQAb
-PjD0cLzg6cM8Ftuyhs/fRttJuK2O8yTUBbZh0khY8XFwNaT1f7noOx7nw9XL/ZdU
-Fbedb+z/ncMmYhiB18wBxnNnAy0BK0Udef/gCtqPKlRxkxCuOMeQe92zrsYoqQgA
-VoZ0+1oHRCzBg6hzeGypg2AcnV46y58F6RNdLJAINLCJ7Flzh35b9M9Xzuxv6t9c
-rxFkRKuKa3AqBppaQFub7FoEeZlMruDJpp2LuC+8ML2BqQLf6ZqfgrX3dHBbLpa6
-jEOshjUyWKPPqAY3pnb71DVlMcLEcEK97YYQtYK/ZvnyFVRPpQ5FWBx9PsuLvKjY
-UIW4Y6GzlL7EfXr31lnv</ds:X509Certificate>
-        </ds:X509Data>
-      </ds:KeyInfo>
-    </md:KeyDescriptor>
-    <md:KeyDescriptor use="encryption">
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <ds:X509Certificate>MIIDCzCCAfOgAwIBAgIJAPm+X8wR07n6MA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV
-BAMMEXNoaWJib2xldGgudWhyLnNlMB4XDTE0MTIxODEzMDAxOVoXDTI0MTIxNTEz
-MDAxOVowHDEaMBgGA1UEAwwRc2hpYmJvbGV0aC51aHIuc2UwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQC0ZeAWa/eGw+QxcBP6yjkGd1B+8aC+z29O3IJ5
-u171uRRfilAcCPQR6/t4O+dpLCTg17y7kACVc113sUr90G5qzYPRv9xW//FeG+Se
-uATy5+As8uh8E0J4WnScx9G0GwYsmbkXncit7EATOBJi468bD6+K2N10PWHouqIF
-fPIv+MVPRSYQnqCk5+PvEzq56izBxpWfAHcO3TmCQ3Y+UEtYcEB+dcFdPpMAfFlv
-YJySvsCwy4VBWY6atqFhsMUWIKQp042/DB18eUmvzYA4n+tR8E9WQTKza/AtOZZF
-VL1qOJRqrV/bc6z81KpAX9PuZr8bC7POAtI2QYYy6dEdP149AgMBAAGjUDBOMB0G
-A1UdDgQWBBSb+Wr9vnHPBITF2fo5iQr+eximeTAfBgNVHSMEGDAWgBSb+Wr9vnHP
-BITF2fo5iQr+eximeTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4IBAQAb
-PjD0cLzg6cM8Ftuyhs/fRttJuK2O8yTUBbZh0khY8XFwNaT1f7noOx7nw9XL/ZdU
-Fbedb+z/ncMmYhiB18wBxnNnAy0BK0Udef/gCtqPKlRxkxCuOMeQe92zrsYoqQgA
-VoZ0+1oHRCzBg6hzeGypg2AcnV46y58F6RNdLJAINLCJ7Flzh35b9M9Xzuxv6t9c
-rxFkRKuKa3AqBppaQFub7FoEeZlMruDJpp2LuC+8ML2BqQLf6ZqfgrX3dHBbLpa6
-jEOshjUyWKPPqAY3pnb71DVlMcLEcEK97YYQtYK/ZvnyFVRPpQ5FWBx9PsuLvKjY
-UIW4Y6GzlL7EfXr31lnv</ds:X509Certificate>
-        </ds:X509Data>
-      </ds:KeyInfo>
-    </md:KeyDescriptor>
-    <md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.uhr.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
-    <md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.uhr.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
-  </md:AttributeAuthorityDescriptor>
   <md:Organization>
     <md:OrganizationName xml:lang="en">The Swedish Council for Higher Education</md:OrganizationName>
     <md:OrganizationName xml:lang="sv">Universitets- och högskolerådet</md:OrganizationName>