Add our new monitor host

2 files changed, 129 insertions, 0 deletions

diff --git a/swamid-2.0/monitor.swamid.se.xml b/swamid-2.0/monitor.swamid.se.xml
new file mode 100644
index 00000000..b2a1a73a
--- /dev/null
+++ b/swamid-2.0/monitor.swamid.se.xml
@@ -0,0 +1,128 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://monitor.swamid.se">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2022-09-30T15:28:42Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes>
+      <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+        <samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://monitor.swamid.se/Shibboleth.sso/DS/Login"/>
+      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://monitor.swamid.se/Shibboleth.sso/DS/Login" index="1"/>
+      <mdui:UIInfo>
+        <mdui:Description xml:lang="en">Internal tool to monitor services run by SWAMID</mdui:Description>
+        <mdui:Description xml:lang="sv">Internt verktyg för att övervaka tjänster som SWAMID tillhandahåller</mdui:Description>
+        <mdui:DisplayName xml:lang="en">SWAMID Monitor</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">SWAMID Monitor</mdui:DisplayName>
+        <mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/info/SWAMID+Monitor++Privacy+Policy</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/info/SWAMID+Monitor++Privacy+Policy</mdui:InformationURL>
+        <mdui:Logo xml:lang="en" height="100" width="115">https://metadata.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
+        <mdui:Logo xml:lang="sv" height="100" width="115">https://metadata.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
+        <mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/info/SWAMID+Monitor++Privacy+Policy</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/info/SWAMID+Monitor++Privacy+Policy</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:KeyName>eb8f9f092ea9</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=eb8f9f092ea9</ds:X509SubjectName>
+          <ds:X509Certificate>MIIE9jCCAt6gAwIBAgIUTPALYpvoWFazTv1ycbswrh+/VN0wDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://monitor.swamid.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://monitor.swamid.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://monitor.swamid.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://monitor.swamid.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://monitor.swamid.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://monitor.swamid.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Monitor for SWAMID</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Övervakning för SWAMID</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">http://www.swamid.se</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">http://www.swamid.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>SWAMID Operations</md:GivenName>
+    <md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>SWAMID Operations</md:GivenName>
+    <md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>SWAMID Operations</md:GivenName>
+    <md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:GivenName>Security Response Team</md:GivenName>
+    <md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index ab3b86b0..9ee0cf54 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -616,4 +616,5 @@
   <xi:include href="swamid-2.0/reset.hig.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/account.test.eciu.eu.xml"/>
   <xi:include href="swamid-2.0/ids-test.mau.se-.xml"/>
+  <xi:include href="swamid-2.0/monitor.swamid.se.xml"/>
 </md:EntitiesDescriptor>