Resolved SWAMID-3323

3 files changed, 94 insertions, 0 deletions

diff --git a/sp-with-coco-errors b/sp-with-coco-errors
index 393922d6..c4e82571 100644
--- a/sp-with-coco-errors
+++ b/sp-with-coco-errors
@@ -15,3 +15,4 @@ swamid-2.0/us.cloudmore.com-shibboleth.xml
 swamid-2.0/uuc-web003-t.its.uu.se-shibboleth.xml
 swamid-2.0/www.itslearning.com-integrations-samlmetadata-saml2v2-extensions-2.xml
 swamid-2.0/www.mediafora.net-simplesaml-module.php-saml-sp-metadata.php-media-network-sp.xml
+swamid-2.0/moodle.media.nordu.net.xml
diff --git a/swamid-2.0/nextcloud.fysik.su.se-swamidproxy-nextcloud.xml b/swamid-2.0/nextcloud.fysik.su.se-swamidproxy-nextcloud.xml
new file mode 100644
index 00000000..d0b45bf0
--- /dev/null
+++ b/swamid-2.0/nextcloud.fysik.su.se-swamidproxy-nextcloud.xml
@@ -0,0 +1,92 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://nextcloud.fysik.su.se/swamidproxy/nextcloud.xml">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <ns0:SPSSODescriptor xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <ns0:Extensions>
+      <ns1:DiscoveryResponse xmlns:ns1="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://nextcloud.fysik.su.se/swamidproxy/disco" index="1"/>
+      <ns2:UIInfo xmlns:ns2="urn:oasis:names:tc:SAML:metadata:ui">
+        <ns2:DisplayName xml:lang="en">Fysikum Nextcloud</ns2:DisplayName>
+        <ns2:Description xml:lang="en">Fysikum Nextcloud</ns2:Description>
+        <ns2:InformationURL xml:lang="en">https://www.fysik.su.se/english/staff/it-and-telephony/nextcloud-storage-backup</ns2:InformationURL>
+        <ns2:PrivacyStatementURL xml:lang="en">https://www.fysik.su.se/english/staff/it-and-telephony/nextcloud-storage-backup</ns2:PrivacyStatementURL>
+      </ns2:UIInfo>
+    </ns0:Extensions>
+    <ns0:KeyDescriptor use="signing">
+      <ns3:KeyInfo xmlns:ns3="http://www.w3.org/2000/09/xmldsig#">
+        <ns3:X509Data>
+          <ns3:X509Certificate>MIIDITCCAgmgAwIBAgIULOMzxx3eC1JPmsnSkAiDyv8BV40wDQYJKoZIhvcNAQEL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+</ns3:X509Certificate>
+        </ns3:X509Data>
+      </ns3:KeyInfo>
+    </ns0:KeyDescriptor>
+    <ns0:KeyDescriptor use="encryption">
+      <ns3:KeyInfo xmlns:ns3="http://www.w3.org/2000/09/xmldsig#">
+        <ns3:X509Data>
+          <ns3:X509Certificate>MIID5DCCAkygAwIBAgIUTo+7ru5RRb7n0UwBzVP/naj8dJUwDQYJKoZIhvcNAQEL
+BQAwETEPMA0GA1UEAxMGbGFwdG9yMB4XDTIwMTAxOTIwMTAyNloXDTMwMTAxNzIw
+MTAyNlowETEPMA0GA1UEAxMGbGFwdG9yMIIBojANBgkqhkiG9w0BAQEFAAOCAY8A
+MIIBigKCAYEAsxFQyn+LOE53TgAjeTrYp08HB7rynUWn4an4fGyNIRmy6ePxQLzo
+T8KFWQFcLgKlYxxxpkhLq+LE3ELt/sOxUw43Q1vSbXX6eyE+n0ft1oWkPNnV83WP
+muWHDT8a1vrulAaS4zns1vbSYat7trrS0MYyzUaHkjE+j2A4U6x1nR+YdkjZWMZR
+Fm6wxs+gdepcnWbrAuGFDsPcYTrHXei2jLRIt9rhgHAhFq7FXGiKl5uh+MKH7FUY
+c62tQA4cAuWTUZL/1osrrrEy8COVYkgyckdf9mczfs+ipPoY/BPiITdX/CFXld3e
+VfKMaXzK+odfpZGi3HBuyepX725CnnO0kMtANOZ3Z+ElySQOaStbaPjNzmGHtiiD
+wQOYg6aFeVvKKuVuFUCa3ulDc5mNCH/hz640+rAzTVp9s9t/mF5vDyq+H+exsoSV
+oDz8k6OQz5zB0rEJecbmQO1f8b3P1Oxq5Y63IUUaloiNxIJGxMdKUfsHNv/Zbh9Y
+jUfafT9SSyRrAgMBAAGjNDAyMBEGA1UdEQQKMAiCBmxhcHRvcjAdBgNVHQ4EFgQU
+KC1RzMnMhY+iXBMPkHZL/BQVMsEwDQYJKoZIhvcNAQELBQADggGBAJf2vYjK9lWa
+zFKw2vu9oFGGugHmPYzuiiFCfWO8lPtlSvocKNFdOfu9Ge8O054Wee5v6div0o3e
+5QfIO2/EicwwyQPVH7R35rXiVkgodCB2b/CkZa+40MmF4mX9Psd6QwhbDwq7w/9V
+2Zf8tdh+zBkv2bgzzgSBeD9LFqgs1NkIKrPiaf13HbJH0NQPNwkEMnFwtElTTdtb
+FbkXIvULADzafkfHb3NnwF/e3foe0EqbNnRZ0n3yDvqlopGtdU/0PwXXv2l81IUM
+hlDdvgrL5oC4FooDRHhsgWZcZGr571CpNfAcMlPn7ZA/GoN+aUKAIfmP6Jtzo9JW
+dMoXJHtQtBWO+heairETbNW0vCaeXaij6bRqnM6XbQMD8k1iN2NtdEnT5D+g/ce/
+QttmrlLeSQIypcO15eEesYK/no3Gm1CEy0G5jwwajDN4JApjEIpdd0SkUVnCJkWV
+ZvXfxWm8pZrfPFiZV0nY3FZ8Qwz/T1Ne4pdqZV7vR1Wbgetamv0ocA==
+</ns3:X509Certificate>
+        </ns3:X509Data>
+      </ns3:KeyInfo>
+    </ns0:KeyDescriptor>
+    <ns0:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</ns0:NameIDFormat>
+    <ns0:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://nextcloud.fysik.su.se/swamidproxy/acs/post" index="1"/>
+  </ns0:SPSSODescriptor>
+  <ns0:Organization xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata">
+    <ns0:OrganizationName xml:lang="en">Fysikum</ns0:OrganizationName>
+    <ns0:OrganizationDisplayName xml:lang="en">Fysikum</ns0:OrganizationDisplayName>
+    <ns0:OrganizationURL xml:lang="en">https://fysik.su.se/english</ns0:OrganizationURL>
+    <ns0:OrganizationURL xml:lang="sv">https://fysik.su.se</ns0:OrganizationURL>
+  </ns0:Organization>
+  <ns0:ContactPerson xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+    <ns0:GivenName>Alex Kastanas</ns0:GivenName>
+    <ns0:EmailAddress>mailto:kastanas@fysik.su.se</ns0:EmailAddress>
+  </ns0:ContactPerson>
+  <ns0:ContactPerson xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+    <ns0:GivenName>IT Support at Fysikum</ns0:GivenName>
+    <ns0:EmailAddress>mailto:dsa@fysik.su.se</ns0:EmailAddress>
+  </ns0:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-edugain-sp-1.0.mxml b/swamid-edugain-sp-1.0.mxml
index c4eaa06b..f0be64cb 100644
--- a/swamid-edugain-sp-1.0.mxml
+++ b/swamid-edugain-sp-1.0.mxml
@@ -47,4 +47,5 @@
   <xi:include href="swamid-2.0/edusign.sunet.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/signservice.edusign.sunet.se-sigservice.xml"/>
   <xi:include href="swamid-2.0/crowd.sunet.se-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/nextcloud.fysik.su.se-swamidproxy-nextcloud.xml"/>
 </md:EntitiesDescriptor>