Resolves SWAMIDOPS-6727

4 files changed, 128 insertions, 0 deletions

diff --git a/swamid-1.0/bhb-00.its.umu.se-gui-sp.xml b/swamid-1.0/bhb-00.its.umu.se-gui-sp.xml
new file mode 100644
index 00000000..3df159e6
--- /dev/null
+++ b/swamid-1.0/bhb-00.its.umu.se-gui-sp.xml
@@ -0,0 +1,52 @@
+
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_9aef91354e2ce3f8b726954a3d4e52dcf26eb4c3" entityID="https://bhb-00.its.umu.se/gui-sp">
+
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://bhb-00.its.umu.se/Shibboleth.sso/Login"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>bhb-00.its.umu.se</ds:KeyName>
+        <ds:KeyName>https://bhb-00.its.umu.se/gui-sp</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=bhb-00.its.umu.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIDHDCCAgSgAwIBAgIJALFNCD6ZIL+1MA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bhb-00.its.umu.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://bhb-00.its.umu.se/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bhb-00.its.umu.se/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bhb-00.its.umu.se/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bhb-00.its.umu.se/Shibboleth.sso/NIM/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://bhb-00.its.umu.se/Shibboleth.sso/SAML/Artifact" index="6"/>
+  </md:SPSSODescriptor>
+
+</md:EntityDescriptor>
\ No newline at end of file
diff --git a/swamid-1.0/bhb-00.its.umu.se-user-idp.xml b/swamid-1.0/bhb-00.its.umu.se-user-idp.xml
new file mode 100644
index 00000000..68d085c5
--- /dev/null
+++ b/swamid-1.0/bhb-00.its.umu.se-user-idp.xml
@@ -0,0 +1,74 @@
+<EntityDescriptor entityID="https://bhb-00.its.umu.se/user-idp"
+                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
+                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
+                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+
+        <Extensions>
+            <shibmd:Scope regexp="false">bhb.its.umu.se</shibmd:Scope>
+        </Extensions>
+
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                    <ds:X509Certificate>
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
+                    </ds:X509Certificate>
+                </ds:X509Data>
+            </ds:KeyInfo>
+        </KeyDescriptor>
+        
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
+                                   Location="https://bhb-00.its.umu.se:8445/idp/profile/SAML1/SOAP/ArtifactResolution" 
+                                   index="1"/>
+
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
+                                   Location="https://bhb-00.its.umu.se:8445/idp/profile/SAML2/SOAP/ArtifactResolution" 
+                                   index="2"/>
+                                   
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+
+        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
+                             Location="https://bhb-00.its.umu.se:8444/idp/profile/Shibboleth/SSO" />
+        
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
+                             Location="https://bhb-00.its.umu.se:8444/idp/profile/SAML2/POST/SSO" />
+
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
+                             Location="https://bhb-00.its.umu.se:8444/idp/profile/SAML2/POST-SimpleSign/SSO" />
+        
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
+                             Location="https://bhb-00.its.umu.se:8444/idp/profile/SAML2/Redirect/SSO" />
+    </IDPSSODescriptor>
+
+    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+
+        <Extensions>
+            <shibmd:Scope regexp="false">bhb.its.umu.se</shibmd:Scope>
+        </Extensions>
+
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                    <ds:X509Certificate>
+MIIBgTCCASugAwIBAgIJANmK5d7szq6eMA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNVBAMMEWJoYi0wMC5pdHMudW11LnNlMB4XDTEyMTEyMzA3MjgzMVoXDTIyMTEyMTA3MjgzMVowHDEaMBgGA1UEAwwRYmhiLTAwLml0cy51bXUuc2UwXDANBgkqhkiG9w0BAQEFAANLADBIAkEAx6lDKSbXwgN19SARCQMM/tvzEqP6QSGFccv0rgw6ef8aKVp52lTAoB05bXiZHXCsZsasE9GtPkyuMx2S7bscFQIDAQABo1AwTjAdBgNVHQ4EFgQUtoJkLhWFVGovAl8MZfjyooPm0EUwHwYDVR0jBBgwFoAUtoJkLhWFVGovAl8MZfjyooPm0EUwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAANBAJubaw1VrzPRgRBYapaY7mbIHwxzRuCislNOXB39Xv7y3qgUaT0jh3khqZiZMkrnT8YB0j4+CsmOfKl8Xtpqiyc=
+                    </ds:X509Certificate>
+                </ds:X509Data>
+            </ds:KeyInfo>
+        </KeyDescriptor>
+
+        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
+                          Location="https://bhb-00.its.umu.se:8445/idp/profile/SAML1/SOAP/AttributeQuery" />
+        
+        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
+                          Location="https://bhb-00.its.umu.se:8445/idp/profile/SAML2/SOAP/AttributeQuery" />
+        
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+        
+    </AttributeAuthorityDescriptor>
+    
+</EntityDescriptor>    
diff --git a/swamid-testing-idp-1.0.mxml b/swamid-testing-idp-1.0.mxml
index d8c2c2d4..5c198253 100644
--- a/swamid-testing-idp-1.0.mxml
+++ b/swamid-testing-idp-1.0.mxml
@@ -135,4 +135,5 @@
   <xi:include href="swamid-1.0/nya-48_idp-metadata.xml"/>
   <xi:include href="swamid-1.0/nya-49_idp-metadata.xml"/>
   <xi:include href="swamid-1.0/nya-50_idp-metadata.xml"/>
+  <xi:include href="swamid-1.0/bhb-00.its.umu.se-user-idp.xml"/>
 </EntitiesDescriptor>
diff --git a/swamid-testing-sp-1.0.mxml b/swamid-testing-sp-1.0.mxml
index c670b7c5..5e2ecf3f 100644
--- a/swamid-testing-sp-1.0.mxml
+++ b/swamid-testing-sp-1.0.mxml
@@ -303,4 +303,5 @@
   <xi:include href="swamid-1.0/nya-00_idp-metadata.xml"/>
   <xi:include href="swamid-1.0/nyautb_idp-metadata.xml"/>
   <xi:include href="swamid-1.0/wb11_idp-metadata.xml"/>
+  <xi:include href="swamid-1.0/bhb-00.its.umu.se-gui-sp.xml"/>
 </EntitiesDescriptor>