Resolves SWAMIDOPS-8437

2 files changed, 198 insertions, 0 deletions

diff --git a/swamid-2.0/idp3.sics.se-idp-shibboleth.xml b/swamid-2.0/idp3.sics.se-idp-shibboleth.xml
new file mode 100644
index 00000000..43cdee30
--- /dev/null
+++ b/swamid-2.0/idp3.sics.se-idp-shibboleth.xml
@@ -0,0 +1,197 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp3.sics.se/idp/shibboleth">
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">sics.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">SICS new</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">SICS ny</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Identity Provider for SICS</mdui:Description>
+        <mdui:Description xml:lang="sv">Identity Provider för SICS</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://www.sics.se</mdui:InformationURL>
+        <mdui:Logo height="95" width="328">https://www.sics.se/logo.png</mdui:Logo>
+      </mdui:UIInfo>
+      <mdui:DiscoHints>
+        <mdui:DomainHint>sics.se</mdui:DomainHint>
+        <mdui:DomainHint>tii.se</mdui:DomainHint>
+        <mdui:IPHint>193.10.64.0/22</mdui:IPHint>
+        <mdui:IPHint>193.10.135.0/24</mdui:IPHint>
+        <mdui:IPHint>192.71.100.0/25</mdui:IPHint>
+      </mdui:DiscoHints>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp3.sics.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp3.sics.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp3.sics.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp3.sics.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp3.sics.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">sics.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp3.sics.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+  </AttributeAuthorityDescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">SICS ny</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">SICS new</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="sv">SICS ny</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">https://www.sics.se</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="technical">
+    <Company>SICS</Company>
+    <SurName>CRIT</SurName>
+    <EmailAddress>mailto:crit@sics.se</EmailAddress>
+  </ContactPerson>
+</EntityDescriptor>
diff --git a/swamid-testing-idp-1.0.mxml b/swamid-testing-idp-1.0.mxml
index 499400fb..8d330423 100644
--- a/swamid-testing-idp-1.0.mxml
+++ b/swamid-testing-idp-1.0.mxml
@@ -60,4 +60,5 @@
   <xi:include href="swamid-2.0/weblogin-test.kau.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/rikards-idp.omv.lu.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idp2.his.se-idp-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/idp3.sics.se-idp-shibboleth.xml"/>
 </EntitiesDescriptor>