Resolves SWAMID-2890

2 files changed, 261 insertions, 0 deletions

diff --git a/swamid-2.0/testidpv4.lu.se-idp-shibboleth.xml b/swamid-2.0/testidpv4.lu.se-idp-shibboleth.xml
new file mode 100644
index 00000000..72320a51
--- /dev/null
+++ b/swamid-2.0/testidpv4.lu.se-idp-shibboleth.xml
@@ -0,0 +1,260 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://testidpv4.lu.se/idp/shibboleth">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <IDPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">lu.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Lunds universitet (Test)</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Lund University (Test)</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Testidentitetstjänst för anställda och studenter vid Lunds universitet (Shibboleth IdPv4)</mdui:Description>
+        <mdui:Description xml:lang="en">Test identity provider for employees and students at Lund University (Shibboleth IdPv4)</mdui:Description>
+        <mdui:Logo height="71" width="350" xml:lang="sv">https://testidpv4.lu.se/idp/images/lu-sv-l-small.png</mdui:Logo>
+        <mdui:Logo height="77" width="350" xml:lang="en">https://testidpv4.lu.se/idp/images/lu-en-l-small.png</mdui:Logo>
+        <mdui:Keywords xml:lang="sv">lu lth</mdui:Keywords>
+        <mdui:Keywords xml:lang="en">lu lth</mdui:Keywords>
+        <mdui:InformationURL xml:lang="sv">https://www.lu.se/</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://www.lunduniversity.lu.se/</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://lucat.blogg.lu.se/att-anvanda-lu-konto/anvandarvillkor-personuppgifter/hantering-av-personuppgifter/</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://lucat.blogg.lu.se/att-anvanda-lu-konto/anvandarvillkor-personuppgifter/policy-for-management-of-personal-data/</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+      <mdui:DiscoHints>
+        <mdui:DomainHint>lu.se</mdui:DomainHint>
+        <mdui:DomainHint>lth.se</mdui:DomainHint>
+        <mdui:IPHint>130.235.0.0/16</mdui:IPHint>
+      </mdui:DiscoHints>
+    </Extensions>
+    <!-- First signing certificate is BackChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEJzCCAo+gAwIBAgIUax5wlSZ9mfr4nj6Nq3lG3OJ/rlAwDQYJKoZIhvcNAQEL
+                        BQAwGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMB4XDTIwMDIyODE0MTkzMloX
+                        DTQwMDIyODE0MTkzMlowGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMIIBojAN
+                        BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAjSLQZe0gVwlmXmX7Aodd7RtVIq7x
+                        SdGkUMzXKWmu0RrGoEYiIqWGPl4vwepj8rxpB+3fn1ICYLNzDZ/uZjIrQpRRLVFo
+                        EpkvPtio7DiBP67CFBrW8dqeFljyyeJ1x9LXEElM5RTnduwLZfz19QnhKT3BJ6nl
+                        ErtQX6AEhDaGBQr5xPcx6MOmEL6Z3l8oOuIHEJzs++CWUsaGGratFalk1mRKPjOS
+                        OVS8ABKTL2WSGFWN9lg262YSozDg/b9A2Yb1CO9BfqSQLf7dqDjT8ncuQSeJ0F+k
+                        9TbVgoclFPwCGW2ozi0I521UePRaAIQ9K9ogdyHntcGzg6CI4vBIiQTwBqxxBwQc
+                        6Y0E9SKeNajx2zBUuXKhU7Ny+xk/fCSB8/tCn/hU1cSI+3nOpD7I+W5AkI1aJarE
+                        16qmpeqnE0hVsSnJrRvR3RXcUkuFfjNR4ZDSzPgvF4zRgbXHDuN7CQAi+6zhdcnW
+                        M8mxrv0Kv8+2x1rrKsqU2O0ug/N5vaEDasZXAgMBAAGjZTBjMB0GA1UdDgQWBBRQ
+                        E/8BKrHdzUJ77Gwu73rUEDJGMDBCBgNVHREEOzA5gg90ZXN0aWRwdjQubHUuc2WG
+                        Jmh0dHBzOi8vdGVzdGlkcHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3
+                        DQEBCwUAA4IBgQAEX8bVUgn4Fx11xpM1InUKTX5PCFABCCEHrcogdisG+i9D/6vp
+                        lByz8+htRhWK3NiQcFeEvb22+vWSdILQ2Orxkr5pKnq/gwwtxCtwyLLzppN9Apk8
+                        MdGKykZhTt5q2vC+z5QIYVAFqop+Aur8PV8/jh5hfOS1A8qP9f4CdDbJ4yut9slD
+                        ezmhSDyBzwBGw9Gp9MMwki8wUxPABnYSO0tB9hHqHcNs66L9TnU7MHFwgttWkVAe
+                        fEtnmE3TOfhDvPKfA0GvxMx+8Yq33l5ULYpe7VTIZ9cnB8JDyVmxQEVY/OzfBTzr
+                        4+MRo+Mla4dxpRFZCjjPzJfIoWZ4zyRCknVyITj10tVFDyZhgoGlwj3OXrny8HEz
+                        syr6g6Dv3/Dvpa2hfvagYaV7MCS63lxnEwhrfHR9s8BwYhmLzKybVc+V+39cddMb
+                        rQxCop8QUrH5asbJFtrD181RVvg+78kE6+06+ZpRK3fMWOxaXYQNgTsV9SUknt9W
+                        vfDfE7lmEmBH3KU=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <!-- Second signing certificate is FrontChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEKDCCApCgAwIBAgIVALKujwaVHaZhGOqyCUibFCDSPg+WMA0GCSqGSIb3DQEB
+                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
+                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
+                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKV4FKUullzDjlhIueafuIMUklq4
+                        PnkRpcLedmblQ52Vla7kA4ZWJlTihFBuxNrnV3zrRMMdvjZI1u69HgdgZHSwtCFc
+                        TsqiKc3Mj2LaWrRn9+CXPvgsoHNLSVJNHBugm1lDrX/9ON5qPfcF4ojaYdvUVi56
+                        ZNNhSGYUQ0zZ1+BhdUMGNAJDPL1keqsxS+OHlJzcAAhWWLEwiEohfZEcKItvE5w4
+                        m53q1nJaPKZCmNRMu/U0cS5Kglr6mkF9x11HmVswdIrWEtTD7n5cfqt/2d/fimK5
+                        TErL4tHLnxN8iXp5k/2ZvXKEhgT8RLczVArl7ji3WG7Uyf/+tCvbMQxsZDx5lfar
+                        237f/lBQz98/73hNa6eu20Jk4aiz5RnWQDJVr5J0vxKnls6CVZ7VvckLQazQLLRw
+                        LiEngXL3vRw9ZgDioKudpiPwTRvbL7Q5VjYr4WBAMImSR//AEdW14O6xSq11eKmI
+                        ydEHHvH+mfEu1jwc5obRnKPgtRi44FqqVTnU3wIDAQABo2UwYzAdBgNVHQ4EFgQU
+                        AFbJB7RnXcAZhzFHErMsHIWyvtMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
+                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
+                        9w0BAQsFAAOCAYEAJH5eXOsHdSeq29vW0v0NJs3WhQILiyykp6I7yyy8gM8LSv4j
+                        mQvzKDwGZUYkbhpGHm0zlKc+hMUA/xwZ6aoIk2/rj/ZZRa5HX0/y+UWMiQJ1mnF5
+                        3PPxR/95cAwD7dOJVM5gn4Bos8DWSNI6dgSaqS59FkSFrVtWFxRLbsyviq8eRfT0
+                        mVqBszBh3YYvsv3YCgVlDhW9UmvA7DsHD1UK4Ot3dfV7NkB4XMb1o6LJ1/fjP8Jt
+                        Vhi0fmZx/Jjf7yBZZsZvXuty9NSeJYSFl4CrV5FtZyDjv81PpT1Ho5tFDGF+MWAP
+                        xZlszLFdompzKrg4GV0hOYCVzbYHP87okyKexYqM+ILsjnbiBaYPhvbT0OvqzCyB
+                        3xR3z6v9VJ7iZb6s53/6hfPIOaqoigCVVs9kryL/LWxAcONVe3j+LHSpO/LbVeVl
+                        PhPdkKEJlNSh0fl1He/4tDRgn6oxtriCeGhkgkgec1Wts9ToVkVTx8Qj7KOH5pY7
+                        /3I+s2NlmSzSfJF2
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEKDCCApCgAwIBAgIVAL5LJ0uT+Dd+w/aIz5bHK/9jbaYQMA0GCSqGSIb3DQEB
+                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
+                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
+                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAIxmBcbFnCYXL5QozP0c1RSoAs9R
+                        +LLhYdFM8zXE1pfg0MGlNGylU/OyrDG80pRV3RvNFYLWWJ8y0w2I2aVmWjxrcCt0
+                        g95qQC/MbIc7yMJXL5X8jzIJ7dTT3npW+QCzgXOvV+9kk9ukG0/Z6tJiRz2Ici6a
+                        1fvJU8QjfRJqJsm4iRGYvoxLZiLlQcwyGerzoS2rDgIor99KSQEONYjoRdp/6VNy
+                        yCNBta9/ZWCxAd8TFfU2QmilDR+t846IeSWuZ0lhLywr+GzxmEycklAPN/xaNQ1K
+                        /nConoYA6TiJD3ecLm/K9fEay+wCN918ENJABHiQ+i2KStnhqL8oUeudPL5zUgen
+                        D767tUYSjJ10orRSv0agqX7HMYMBl65Zqw9asjZNL9DZkyomyL40QIv5eFV7GmvD
+                        0XyBtem7IR7SGdxloOxFE8PdRYBW655e8ojxIKoMEyoHkelhEtobzIJlYCpE44/I
+                        LDxgt+NRgQ7Cjq2vh/A89JpWbYo0h2hoy6zUvwIDAQABo2UwYzAdBgNVHQ4EFgQU
+                        I5jXm8+Npq8IslUUAkBW3tlyrGMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
+                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
+                        9w0BAQsFAAOCAYEAN1yFroy/gJAvGQ/wcKLrbWHCeCBp8HXGRh+bJIzJoE6/JKSw
+                        BNGLbd6Jp2rYobG4AnyThYn3FeaCWwq0cSyCJZ+7r+xf/X7nqWp1Hz9ols2pM7l2
+                        Gszd3DP3Op8Dv1MPPbb1vWiYHhQY/AwH0dDGpkMiouxyhL7bRkId1tka6/y4olYb
+                        JsqFquFZzWxiicBiY/xPqBgOA1Xd3nusiXfpawtP/5cH+HwJTMaQqDDqW9yzhZAI
+                        jm8y85Vo2h4lXtqRcOJKt7m2mpGEJHKEODr7ZnmCi8gpjlwXYBqn/4ztEQCgsQwy
+                        K8iUARfquSCvJbq9u68bpfG85c3CPwX4Wjke71CV50P1fwWosXUZDawR+am6PEP6
+                        OJ8Dg60C40ih35vpVLw3Ro7L/48vDtE79Ncc6jPEoincmJNHsdzhWwhB0kdPC2hy
+                        BOk5y8w16iqOOkOJmt1bBG5Y3fxXxFKsqecJnGu+bz++xLjtCOJhV2WEsevWKelB
+                        S1UOXyr6n+XEbwgu
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://testidpv4.lu.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidpv4.lu.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://testidpv4.lu.se/idp/profile/SAML2/Redirect/SLO"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testidpv4.lu.se/idp/profile/SAML2/POST/SLO"/>
+    <SingleSignOnService xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://testidpv4.lu.se/idp/profile/SAML2/Redirect/SSO"/>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://testidpv4.lu.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://testidpv4.lu.se/idp/profile/SAML2/POST/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">lu.se</shibmd:Scope>
+    </Extensions>
+    <!-- First signing certificate is BackChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEJzCCAo+gAwIBAgIUax5wlSZ9mfr4nj6Nq3lG3OJ/rlAwDQYJKoZIhvcNAQEL
+                        BQAwGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMB4XDTIwMDIyODE0MTkzMloX
+                        DTQwMDIyODE0MTkzMlowGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMIIBojAN
+                        BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAjSLQZe0gVwlmXmX7Aodd7RtVIq7x
+                        SdGkUMzXKWmu0RrGoEYiIqWGPl4vwepj8rxpB+3fn1ICYLNzDZ/uZjIrQpRRLVFo
+                        EpkvPtio7DiBP67CFBrW8dqeFljyyeJ1x9LXEElM5RTnduwLZfz19QnhKT3BJ6nl
+                        ErtQX6AEhDaGBQr5xPcx6MOmEL6Z3l8oOuIHEJzs++CWUsaGGratFalk1mRKPjOS
+                        OVS8ABKTL2WSGFWN9lg262YSozDg/b9A2Yb1CO9BfqSQLf7dqDjT8ncuQSeJ0F+k
+                        9TbVgoclFPwCGW2ozi0I521UePRaAIQ9K9ogdyHntcGzg6CI4vBIiQTwBqxxBwQc
+                        6Y0E9SKeNajx2zBUuXKhU7Ny+xk/fCSB8/tCn/hU1cSI+3nOpD7I+W5AkI1aJarE
+                        16qmpeqnE0hVsSnJrRvR3RXcUkuFfjNR4ZDSzPgvF4zRgbXHDuN7CQAi+6zhdcnW
+                        M8mxrv0Kv8+2x1rrKsqU2O0ug/N5vaEDasZXAgMBAAGjZTBjMB0GA1UdDgQWBBRQ
+                        E/8BKrHdzUJ77Gwu73rUEDJGMDBCBgNVHREEOzA5gg90ZXN0aWRwdjQubHUuc2WG
+                        Jmh0dHBzOi8vdGVzdGlkcHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3
+                        DQEBCwUAA4IBgQAEX8bVUgn4Fx11xpM1InUKTX5PCFABCCEHrcogdisG+i9D/6vp
+                        lByz8+htRhWK3NiQcFeEvb22+vWSdILQ2Orxkr5pKnq/gwwtxCtwyLLzppN9Apk8
+                        MdGKykZhTt5q2vC+z5QIYVAFqop+Aur8PV8/jh5hfOS1A8qP9f4CdDbJ4yut9slD
+                        ezmhSDyBzwBGw9Gp9MMwki8wUxPABnYSO0tB9hHqHcNs66L9TnU7MHFwgttWkVAe
+                        fEtnmE3TOfhDvPKfA0GvxMx+8Yq33l5ULYpe7VTIZ9cnB8JDyVmxQEVY/OzfBTzr
+                        4+MRo+Mla4dxpRFZCjjPzJfIoWZ4zyRCknVyITj10tVFDyZhgoGlwj3OXrny8HEz
+                        syr6g6Dv3/Dvpa2hfvagYaV7MCS63lxnEwhrfHR9s8BwYhmLzKybVc+V+39cddMb
+                        rQxCop8QUrH5asbJFtrD181RVvg+78kE6+06+ZpRK3fMWOxaXYQNgTsV9SUknt9W
+                        vfDfE7lmEmBH3KU=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <!-- Second signing certificate is FrontChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEKDCCApCgAwIBAgIVALKujwaVHaZhGOqyCUibFCDSPg+WMA0GCSqGSIb3DQEB
+                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
+                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
+                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKV4FKUullzDjlhIueafuIMUklq4
+                        PnkRpcLedmblQ52Vla7kA4ZWJlTihFBuxNrnV3zrRMMdvjZI1u69HgdgZHSwtCFc
+                        TsqiKc3Mj2LaWrRn9+CXPvgsoHNLSVJNHBugm1lDrX/9ON5qPfcF4ojaYdvUVi56
+                        ZNNhSGYUQ0zZ1+BhdUMGNAJDPL1keqsxS+OHlJzcAAhWWLEwiEohfZEcKItvE5w4
+                        m53q1nJaPKZCmNRMu/U0cS5Kglr6mkF9x11HmVswdIrWEtTD7n5cfqt/2d/fimK5
+                        TErL4tHLnxN8iXp5k/2ZvXKEhgT8RLczVArl7ji3WG7Uyf/+tCvbMQxsZDx5lfar
+                        237f/lBQz98/73hNa6eu20Jk4aiz5RnWQDJVr5J0vxKnls6CVZ7VvckLQazQLLRw
+                        LiEngXL3vRw9ZgDioKudpiPwTRvbL7Q5VjYr4WBAMImSR//AEdW14O6xSq11eKmI
+                        ydEHHvH+mfEu1jwc5obRnKPgtRi44FqqVTnU3wIDAQABo2UwYzAdBgNVHQ4EFgQU
+                        AFbJB7RnXcAZhzFHErMsHIWyvtMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
+                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
+                        9w0BAQsFAAOCAYEAJH5eXOsHdSeq29vW0v0NJs3WhQILiyykp6I7yyy8gM8LSv4j
+                        mQvzKDwGZUYkbhpGHm0zlKc+hMUA/xwZ6aoIk2/rj/ZZRa5HX0/y+UWMiQJ1mnF5
+                        3PPxR/95cAwD7dOJVM5gn4Bos8DWSNI6dgSaqS59FkSFrVtWFxRLbsyviq8eRfT0
+                        mVqBszBh3YYvsv3YCgVlDhW9UmvA7DsHD1UK4Ot3dfV7NkB4XMb1o6LJ1/fjP8Jt
+                        Vhi0fmZx/Jjf7yBZZsZvXuty9NSeJYSFl4CrV5FtZyDjv81PpT1Ho5tFDGF+MWAP
+                        xZlszLFdompzKrg4GV0hOYCVzbYHP87okyKexYqM+ILsjnbiBaYPhvbT0OvqzCyB
+                        3xR3z6v9VJ7iZb6s53/6hfPIOaqoigCVVs9kryL/LWxAcONVe3j+LHSpO/LbVeVl
+                        PhPdkKEJlNSh0fl1He/4tDRgn6oxtriCeGhkgkgec1Wts9ToVkVTx8Qj7KOH5pY7
+                        /3I+s2NlmSzSfJF2
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEKDCCApCgAwIBAgIVAL5LJ0uT+Dd+w/aIz5bHK/9jbaYQMA0GCSqGSIb3DQEB
+                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
+                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
+                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAIxmBcbFnCYXL5QozP0c1RSoAs9R
+                        +LLhYdFM8zXE1pfg0MGlNGylU/OyrDG80pRV3RvNFYLWWJ8y0w2I2aVmWjxrcCt0
+                        g95qQC/MbIc7yMJXL5X8jzIJ7dTT3npW+QCzgXOvV+9kk9ukG0/Z6tJiRz2Ici6a
+                        1fvJU8QjfRJqJsm4iRGYvoxLZiLlQcwyGerzoS2rDgIor99KSQEONYjoRdp/6VNy
+                        yCNBta9/ZWCxAd8TFfU2QmilDR+t846IeSWuZ0lhLywr+GzxmEycklAPN/xaNQ1K
+                        /nConoYA6TiJD3ecLm/K9fEay+wCN918ENJABHiQ+i2KStnhqL8oUeudPL5zUgen
+                        D767tUYSjJ10orRSv0agqX7HMYMBl65Zqw9asjZNL9DZkyomyL40QIv5eFV7GmvD
+                        0XyBtem7IR7SGdxloOxFE8PdRYBW655e8ojxIKoMEyoHkelhEtobzIJlYCpE44/I
+                        LDxgt+NRgQ7Cjq2vh/A89JpWbYo0h2hoy6zUvwIDAQABo2UwYzAdBgNVHQ4EFgQU
+                        I5jXm8+Npq8IslUUAkBW3tlyrGMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
+                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
+                        9w0BAQsFAAOCAYEAN1yFroy/gJAvGQ/wcKLrbWHCeCBp8HXGRh+bJIzJoE6/JKSw
+                        BNGLbd6Jp2rYobG4AnyThYn3FeaCWwq0cSyCJZ+7r+xf/X7nqWp1Hz9ols2pM7l2
+                        Gszd3DP3Op8Dv1MPPbb1vWiYHhQY/AwH0dDGpkMiouxyhL7bRkId1tka6/y4olYb
+                        JsqFquFZzWxiicBiY/xPqBgOA1Xd3nusiXfpawtP/5cH+HwJTMaQqDDqW9yzhZAI
+                        jm8y85Vo2h4lXtqRcOJKt7m2mpGEJHKEODr7ZnmCi8gpjlwXYBqn/4ztEQCgsQwy
+                        K8iUARfquSCvJbq9u68bpfG85c3CPwX4Wjke71CV50P1fwWosXUZDawR+am6PEP6
+                        OJ8Dg60C40ih35vpVLw3Ro7L/48vDtE79Ncc6jPEoincmJNHsdzhWwhB0kdPC2hy
+                        BOk5y8w16iqOOkOJmt1bBG5Y3fxXxFKsqecJnGu+bz++xLjtCOJhV2WEsevWKelB
+                        S1UOXyr6n+XEbwgu
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidpv4.lu.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+  </AttributeAuthorityDescriptor>
+  <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+    <OrganizationName xml:lang="en">LU</OrganizationName>
+    <OrganizationDisplayName xml:lang="sv">Lunds universitet (Test)</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Lund University (Test)</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.lu.se/</OrganizationURL>
+  </Organization>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+    <GivenName>Eskil</GivenName>
+    <SurName>Swahn</SurName>
+    <EmailAddress>mailto:eskil.swahn@ldc.lu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+    <GivenName>Johan</GivenName>
+    <SurName>Silverup</SurName>
+    <EmailAddress>mailto:johan.silverup@ldc.lu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+    <SurName>LU Servicedesk</SurName>
+    <EmailAddress>mailto:servicedesk@lu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns:remd="http://refeds.org/metadata" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <GivenName>IRT Lund University</GivenName>
+    <EmailAddress>mailto:abuse@lu.se</EmailAddress>
+    <TelephoneNumber>+46462229000</TelephoneNumber>
+  </ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-testing-idp-1.0.mxml b/swamid-testing-idp-1.0.mxml
index a20f5118..bbf00616 100644
--- a/swamid-testing-idp-1.0.mxml
+++ b/swamid-testing-idp-1.0.mxml
@@ -60,4 +60,5 @@
   <xi:include href="swamid-2.0/idpaas-dev.swamid.se-idp.xml"/>
   <xi:include href="swamid-2.0/shibboleth-test.uhr.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idpproxy.dev.eduid.se-idp.xml"/>
+  <xi:include href="swamid-2.0/testidpv4.lu.se-idp-shibboleth.xml"/>
 </EntitiesDescriptor>