Part of SWAMID-493

2 files changed, 155 insertions, 0 deletions

diff --git a/swamid-2.0/weblogin.smhi.se-idp-shibboleth.xml b/swamid-2.0/weblogin.smhi.se-idp-shibboleth.xml
new file mode 100644
index 00000000..6d441be8
--- /dev/null
+++ b/swamid-2.0/weblogin.smhi.se-idp-shibboleth.xml
@@ -0,0 +1,154 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://weblogin.smhi.se/idp/shibboleth">
+  <Extensions xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
+    <mdattr:EntityAttributes>
+      <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">smhi.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">SMHI</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">SMHI</mdui:DisplayName>
+        <mdui:Description xml:lang="en">SMHIs IDP anvands av anstallda och gaster vid SMHI.</mdui:Description>
+        <mdui:Description xml:lang="en">SMHI's IdP used by employees and guests of SMHI.</mdui:Description>
+        <mdui:Logo height="35" width="100">https://weblogin.smhi.se/idp/images/SMHIlogo.png</mdui:Logo>
+        <mdui:Keywords xml:lang="en">SMHI</mdui:Keywords>
+        <mdui:Keywords xml:lang="sv">SMHI</mdui:Keywords>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+	    MIIFwTCCA6mgAwIBAgIJAI1HHzkfl9YAMA0GCSqGSIb3DQEBCwUAMHcxCzAJBgNV
+	    BAYTAlNFMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxDTALBgNVBAoMBFNNSEkxDTAL
+	    BgNVBAsMBFNNSEkxFzAVBgNVBAMMDnNoaWJicy5zbWhpLnNlMRowGAYJKoZIhvcN
+	    AQkBFgtpZGFAc21oaS5zZTAeFw0xNTA5MjUxNTE3MzdaFw0xODA5MjQxNTE3Mzda
+	    MHcxCzAJBgNVBAYTAlNFMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxDTALBgNVBAoM
+	    BFNNSEkxDTALBgNVBAsMBFNNSEkxFzAVBgNVBAMMDnNoaWJicy5zbWhpLnNlMRow
+	    GAYJKoZIhvcNAQkBFgtpZGFAc21oaS5zZTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
+	    ADCCAgoCggIBALolw4x2DyihwpWW6fDMCi9FjPXhJTDslygyg3UE42UrieE3FIUB
+	    qRRUTNggcw4pfmVZln5pE72vmiiBZQa9aov8stbxQupLaNzqtF8lxKsUtrZGZCJo
+	    lbxmwvbeDZj5txZe7dPMcJYFcsj6HBJvCumf/nbV7UkCwLNwirXvoMJ+M7Jt09AI
+	    5GR6WbLbk1U4pocw7qIEsNMpKgGPf05ucCcQp1agr1Pc6AVevT2qRwDzBTUq4Yw2
+	    AtOYEcE5I4+qDdnxd9yIx1fTh2/bparX/EDdM6nNtmw3sD1M6SCaT/Njgzq3sYzS
+	    VRWvwS+O459imG/WfWKmNxptInWtlZ9C3zinOG0RnhYMbmtEKAdki42VTywJ9l4/
+	    IN23eGtNZ8ZyvPF0z7uAlpyxqYMUhHcor8DjbdydW/o8gYF/aVqvo/G/JlNFaFgx
+	    PQPs3dO9IiK1U89bii3u+VHpxPK58pSlXU7RB97txcbSLsu/KNLSJm7/fgdewwOR
+	    MqsEGGW/3BLFN4jRP+O9F4nzPiir1ZMujQ0mna678UOkFb5HGoQxbAu6f0u8ZLvF
+	    5n536Sk14bA/H6Q8ZqUOWqv5/OcrAQgMu96EsMYxFUOegfpQWDeTfkEGblfKU2Hw
+	    SQVPAcdhl5v5rrFzmrOF3CevncgIqTlQKTlnUXOs5UVTQMhZEjpGi9wpAgMBAAGj
+	    UDBOMB0GA1UdDgQWBBQZxCEjV78PPSS34KKsT8kr6JImWTAfBgNVHSMEGDAWgBQZ
+	    xCEjV78PPSS34KKsT8kr6JImWTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUA
+	    A4ICAQCUJ6Oax78++RdL9TM2sJ2ZP3KsKMLwDUfwTRbgkYvy6cDfdj7CYJzpBHAT
+	    GAjI89Xkn+zr9J8cxFPxG4x9c4M5g3YWeXTFHxptkf25QTt7KXVWSIY4a75fIIMB
+	    SfKoXmdA+L7lR9AwdEyeZXGKmykSu6uU/Hk+QTf6JgNOvk7+T97JxtKUT8mXCGZI
+	    IsygP+n8DSPjo1kw3nMPpm/bgzq1sxIFrxU36ZOuCToUTn9I/qRxOFHpX8i9HEix
+	    NvrB5/V5dxDtflS2Vb+ooF0sNLdWX4mWGZB9xYdFm85Ilm3n6G2lFSrh7+rr7Ifb
+	    pFN9F0z+0rD7zTcSnw06NNAH4rqpCGtZ0d1gQ9rcxVCS5/Pt7i2oERNuWxO92XNU
+	    VI3H5p7pG4rXwjehr2O8VImukpgdBnUGL5t2Rl07o3tXCxfuJLad1PHXAtVe6Wva
+	    SZiEcgOP7wmLYix0UG6+8cSjdOExDheGbPo758YygUMLODWQwK6qDb3L0VNYX1Wx
+	    faMIlCMykTYHC0LJrbStdDcH1PRyIO9x5QDY1o9ZFmVnOpsGiPsGtum+KApqdwjC
+	    Yx3IH3fdZRtWsMbwHONe5z6SDqz0B1vUC0UrIao0X6t4g/8Ta0BhEHb6PCulkO7W
+	    FFGn4CG4KX+SKv1I4yDkmiG0myXXyqVvMGo/uPAytrTBH0krrQ==
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+	    MIIFwTCCA6mgAwIBAgIJAOfY870CSGYLMA0GCSqGSIb3DQEBCwUAMHcxCzAJBgNV
+	    BAYTAlNFMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxDTALBgNVBAoMBFNNSEkxDTAL
+	    BgNVBAsMBFNNSEkxFzAVBgNVBAMMDnNoaWJicy5zbWhpLnNlMRowGAYJKoZIhvcN
+	    AQkBFgtpZGFAc21oaS5zZTAeFw0xNTA5MjUxNTE5NThaFw0xODA5MjQxNTE5NTha
+	    MHcxCzAJBgNVBAYTAlNFMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxDTALBgNVBAoM
+	    BFNNSEkxDTALBgNVBAsMBFNNSEkxFzAVBgNVBAMMDnNoaWJicy5zbWhpLnNlMRow
+	    GAYJKoZIhvcNAQkBFgtpZGFAc21oaS5zZTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
+	    ADCCAgoCggIBAKMAen4Oe2syOyQtLcpZL11RFCUisj05HQUjATa1G+7U52BJcAsX
+	    EPHo/FLmtEgqAAvLNcM576GnwYuepEdQ8gVuEDTVp9Y8gex26B+OEf/SNAowtW2f
+	    xqcRv9aEYypnHSfrTyFMhjRWDFjp7QhWbihuhaYEFfq29TiDyXP1el774ZW6a4ou
+	    5NKI92kD1ZLStm0Ev42IyAaw3lvc27Dowag0qZN1W7GFZesYavsH/g3mIczp1BqT
+	    DIkUbTK5Xg4lDtWCfFcyzsGjymfxALmCYS3hSX9ScVXuB2gfygl0lZGLHLYjepWK
+	    +jjLgfcX4PU/ruNofGBWtBWR2YFsAGTd3kWhsBybAVnyNxLZT27pPyz+GKcGV6Wx
+	    qp57G5ZjbLn+E2HciY0fYHOZHGCAIDtUesE9GYUPQuWPBZbHb0vX6cfYg7eJy1Ji
+	    +r/fr5SdQfHICSTvN03NQOWIkR/vIX0qfTto8ZRWSmbVj2oIX8tVWmUDrChyVru1
+	    uVTk6Wch8PUl32sN2z2Bmd1JDUPuvMXD5ZHBVYKB0nja4utonUEZfU/btgdjxs8O
+	    9ZjP0xoFBN4PE2MdumfVTOQFAMj/RoDyayK97dnySwZ1lUaPUUITbQtV6H659jh5
+	    p1eFa8/oJbwPsToqoMK83vP+e98JOFxsaU4YWUM7JpQuFRATucTP05n9AgMBAAGj
+	    UDBOMB0GA1UdDgQWBBR0iHJKEv29NAW0RuYQnO9OryKBdzAfBgNVHSMEGDAWgBR0
+	    iHJKEv29NAW0RuYQnO9OryKBdzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUA
+	    A4ICAQBjR/aW5xvLmm+nTHGF+ZU/rp2oi785kkjKbZhBp9tjPWqFXpUwGhAUvOp7
+	    sPp0QMVISsREg4frGzhgMP49vUKVcivZjgE1vyMcsW5+qScvS8RkJsiE1p5rd0ls
+	    p9eWLm6qvJeF0JJ2JCLcpcpR+9jnfPr9era7qmNK89WUlbKQyBYKET8RJwjeFAEi
+	    KM8S74b6M7QA4UC454OSYjQu5Q27V496YIohi+CAX/4Z0ARKr/mHj09pQTag5Cp/
+	    5vpne+2Br3FxEww9EpCrLrssakvHvtb4DfIGy57Y2mzXXIx6dAF+TT4KmQw59PcR
+	    lmz4bbNyVb1jrKApkpjsMyVyHx/i2yy68MxFJpSFhqwD3iy8djCkuOvbe7CixhqW
+	    1f5VUPY9eLGk6T9FdGfDc6Twv3V5dzVJjkeoDt8ab5Owbdv9iWU84BTr4zWKsZp0
+	    3DzMDdWkBSP2VFzX19QFl6rRgxJLFaTmtsMrbBMU85qqlZeotkMayOXMWhwElL8k
+	    1aVCc76GodExgkEZBnBVv9/2LBTNrv8LikV+41fSPh8cHzpzUB4xaJdkP5x9Pw1v
+	    WJa0W6B/SykINg3kvr1JoRhUPcUPjhz+40MR6oP71Iuy0PgqZZfrE3pt5ngQxut3
+	    BS+qJoqgoexO0Zz7jfFKjTI213eIFcUaER/1pTTsmdRugXT/9g==
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://weblogin.smhi.se/idp/profile/SAML2/Redirect/SLO"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://weblogin.smhi.se/idp/profile/SAML2/POST/SLO"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://weblogin.smhi.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://weblogin.smhi.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://weblogin.smhi.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">SMHI</OrganizationName>
+    <OrganizationName xml:lang="sv">SMHI</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">SMHI</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="sv">SMHI</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.smhi.se</OrganizationURL>
+    <OrganizationURL xml:lang="sv">http://www.smhi.se</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="administrative">
+    <Company>SMHI</Company>
+    <SurName>Sakib Kicic</SurName>
+    <EmailAddress>sakib.kicic@smhi.se</EmailAddress>
+    <TelephoneNumber>+46134958033</TelephoneNumber>
+  </ContactPerson>
+  <ContactPerson contactType="administrative">
+    <Company>SMHI</Company>
+    <SurName>Victor Naslund</SurName>
+    <EmailAddress>victor.naslund@smhi.se</EmailAddress>
+    <TelephoneNumber>+46134958246</TelephoneNumber>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <Company>SMHI</Company>
+    <SurName>Sakib Kicic</SurName>
+    <EmailAddress>sakib.kicic@smhi.se</EmailAddress>
+    <TelephoneNumber>+46134958033</TelephoneNumber>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <Company>SMHI</Company>
+    <SurName>Victor Naslund</SurName>
+    <EmailAddress>victor.naslund@smhi.se</EmailAddress>
+    <TelephoneNumber>+46134958246</TelephoneNumber>
+  </ContactPerson>
+  <ContactPerson contactType="support">
+    <Company>SMHI</Company>
+    <SurName>Sakib Kicic</SurName>
+    <EmailAddress>sakib.kicic@smhi.se</EmailAddress>
+    <TelephoneNumber>+46134958033</TelephoneNumber>
+  </ContactPerson>
+  <ContactPerson contactType="support">
+    <Company>SMHI</Company>
+    <SurName>Victor Naslund</SurName>
+    <EmailAddress>victor.naslund@smhi.se</EmailAddress>
+    <TelephoneNumber>+46134958246</TelephoneNumber>
+  </ContactPerson>
+</EntityDescriptor>
diff --git a/swamid-idp-2.0.mxml b/swamid-idp-2.0.mxml
index 12da818e..a8946080 100644
--- a/swamid-idp-2.0.mxml
+++ b/swamid-idp-2.0.mxml
@@ -10,4 +10,5 @@
   <xi:include href="swamid-2.0/adfs01.fhs.se-adfs-services-trust.xml"/>
   <xi:include href="swamid-2.0/idp.antagning.se-aws-idp.xml"/>
   <xi:include href="swamid-2.0/adfs2.gu.se-adfs-services-trust.xml"/>
+  <xi:include href="swamid-2.0/weblogin.smhi.se-idp-shibboleth.xml"/>
 </md:EntitiesDescriptor>