SWAMID-5798 Updated se.timeedit.net/lu-general-spmd-2025-06-10-v05

1 files changed, 34 insertions, 35 deletions

diff --git a/metadata/swamid-2.0/se.timeedit.net-lu-general-sp.xml b/metadata/swamid-2.0/se.timeedit.net-lu-general-sp.xml
index c9eb82e5..15017f96 100644
--- a/metadata/swamid-2.0/se.timeedit.net-lu-general-sp.xml
+++ b/metadata/swamid-2.0/se.timeedit.net-lu-general-sp.xml
@@ -2,7 +2,7 @@
 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://se.timeedit.net/lu-general-sp">
   <md:Extensions>
     <mdattr:EntityAttributes>
-      <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+      <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         <samla:AttributeValue>https://refeds.org/category/personalized</samla:AttributeValue>
         <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
       </samla:Attribute>
@@ -11,67 +11,66 @@
       <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
     </mdrpi:RegistrationInfo>
   </md:Extensions>
-  <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAssertionsSigned="false">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true">
     <md:Extensions>
       <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="sv">TimeEdit för studenter och anställda vid Lunds universitet</mdui:DisplayName>
         <mdui:DisplayName xml:lang="en">TimeEdit for students and staff at Lund University</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">TimeEdit för studenter och anställda vid Lunds universitet</mdui:DisplayName>
         <mdui:Description xml:lang="sv">TimeEdit, utvecklat av TimeEdit AB</mdui:Description>
         <mdui:Description xml:lang="en">TimeEdit, developed by TimeEdit AB</mdui:Description>
         <mdui:InformationURL xml:lang="sv">https://www.timeedit.com/info-url-se</mdui:InformationURL>
-        <mdui:InformationURL xml:lang="en">https://www.timeedit.com/info-url</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://www.timeedit.com/info-url-se</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://www.timeedit.com/privacy-statement-se</mdui:PrivacyStatementURL>
         <mdui:PrivacyStatementURL xml:lang="sv">https://www.timeedit.com/privacy-statement-se</mdui:PrivacyStatementURL>
-        <mdui:PrivacyStatementURL xml:lang="en">https://www.timeedit.com/privacy-statement</mdui:PrivacyStatementURL>
       </mdui:UIInfo>
     </md:Extensions>
-    <md:KeyDescriptor>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
-          <ds:X509Certificate>MIIDcDCCAlgCCQDVKUGzGrt/2jANBgkqhkiG9w0BAQsFADB6MQswCQYDVQQGEwJTRTEYMBYGA1UE
-CAwPVmFzdHJhIGdvdGFsYW5kMRMwEQYDVQQHDApHb3RoZW5idXJnMRQwEgYDVQQKDAtUaW1lRWRp
-dCBBQjELMAkGA1UECwwCSVQxGTAXBgNVBAMMEGF1dGgudGltZWVkaXQuc2UwHhcNMTUwNjE1MTAw
-MjEzWhcNMjUwNjEyMTAwMjEzWjB6MQswCQYDVQQGEwJTRTEYMBYGA1UECAwPVmFzdHJhIGdvdGFs
-YW5kMRMwEQYDVQQHDApHb3RoZW5idXJnMRQwEgYDVQQKDAtUaW1lRWRpdCBBQjELMAkGA1UECwwC
-SVQxGTAXBgNVBAMMEGF1dGgudGltZWVkaXQuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQCgv6XIGV5MzRQbAY8tc9x8Eyuiac+o/z6qUT6s6zSYRu83Jd0RZPRnk/9egxV8RElBDq/k
-MAkXhzejUGI+yFkvxyPpB0u4lct9U0a7mbOr+UqkH+ffxjhxZjEjI20FxX29woMhFRtA//bucQ8y
-xuzYhoJd/pXeXfJCpvKZlPJ3ycF9lkUb3nMMoFNIPlRDddb4tu+MpJljioOPIWR45+PyRXKW1ZMd
-Ey8pMoYt42sbIIWJoxj+9/IDbaA7LPg7Zxj+ioWzz7zYA6zdKLj54aQUCrcJ0RZIThzr2gOvMRaT
-5sqDHDmrKFZD/Xd6HwCJkwN6qFPurfZG2GoSnwZ/A8zVAgMBAAEwDQYJKoZIhvcNAQELBQADggEB
-ADv6hhEsCrpbERGv6rFlEvHmYtYrjgJBLF3a91PIvVGPENI6HwJhsges/5idijAIcJyeItd0+UAf
-eTCMriyNnrqfOdOMaHMC+OXcS1+SV+ZLY6SlAWUzbNlwCTyjETfteMEX70fcKIT+Suv+4nA1ZS9o
-g3y728pny0W+yhYxgjs7mSfG2XZIjzV53qGqCscLu8ASWmlSsqtiUfGueWAfGWHEVDDIr95IMy/u
-TG/lyQTEzr6BTeWusqhm6UXKHguQTvdcpUfH+n4L34gCi0CwMcSfyeRecYdLYPbWKAksD570x5Rd
-YFMsQoFZQd+f5DZjuG5tfyWUpcNd+REWUddnOOM=</ds:X509Certificate>
+          <ds:X509Certificate>MIIFRzCCAy+gAwIBAgIUbcATyxl20UB/kEb9tFIvnfeCkqIwDQYJKoZIhvcNAQELBQAwTDELMAkGA1UEBhMCU0UxEzARBgNVBAcMCkdvdGhlbmJ1cmcxETAPBgNVBAoMCFRpbWVFZGl0MRUwEwYDVQQDDAxUaW1lRWRpdCBTU08wHhcNMjQwOTIzMTUwMDI3WhcNMjcxMjA3MTUwMDI3WjBMMQswCQYDVQQGEwJTRTETMBEGA1UEBwwKR290aGVuYnVyZzERMA8GA1UECgwIVGltZUVkaXQxFTATBgNVBAMMDFRpbWVFZGl0IFNTTzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL2SmJq/MygSwLtkBaXAYEpFJ22tnG2BtqwQPui91D8hLMuhLVe5f4QYb52xiS6xkS4NAM0lyWVggga1kNID9FYUblFpLqHKnDq7CleXs318pAcL+B0oDVM9GwiDAcm3h8vky2cu6rhRx7zm2MRZX/Fk2kt6Z9Kwh0xCrFKmUgZO1ARPr+KtSMZO7u54LcdwQ7CWO5W4cPKvOLBUbpRwqRZPRVRM4Y11zq4Iby0XZHkTLjRqvbbasxTZVLPMfXQ8yoMvLFOKXI3KPnb0g6XctRzd1HrMqEbYQQKpQckxh4Y9XOvFC8Kerxp8FUfpFOZMjDmjub0DqDsMxb5E4Y/w3j3cuWzrpQ0E5B7R0grKkp5+tasmjkdmxaxeuw4F5FHpdCsigenyIa/QQGU0vYojA/Kq9YeeS0mF+KYcIJdHOG+9vBV47x3yLLn3aPbt4aLuVqcrAsi9TwMkyiqS2Ags1qemPV6VSqXog0Fz/zKFK/55s9xpdFbUx3CyjyANVprPOHRQsXdBAhedM2qb1orxq+z3jbBA+NFPeOeLSxTzQbWznOiGBtTXYOJBv2wcLKjYUIsF+U0y0eJhmFP/MKgBXDyGN9UEu/5aDR/Pyhz6wCiDPFFVAlz1JWKUfSZuxt0FxJSwRWyOaJPIBO3CrOOAOFmHN1Egg+6g2dqSHT0yWceLAgMBAAGjITAfMB0GA1UdDgQWBBQf2NiRRDiwMbDX/xMNULXIhWU7bTANBgkqhkiG9w0BAQsFAAOCAgEAbMF98k9TZmiH2OtAWq1ulR9clLQQeacQSjfOJagoXSvITRwGx3NF20RNI+v3VFYuJk3/ZR1Fy2jhI2ObRJJ/BIZm72dpXwzxKC8P99q8NQRB7YhegZDRcrijW+LhxZewsWhJx7nDMAwI0aTsdsrtYytmk5ji1REzQrdF07x8JiDDDC8xOG+roRyazQCfKvrNmpYdJXv3RGP+5qqPt/jYVN/PcVd4rYp/9HNko8ehD60Cpe0qvEhpKXvOnQM5s307sMog0dZ9k/w+9uvzmx0e3TSENQm4xdxOsFuXp9z/MM2BopOnOlI+K25Iyywp+kP59oVVNQbUI+4ic6fH81VGNR/H3M0DZHf1tZ8CaIQWaJHusrJeRQFdJ7W0aDm8z3AReqLtETteV/04xX99noHRiOhkOt/hpwqTx5HvE+SQwdOJUa4e2ztqeJ5NlPd4ej8boU5KqdrqmOR8/lCKnaBGiETVBfoBudQ2Rht4Ppmmwm49PTEfJYLlepOdw16ilZ93lNIkVOE4An9418sGHvSWKoyT3wRRpAU1ZOdKtGBllBs7xbZSCEndgFyLmFrcLd/nE0R22CknceJYLzpG18y/1qUALQa+oTx4NS5uBia1Mh0clHOuUTPmPE+t0vPI/mmZF+Oh87JjPmzf3V98AIT1LzSZyODgDILXdB5bzDWgy7M=</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </md:KeyDescriptor>
-    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://cloud.timeedit.net/lu/web/timeedit/ssoLogout/lu_generic_saml2"/>
     <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
-    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" isDefault="false" index="0" Location="https://cloud.timeedit.net/lu/web/timeedit/ssoResponse/lu_generic_saml2"/>
+    <md:AssertionConsumerService index="1" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.timeedit.net/v1/authenticate/callback/EU_EES?"/>
   </md:SPSSODescriptor>
   <md:Organization>
-    <md:OrganizationName xml:lang="sv">TimeEdit AB</md:OrganizationName>
     <md:OrganizationName xml:lang="en">TimeEdit AB</md:OrganizationName>
-    <md:OrganizationDisplayName xml:lang="sv">TimeEdit AB</md:OrganizationDisplayName>
+    <md:OrganizationName xml:lang="sv">TimeEdit AB</md:OrganizationName>
     <md:OrganizationDisplayName xml:lang="en">TimeEdit AB</md:OrganizationDisplayName>
-    <md:OrganizationURL xml:lang="sv">http://www.timeedit.com/</md:OrganizationURL>
-    <md:OrganizationURL xml:lang="en">http://www.timeedit.com/</md:OrganizationURL>
+    <md:OrganizationDisplayName xml:lang="sv">TimeEdit AB</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.timeedit.com</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://www.timeedit.com</md:OrganizationURL>
   </md:Organization>
   <md:ContactPerson contactType="technical">
-    <md:GivenName>TimeEdit</md:GivenName>
-    <md:SurName>Support</md:SurName>
+    <md:Company>TimeEdit AB</md:Company>
+    <md:GivenName>TimeEdit Support</md:GivenName>
     <md:EmailAddress>mailto:support@timeedit.com</md:EmailAddress>
   </md:ContactPerson>
   <md:ContactPerson contactType="support">
-    <md:GivenName>Servicedesk</md:GivenName>
-    <md:SurName>Lunds universitet</md:SurName>
+    <md:Company>Servicedesk</md:Company>
+    <md:GivenName>Lunds universitet</md:GivenName>
     <md:EmailAddress>mailto:servicedesk@lu.se</md:EmailAddress>
   </md:ContactPerson>
   <md:ContactPerson contactType="administrative">
-    <md:GivenName>SRS-förvaltningen</md:GivenName>
-    <md:SurName>Lunds universitet</md:SurName>
+    <md:Company>SRS-förvaltningen</md:Company>
+    <md:GivenName>Lunds universitet</md:GivenName>
     <md:EmailAddress>mailto:srs@bygg.lu.se</md:EmailAddress>
   </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:Company>Lunds university</md:Company>
+    <md:GivenName>LU - Security</md:GivenName>
+    <md:EmailAddress>mailto:security@lu.se</md:EmailAddress>
+  </md:ContactPerson>
 </md:EntityDescriptor>