Resolves SWAMID-3256

2 files changed, 149 insertions, 0 deletions

diff --git a/swamid-2.0/moodle-ny.cs.lth.se-shibboleth.xml b/swamid-2.0/moodle-ny.cs.lth.se-shibboleth.xml
new file mode 100644
index 00000000..9c13d079
--- /dev/null
+++ b/swamid-2.0/moodle-ny.cs.lth.se-shibboleth.xml
@@ -0,0 +1,148 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://moodle-ny.cs.lth.se/shibboleth">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/Login" index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">moodle</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">moodle</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Moodle-system för grundutbildningen vid datavetenskap (testmiljö) vid LU</mdui:Description>
+        <mdui:Description xml:lang="en">Moodle server for undergraduate education at the Dept. of Computer Science (testing) at LU</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://moodle-ny.cs.lth.se/</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://moodle-ny.cs.lth.se/</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://www.medarbetarwebben.lu.se/stod-och-verktyg/juridik-dokument-och-arendehantering/personuppgifter-och-dataskydd/overgripande-information/allmanna-principer-for-personuppgiftshantering</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://www.medarbetarwebben.lu.se/stod-och-verktyg/juridik-dokument-och-arendehantering/personuppgifter-och-dataskydd/overgripande-information/allmanna-principer-for-personuppgiftshantering</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:KeyName>moodle-ny.cs.lth.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=moodle-ny.cs.lth.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIECzCCAnOgAwIBAgIUaxXMt5I+Ohw3+zL78338CceJdQMwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>moodle-ny.cs.lth.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=moodle-ny.cs.lth.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIECzCCAnOgAwIBAgIUAZG2rmst1XuvLU3OhGIdO73CE4UwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://moodle-ny.cs.lth.se/Shibboleth.sso/SAML2/ECP" index="4"/>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Lund University</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Lund University</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="sv">https://www.lu.se/</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="en">https://www.lu.se/en</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>Peter</md:GivenName>
+    <md:SurName>Möller</md:SurName>
+    <md:EmailAddress>mailto:peter.moller@cs.lth.se</md:EmailAddress>
+    <md:TelephoneNumber>046-222 41 56</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>Peter</md:GivenName>
+    <md:SurName>Möller</md:SurName>
+    <md:EmailAddress>mailto:peter.moller@cs.lth.se</md:EmailAddress>
+    <md:TelephoneNumber>046-222 41 56</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>Peter</md:GivenName>
+    <md:SurName>Möller</md:SurName>
+    <md:EmailAddress>mailto:peter.moller@cs.lth.se</md:EmailAddress>
+    <md:TelephoneNumber>046-222 41 56</md:TelephoneNumber>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index d480c75f..adb0a115 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -641,4 +641,5 @@
   <xi:include href="swamid-2.0/expertklient.test.antagning.se-ecs-sp.xml"/>
   <xi:include href="swamid-2.0/edusign.lu.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/coursegit.cs.lth.se-gitlab-saml.xml"/>
+  <xi:include href="swamid-2.0/moodle-ny.cs.lth.se-shibboleth.xml"/>
 </md:EntitiesDescriptor>