Resolves SWAMIDOPS-7165

3 files changed, 96 insertions, 34 deletions

diff --git a/swamid-2.0/callback-prod.inloggning.se-simplesaml-saml2-idp-meta_7baf0ac137159c2b28aebc5956e46bff.xml b/swamid-2.0/callback-prod.inloggning.se-simplesaml-saml2-idp-meta_7baf0ac137159c2b28aebc5956e46bff.xml
deleted file mode 100644
index e802d491..00000000
--- a/swamid-2.0/callback-prod.inloggning.se-simplesaml-saml2-idp-meta_7baf0ac137159c2b28aebc5956e46bff.xml
+++ /dev/null
@@ -1,33 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://callback-prod.inloggning.se/simplesaml/saml2/idp/meta_7baf0ac137159c2b28aebc5956e46bff">
-  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
-    <md:KeyDescriptor use="signing">
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <ds:X509Certificate>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</ds:X509Certificate>
-        </ds:X509Data>
-      </ds:KeyInfo>
-    </md:KeyDescriptor>
-    <md:KeyDescriptor use="encryption">
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <ds:X509Certificate>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</ds:X509Certificate>
-        </ds:X509Data>
-      </ds:KeyInfo>
-    </md:KeyDescriptor>
-    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://callback-prod.inloggning.se/simplesaml/saml2/idp/sls_7baf0ac137159c2b28aebc5956e46bff"/>
-    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://callback-prod.inloggning.se/simplesaml/saml2/idp/sls_7baf0ac137159c2b28aebc5956e46bff"/>
-    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
-    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://callback-prod.inloggning.se/simplesaml/saml2/idp/ssos_7baf0ac137159c2b28aebc5956e46bff"/>
-    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://callback-prod.inloggning.se/simplesaml/saml2/idp/ssos_7baf0ac137159c2b28aebc5956e46bff"/>
-  </md:IDPSSODescriptor>
-  <md:Organization>
-    <md:OrganizationName xml:lang="sv">Handelshögskolan i Stockholm</md:OrganizationName>
-    <md:OrganizationName xml:lang="en">Handelshögskolan i Stockholm</md:OrganizationName>
-    <md:OrganizationName xml:lang="no">Handelshögskolan i Stockholm</md:OrganizationName>
-    <md:OrganizationDisplayName xml:lang="sv">Handelshögskolan i Stockholm</md:OrganizationDisplayName>
-    <md:OrganizationDisplayName xml:lang="en">Handelshögskolan i Stockholm</md:OrganizationDisplayName>
-    <md:OrganizationDisplayName xml:lang="no">Handelshögskolan i Stockholm</md:OrganizationDisplayName>
-    <md:OrganizationURL xml:lang="en">http://www.e-identitet.se/?page=idps#hhs</md:OrganizationURL>
-  </md:Organization>
-</md:EntityDescriptor>
diff --git a/swamid-2.0/login.idp.hhs.se-idp-shibboleth.xml b/swamid-2.0/login.idp.hhs.se-idp-shibboleth.xml
new file mode 100644
index 00000000..dd3d8662
--- /dev/null
+++ b/swamid-2.0/login.idp.hhs.se-idp-shibboleth.xml
@@ -0,0 +1,95 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://login.idp.hhs.se/idp/shibboleth">
+  <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">hhs.se</shibmd:Scope>
+      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+        <mdui:DisplayName xml:lang="sv">Handelshögskolan i Stockholm</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Stockholm School of Economics</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Identity Provider för Handelshögskolan i Stockholm.</mdui:Description>
+        <mdui:Description xml:lang="en">Identity Provider for Stockholm School of Economics.</mdui:Description>
+        <mdui:Logo height="82" width="82">https://login.idp.hhs.se/idp/images/logo.png</mdui:Logo>
+      </mdui:UIInfo>
+      <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+        <mdui:IPHint>193.10.48.0/24</mdui:IPHint>
+        <mdui:DomainHint>hhs.se</mdui:DomainHint>
+        <mdui:GeolocationHint>geo:59.34161,18.05659</mdui:GeolocationHint>
+      </mdui:DiscoHints>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIDLDCCAhSgAwIBAgIVAPaVg+Pnce+JDTg4a490Fu28tq5UMA0GCSqGSIb3DQEB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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.idp.hhs.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.idp.hhs.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.idp.hhs.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.idp.hhs.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.idp.hhs.se/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.idp.hhs.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">hhs.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIDLDCCAhSgAwIBAgIVAPaVg+Pnce+JDTg4a490Fu28tq5UMA0GCSqGSIb3DQEB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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.idp.hhs.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.idp.hhs.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+  </AttributeAuthorityDescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">HHS</OrganizationName>
+    <OrganizationDisplayName xml:lang="sv">Handelshögskolan i Stockholm</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Stockholm School of Economics</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.hhs.se</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="technical">
+    <Company>Handelshögskolan i Stockholm</Company>
+    <EmailAddress>itsupport@hhs.se</EmailAddress>
+  </ContactPerson>
+</EntityDescriptor>
diff --git a/swamid-idp-2.0.mxml b/swamid-idp-2.0.mxml
index 3d497f28..7e547b19 100644
--- a/swamid-idp-2.0.mxml
+++ b/swamid-idp-2.0.mxml
@@ -38,7 +38,6 @@
   <xi:include href="swamid-2.0/idp.konstfack.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idp.rkh.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idp.kmh.se-idp-shibboleth.xml"/>
-  <xi:include href="swamid-2.0/callback-prod.inloggning.se-simplesaml-saml2-idp-meta_7baf0ac137159c2b28aebc5956e46bff.xml"/>
   <xi:include href="swamid-2.0/shibboleth.net.lu.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idp.kva.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/shibboleth.uhr.se-idp-shibboleth.xml"/>
@@ -54,4 +53,5 @@
   <xi:include href="swamid-2.0/fs.liu.se-adfs-services-trust.xml"/>
   <xi:include href="swamid-2.0/gihidentity01.ihs.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/weblogin.uu.se-idp-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/login.idp.hhs.se-idp-shibboleth.xml"/>
 </md:EntitiesDescriptor>