Prepare for MFA Hackatonmd-2023-04-25-v02

2 files changed, 115 insertions, 0 deletions

diff --git a/metadata/swamid-testing-sp-1.0.mxml b/metadata/swamid-testing-sp-1.0.mxml
index 06fdd68c..ed510b75 100644
--- a/metadata/swamid-testing-sp-1.0.mxml
+++ b/metadata/swamid-testing-sp-1.0.mxml
@@ -18,6 +18,7 @@
   <xi:include href="swamid-testing/sesam.test.uu.se-Shibboleth.sso-Metadata.xml"/>
   <xi:include href="swamid-testing/sesam.test.uu.se-shibboleth.xml"/>
   <xi:include href="swamid-testing/sesamutvf.its.uu.se-shibboleth.xml"/>
+  <xi:include href="swamid-testing/shibmfa.qa.swamid.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-testing/sp-t1.oru.se-shibboleth.xml"/>
   <xi:include href="swamid-testing/sp.haikom.com-saml-kph-test.xml"/>
   <xi:include href="swamid-testing/sso.36602638.inspera.com-saml.xml"/>
diff --git a/metadata/swamid-testing/shibmfa.qa.swamid.se-idp-shibboleth.xml b/metadata/swamid-testing/shibmfa.qa.swamid.se-idp-shibboleth.xml
new file mode 100644
index 00000000..0fd31314
--- /dev/null
+++ b/metadata/swamid-testing/shibmfa.qa.swamid.se-idp-shibboleth.xml
@@ -0,0 +1,114 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://shibmfa.qa.swamid.se/idp/shibboleth">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2023-04-25T12:05:30Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <mdui:UIInfo>
+        <mdui:Description xml:lang="en">SWAMID TestSP MFA for QA</mdui:Description>
+        <mdui:Description xml:lang="sv">SWAMID TestSP MFA för QA</mdui:Description>
+        <mdui:DisplayName xml:lang="en">SWAMID TestSP MFA for QA</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">SWAMID TestSP MFA för QA</mdui:DisplayName>
+        <mdui:InformationURL xml:lang="en">https://testidp.qa.swamid.se/</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="sv">https://testidp.qa.swamid.se/</mdui:InformationURL>
+        <mdui:Logo xml:lang="en" height="100" width="115">https://release-check.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
+        <mdui:Logo xml:lang="sv" height="100" width="115">https://release-check.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
+        <mdui:PrivacyStatementURL xml:lang="en">https://testidp.qa.swamid.se/</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://testidp.qa.swamid.se/</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIFOzCCAyOgAwIBAgIUYP3DuIf4Uobaa5wQsCq+Tx9Mjv0wDQYJKoZIhvcNAQEL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=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIFOzCCAyOgAwIBAgIUJHPfb58vKx9KvuVv9AE8Qx92WX8wDQYJKoZIhvcNAQEL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=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibmfa.qa.swamid.se/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">http://www.swamid.se</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">http://www.swamid.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="technical">
+    <md:Company>SWAMID</md:Company>
+    <md:GivenName>SWAMID Operations</md:GivenName>
+    <md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>SWAMID Operations</md:GivenName>
+    <md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>SWAMID Operations</md:GivenName>
+    <md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>