mondo md update

1 files changed, 53 insertions, 27 deletions

diff --git a/swamid-1.0/mondo.su.se.xml b/swamid-1.0/mondo.su.se.xml
index e7f6408c..3fa5442a 100644
--- a/swamid-1.0/mondo.su.se.xml
+++ b/swamid-1.0/mondo.su.se.xml
@@ -1,20 +1,41 @@
-<?xml version="1.0"?>
-<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://mondo.su.se">
-  <Extensions>
-      <ds:DiscoveryResponse xmlns:ds="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://mondo.su.se/Shibboleth.sso/WAYF" index="1"/>
-      <ds:DiscoveryResponse xmlns:ds="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://mondo.su.se/Shibboleth.sso/WAYF/wavelan" index="2"/>
-  </Extensions>
-  <SPSSODescriptor WantAssertionsSigned="false" AuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-    <KeyDescriptor use="signing">
+
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://mondo.su.se/Shibboleth.sso">
+
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://mondo.su.se/Shibboleth.sso/WAYF" index="1"/>
+      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://mondo.su.se/Shibboleth.sso/WAYF/wavelan" index="2"/>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>mondo-prod-sp01</ds:KeyName>
         <ds:X509Data>
-          <ds:X509Certificate>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</ds:X509Certificate>
+          <ds:X509SubjectName>CN=mondo-prod-sp01</ds:X509SubjectName>
+          <ds:X509Certificate>MIIC9DCCAdygAwIBAgIJAM4UJR2qKYERMA0GCSqGSIb3DQEBBQUAMBoxGDAWBgNV
+BAMTD21vbmRvLXByb2Qtc3AwMTAeFw0xMDEyMDcwOTUyMjhaFw0yMDEyMDQwOTUy
+MjhaMBoxGDAWBgNVBAMTD21vbmRvLXByb2Qtc3AwMTCCASIwDQYJKoZIhvcNAQEB
+BQADggEPADCCAQoCggEBANHDpW8ngm6S+O6mOrOLGoxikroSOp4ClimdSi1Pb4f1
+wH++06xGrPuokxkS/nmSdv2xm4mJHVwr7JeZp3p0ZHX/yxZMCw7s52w0PrN7/e9+
+Ey8VVBfDUh86jhMrKfBu+fKq63fW+qnvuFKEL84kkOeED4XvzuhwZf5+qZBhmrH1
+0GJUYTizTjPJQdltNbYVvXu9qzs6LX2P4RIg2H+Tk9bZ8a8fGgjtfvSafkp5i9t+
+J+ibw7nF/MRPamL59OGBU8djeWboRM/Oieo0Mt4aaO3W2hwbwoq38TaPKiy+VkhO
+Aa6RLmbPDTzh41l9gW2Je0lk7ioW+J/c5ozAfEbkeVcCAwEAAaM9MDswGgYDVR0R
+BBMwEYIPbW9uZG8tcHJvZC1zcDAxMB0GA1UdDgQWBBSL7nCk9l9a+y+ESFJPaEWc
+R/E+KjANBgkqhkiG9w0BAQUFAAOCAQEArzbPoh14ZeOaO7KtyQ5b9itZL6XoGgxg
+qDfLT9pSpxeEceZ3RuZZKSO00PhSZnPmku5sERzUsmRusO51lBZa1O5chwSdQ9Wu
+qgf4nRO0eLV1DxrVNJa9YEf1C9EF1/gvroH3tVmxjGx+5MxjNe3ZVeUQU3pwqDmv
+QRqWkgrelnHcniL1hgNABqyvxnP4Gn/vMvkVMNi5pzdG+MHnmZnH7Kv8g0Cd9uNf
+3a0hM0uphP4e9/KSBhFYfswjH0mOvHjXW3/6bbimc+zxs4mNxNWP2sPtIvkCkXHM
+z/E5dFvlHgjgE2ON6BQ/LtWQP5FMV/ZXjsRSINnc12T9AQV6Q4P51Q==
+</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-    </KeyDescriptor>
-    <KeyDescriptor use="signing">
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>mondo-prod-sp01</ds:KeyName>
         <ds:X509Data>
+          <ds:X509SubjectName>CN=mondo-prod-sp01</ds:X509SubjectName>
           <ds:X509Certificate>MIIC9DCCAdygAwIBAgIJAM4UJR2qKYERMA0GCSqGSIb3DQEBBQUAMBoxGDAWBgNV
 BAMTD21vbmRvLXByb2Qtc3AwMTAeFw0xMDEyMDcwOTUyMjhaFw0yMDEyMDQwOTUy
 MjhaMBoxGDAWBgNVBAMTD21vbmRvLXByb2Qtc3AwMTCCASIwDQYJKoZIhvcNAQEB
@@ -30,21 +51,26 @@ qDfLT9pSpxeEceZ3RuZZKSO00PhSZnPmku5sERzUsmRusO51lBZa1O5chwSdQ9Wu
 qgf4nRO0eLV1DxrVNJa9YEf1C9EF1/gvroH3tVmxjGx+5MxjNe3ZVeUQU3pwqDmv
 QRqWkgrelnHcniL1hgNABqyvxnP4Gn/vMvkVMNi5pzdG+MHnmZnH7Kv8g0Cd9uNf
 3a0hM0uphP4e9/KSBhFYfswjH0mOvHjXW3/6bbimc+zxs4mNxNWP2sPtIvkCkXHM
-z/E5dFvlHgjgE2ON6BQ/LtWQP5FMV/ZXjsRSINnc12T9AQV6Q4P51Q==</ds:X509Certificate>
+z/E5dFvlHgjgE2ON6BQ/LtWQP5FMV/ZXjsRSINnc12T9AQV6Q4P51Q==
+</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-    </KeyDescriptor>
-    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://mondo.su.se/Shibboleth.sso/SAML/POST" index="1" isDefault="true"/>
-  </SPSSODescriptor>
-  <Organization>
-    <OrganizationName xml:lang="en">SU</OrganizationName>
-    <OrganizationDisplayName xml:lang="en">Stockholm university</OrganizationDisplayName>
-    <OrganizationURL xml:lang="en">http://www.su.se</OrganizationURL>
-  </Organization>
-  <ContactPerson contactType="technical">
-    <Company>Stockholm university</Company>
-    <SurName>IT och Media</SurName>
-    <EmailAddress>helpdesk@it.su.se</EmailAddress>
-    <TelephoneNumber>+46 8 161999</TelephoneNumber>
-  </ContactPerson>
-</EntityDescriptor>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://mondo.su.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://mondo.su.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://mondo.su.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mondo.su.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://mondo.su.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://mondo.su.se/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://mondo.su.se/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mondo.su.se/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://mondo.su.se/Shibboleth.sso/NIM/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://mondo.su.se/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://mondo.su.se/Shibboleth.sso/SAML/Artifact" index="6"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mondo.su.se/Shibboleth.sso/SAML2/POST" index="7"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://mondo.su.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="8"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://mondo.su.se/Shibboleth.sso/SAML2/Artifact" index="9"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://mondo.su.se/Shibboleth.sso/SAML2/ECP" index="10"/>
+  </md:SPSSODescriptor>
+
+</md:EntityDescriptor>