Resolves SWAMID-3135

1 files changed, 115 insertions, 0 deletions

diff --git a/swamid-2.0/digkonto-test.ita.chalmers.se.xml b/swamid-2.0/digkonto-test.ita.chalmers.se.xml
new file mode 100644
index 00000000..970fae54
--- /dev/null
+++ b/swamid-2.0/digkonto-test.ita.chalmers.se.xml
@@ -0,0 +1,115 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://digkonto-test.ita.chalmers.se">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+        <samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Kontoaktivering Chalmers</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Account activation Chalmers</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Kontoaktiveringstjänst hos Chalmers</mdui:Description>
+        <mdui:Description xml:lang="en">Account activation service at Chalmers</mdui:Description>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://student.portal.chalmers.se/sv/chalmersstudier/styrdokument/Sidor/behandling-personuppgifter.aspx</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://student.portal.chalmers.se/en/chalmersstudies/policy-documents/Pages/processing-personal-data.aspx</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/Login/Chalmers"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/Login/Chalmers-test"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/DS/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/DS/Login" index="1"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:KeyName>digkonto-test.net.chalmers.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=digkonto-test.net.chalmers.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIEKTCCApGgAwIBAgIUIHH09XVX4OEP/em0Stm7TE47BMMwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://digkonto-test.ita.chalmers.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Account activation</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Chalmers</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Chalmers</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.chalmers.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>System</md:GivenName>
+    <md:SurName>IT-avdelningen</md:SurName>
+    <md:EmailAddress>mailto:support@chalmers.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:SurName>IT-avdelningen</md:SurName>
+    <md:EmailAddress>mailto:support@chalmers.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>