Resolves SWAMIDOPS-7643 and SWAMIDOPS-7646

1 files changed, 189 insertions, 0 deletions

diff --git a/swamid-2.0/idptest.hj.se-idp-shibboleth.xml b/swamid-2.0/idptest.hj.se-idp-shibboleth.xml
new file mode 100644
index 00000000..467dfccd
--- /dev/null
+++ b/swamid-2.0/idptest.hj.se-idp-shibboleth.xml
@@ -0,0 +1,189 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+     This is example metadata only. Do *NOT* supply it as is without review,
+     and do *NOT* provide it in real time to your partners.
+
+     This metadata is not dynamic - it will not change as your configuration changes.
+-->
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idptest.hj.se/idp/shibboleth">
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">hj.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Jönköping University - idptest.hj.se</mdui:DisplayName>
+        <mdui:Description xml:lang="en">The Jönköping University Test Identity Provider is used only for testing purpose.</mdui:Description>
+        <mdui:Logo height="77" width="630">https://hj.se/webdav/images/system/gfx/logotype/hj-sv.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idptest.hj.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idptest.hj.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <!--
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idptest.hj.se/idp/profile/SAML2/Redirect/SLO"/>
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idptest.hj.se/idp/profile/SAML2/POST/SLO"/>
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idptest.hj.se:8443/idp/profile/SAML2/SOAP/SLO"/>
+        -->
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idptest.hj.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idptest.hj.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idptest.hj.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">hj.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+MIIDIDCCAgigAwIBAgIVAIUL/EqjvMGZNtChQE84MYUlxJwzMA0GCSqGSIb3DQEB
+CwUAMBgxFjAUBgNVBAMMDWlkcHRlc3QuaGouc2UwHhcNMTUwNDE2MTIzNjIxWhcN
+MzUwNDE2MTIzNjIxWjAYMRYwFAYDVQQDDA1pZHB0ZXN0LmhqLnNlMIIBIjANBgkq
+hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5v0+aejzn3dgUYJFuZy0ZekCc4FocMe
+WqZbOVnSVCynBA9ZTT9rER1rSlQdyXrTqA63BQhXdKoW2XNKQYFKJt9RjMrkcDXk
+ErJDHZgvXQcXrAt674yh+qB9MEpumlx5Nq0Sd8h+6Ox5gB6mJ5MZoikxvcRc3ItA
+OCAnByelpu4to3paFWTe2VBnsv2irdkL//WXWJak7rj9E50wGkPXvBJ5cst/47Id
+blGvA9Quve4BgaKVKgrw0iVSqlid8Yut9HzmQWWD48Yd1d6MSUoX/jGPPZ0NehFL
+ug+KnZ9feyvQIsD4SLWoOpeofLdvNH+f+gAZ5F+71w5koiBZsx0uoQIDAQABo2Ew
+XzAdBgNVHQ4EFgQU8fcjL1jDHLtJ2+PIIpI8hDOSD2IwPgYDVR0RBDcwNYINaWRw
+dGVzdC5oai5zZYYkaHR0cHM6Ly9pZHB0ZXN0LmhqLnNlL2lkcC9zaGliYm9sZXRo
+MA0GCSqGSIb3DQEBCwUAA4IBAQAszfhrL5sb0vZ722+bkywyKNR9KKU5gw6YWKpG
+ew08pyP+N8KG5c+ZXlPMXJGIAhlL/Nj6/OPJSb4olQGuedUhx3ypJOi3/4zRpvdw
+eYSDoIbuHf493UGBxvBX/546ODfzw4qoLToErPa1c1txjAcFg0n8B8TxjoWultNk
+whJLHc+OZRI0wgiHjpMYCCHW4Ss/cW9fQse7biqV0logPliLkODDtoMGvo7jIebE
+zSCKA8JHRGCGtdmzsBL18+rvZSkKNMLlgLRrPq0yGfs21cj5hlTcbf+v/lg6VDD+
+zsCvGvGHU2EK4J/5E7ZsmeCTJpIEV7omzhqn9oHee1PHKexJ
+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idptest.hj.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+    <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idptest.hj.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
+    <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->
+  </AttributeAuthorityDescriptor>
+</EntityDescriptor>