Resolves SWAMIDOPS-1428 and SWAMIDOPS-1430

1 files changed, 149 insertions, 0 deletions

diff --git a/swamid-2.0/konto-test.test.hb.se-shibboleth.xml b/swamid-2.0/konto-test.test.hb.se-shibboleth.xml
new file mode 100644
index 00000000..0ac62d4d
--- /dev/null
+++ b/swamid-2.0/konto-test.test.hb.se-shibboleth.xml
@@ -0,0 +1,149 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://konto-test.test.hb.se/Shibboleth">
+  <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue>
+        <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue>
+        <samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://konto-test.test.hb.se/Shibboleth.sso/Login" index="1"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/DS/ds-test.swamid.se"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://konto-test.test.hb.se/Shibboleth.sso/DS/ds-test.swamid.se" index="2"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/WAYF/shibboleth.antagning.se"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/WAYF/login.idp.eduid.se"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/https://hbidp-test.hb.se/idp/profile/Shibboleth/SSO"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/https://hbidp-test.hb.se/idp/profile/Shibboleth/SSO"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://konto-test.test.hb.se/Shibboleth.sso/https://hbidp-test.hb.se/idp/profile/Shibboleth/SSO"/>
+      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+        <mdui:DisplayName xml:lang="sv">Konto TEST</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Konto TEST</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Testserver för applikationen Konto, som skapar identiteter på Högskolan i Borås.</mdui:Description>
+        <mdui:Description xml:lang="en">Testserver for the application Konto, which provides identities at the University of Borås.</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://www.hb.se/Om-hogskolan/</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://www.hb.se/en/About-UB/</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://konto.hb.se/PrivacyIntegrity.aspx</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://konto.hb.se/PrivacyIntegrity.aspx</mdui:PrivacyStatementURL>
+        <mdui:Logo height="100" width="100">https://www.hb.se//PageFiles/41206/HBloggaSwamid.gif</mdui:Logo>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>hbsp-test.ad.hb.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=hbsp-test.ad.hb.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIID/TCCAmWgAwIBAgIJAJXxIZ8hzubRMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV
+BAMTEmhic3AtdGVzdC5hZC5oYi5zZTAeFw0xODA4MTUxMDAzMDRaFw0yODA4MTIx
+MDAzMDRaMB0xGzAZBgNVBAMTEmhic3AtdGVzdC5hZC5oYi5zZTCCAaIwDQYJKoZI
+hvcNAQEBBQADggGPADCCAYoCggGBAKpwRrE5j42Jku0JU5hbk/GISqjlSmZ5c5Xq
+a0zYBlZPdmYf4K3hVqeUZtK+f2MHE+RZ/M8Xe4ujBvi+KAebSK1f43b/A1+sTQ3Q
+VNuKHu2wNMOy/f/F5IOHaU3H97TG2dirI2hNasG/lQjheIzcrqPAZAlak+CbjAQe
+WNPuyeHtdab9yNllo51zefOt57e3+DfQRY5JOSasmEzhn7BD7Io6P8T4IqDE3viN
+j7uJDmjuEoMHQfXqXuBkNmdbpC/x43u9zOi6FLqjuLlUNNXeYbe6+JGWPHIZZWpw
+10EE52VUo/DqvUFLpW8DQx8dTTTuDVfpkWlNobY7DG6uMVz7KxlPPkzRojZdaU+Z
+IzeAoLgAMnLLf18hBkKdx6Kq/RDH5+4pJCo9y1os1o5tljH80p2+03+Z0rFkApnH
+4G3hnoXaDXnGfm3n0sSMjpvSQ3xhPH1fLHTfJD9IOYgNufWQqrX//61t/HVmoJZZ
+d0RPjU+uL2ahfVQNN4wZkFAYgSudLQIDAQABo0AwPjAdBgNVHREEFjAUghJoYnNw
+LXRlc3QuYWQuaGIuc2UwHQYDVR0OBBYEFETbzt7ILuBVhr6N12meu0FA6OrnMA0G
+CSqGSIb3DQEBCwUAA4IBgQAwjkyU1ADuMjfRiIfF2oHhKghlYyNyWI+UopYkuFS9
+QK+446eydGTRH+sp5LIoB6ylcm588Mn5uVmgNBNkqrEMXYOtbtN8hugfSAMuJTJj
+HEazh3eKpa/PYArmFotw4kLtgtVtYk6gRo6ZKtKXe+Vmgf+eFEbHMTn2i6fsDu7t
+9aDtZNzt1beSdU51awn8wn9jdD7aN9iT9GZ4RNAXU93UaFE+dy9EpC0nd0NNxsLn
+AJnEYrFEZus4XFG0aUGzcZReWQi5C/ryUmXeq93H/Dt82rKfWn/Jg4dKg33vu0Ol
+49WDxOfjUNFXTckw7SmDm2iKNwUZns7/E11Pvt/Sa/Kzo/xccO3dZ0ESLbhlL0sd
+cDAenuSelj4GWkExkn8JJu+Gf4tF454KHdjGHNv4760astFtWDLMcQwFgVW0CDXq
+9z5dsTa3vVJHsD7aUAtDd8TIECi1QmsknXZPEN9kyCYLN1b4+THk8NPw8lfeMA44
+WBZx2UHH2lrrPqfxaKVb5Hg=
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>hbsp-test.ad.hb.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=hbsp-test.ad.hb.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIID/TCCAmWgAwIBAgIJAL9+yfqa7IrTMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV
+BAMTEmhic3AtdGVzdC5hZC5oYi5zZTAeFw0xODA4MTUxMDAzMDNaFw0yODA4MTIx
+MDAzMDNaMB0xGzAZBgNVBAMTEmhic3AtdGVzdC5hZC5oYi5zZTCCAaIwDQYJKoZI
+hvcNAQEBBQADggGPADCCAYoCggGBALoOTNyoPj98HZ4b6KLXLDBYbQkngcZvvVVV
+3R51n/1lTQaX2kAUz+YQOmuMLerC5IT6jKtMbZVACvsAd+NayU8a/0LRPTWcYOb+
+PnQkfnmmkF2n2Z4QM/MxBg8h2jiJGwe7yp+lkeq45kK2nD24T9OvMRbIGk7SLmUL
+bSusKOBCH2ocdYoGgWlQRqSCxUqkZk9/SRv6+gy0o0ienBpId/XqHAZPDSuqJowd
+3MVUugg+jTB6/VFrXuAGNTDcHj21t3A9lqszaw2DeSi3od6uZavF3RRBES+UibLF
+38DPObY1Btj9UgFwtaGGpt/Fty/P1wfSEThtUtEqX8vp4aNpMt0cQrOWjtt/jS2x
+FPLD0OZWZEEPgGWIGry5jYcJyIpXZAi3O+A8zuu5ut2PmEuBREYHPAcR1GC6lwO4
+kcjf5nfa9p0+Xqu0sfUMUrkNimTAW8ZBL9Ui47J5cuK609euvzWGhpb7ZoZf8Zm0
+xbHoLjIuzgx2n9qGknooPdGMlpA4EQIDAQABo0AwPjAdBgNVHREEFjAUghJoYnNw
+LXRlc3QuYWQuaGIuc2UwHQYDVR0OBBYEFBPVp6ERIb5I5Bgw4s5kLQLl+dWvMA0G
+CSqGSIb3DQEBCwUAA4IBgQA93kI4yMEiTRsu4Wksbmy5YYl/Lt1LyGQlfr7SZ5zI
+T/aSqSMCQcPtYkCEKxM17/aoz13oiHlWNQYG4svWPXiqc2gEjXCLF1+bioh0twjA
+Yx7zR8wY8QaVDfeh7VnD8LghY7RXZqa7GF31R/AYDdZiBDTJpUAeO9jcm1rG0joa
+DwovI7x+QQnQl8ih1TUJrAoCvOhYFuwfsk6hx3p/TMQGH3u+OBTw7qI7uHJbuO+q
+/ZX/fZR7mHGf/nymkz+dcPRxwnnFejmMVNNEZOoJALsQ4pb9P5kj0Lz3uCVYRwU7
+qrL5L+3Pne1mG7tV/lslSzk4ZUYo7BYyfZvWWcSviM9NrjFbui34/6zQYQ10/Bl0
+UcEA4vIpBduB2fzrSZnW72982wC2aeHLIvDs/CajaLmjhPQnEewZkWziQ4q5q+vu
+zqdUcSW0Cpp6aNAo5dcLWlzV04thXrj8dxfYKXXYosrkQx+ltGRawbcqsEhjlp7/
+jdkRrWzWFJhSCRj04tS0Oyw=
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://konto-test.test.hb.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://konto-test.test.hb.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://konto-test.test.hb.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://konto-test.test.hb.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://konto-test.test.hb.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://konto-test.test.hb.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://konto-test.test.hb.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://konto-test.test.hb.se/Shibboleth.sso/SAML2/ECP" index="4"/>
+  </md:SPSSODescriptor>
+  <md:ContactPerson contactType="administrative">
+    <md:Company>University of Borås</md:Company>
+    <md:SurName>IT</md:SurName>
+    <md:EmailAddress>mailto:campusservice@hb.se</md:EmailAddress>
+    <md:TelephoneNumber>+46 33 435 4690</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:Company>University of Borås</md:Company>
+    <md:SurName>IT</md:SurName>
+    <md:EmailAddress>mailto:campusservice@hb.se</md:EmailAddress>
+    <md:TelephoneNumber>+46 33 435 4690</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:Company>University of Borås</md:Company>
+    <md:SurName>IT</md:SurName>
+    <md:EmailAddress>mailto:campusservice@hb.se</md:EmailAddress>
+    <md:TelephoneNumber>+46 33 435 4690</md:TelephoneNumber>
+  </md:ContactPerson>
+</md:EntityDescriptor>