diff options
author | Fredrik Åslund <fredrik.aslund@umu.se> | 2014-01-28 15:52:36 +0100 |
---|---|---|
committer | Fredrik Åslund <fredrik.aslund@umu.se> | 2014-01-28 15:52:36 +0100 |
commit | 8bd6f2138773ee46079ddb35c0ac29fa43ec6691 (patch) | |
tree | a1bd0f33f284c2e35ae0c42039c62fed20370e27 /swamid-2.0/lartorget.sll.se-shibbolet.xml | |
parent | 86bf1892bd416cc10eb1531fa0a4373a0639da81 (diff) |
hei&re added to aktivera-test.su.se
--
From: Fredrik Thulin <fredrik@thulin.net>
To: Jan Johansson <janj@su.se>
Cc: Stefan Wold <swold@sunet.se>, Jennifer Baral <jennifer.baral@su.se>, Fredrik Åslund <fredrik.aslund@umu.se>
Date: Tue, 28 Jan 2014 15:45:58 +0100
Subject: Re: Scopat attribut
On Tuesday 28 January 2014 15.15.57 Jan Johansson wrote:
> Fredrik Thulin <fredrik@thulin.net> wrote:
> > Nu är det utrullat. För piloten använder vi scope "pilot.eduid.se", för
> > vår
> > utvecklingsmiljö är det "dev.eduid.se" och vi räknar med att
> > produktionsmiljön kommer använda scope "eduid.se".
> >
> > Exempel eppn : biboz-dumav@pilot.eduid.se
>
> Hej!
>
> Tackar!
>
> Vad det verkar så får vi dock fortfarande "bara" transient-id och
> norEduPersonNin till våran SP "akivera-test.su.se".
>
> Något mer jag eller ni behöver göra?
Hej
aktivera-test.su.se har entity category
"http://www.swamid.se/category/sfs-1993-1153" och inget annat - då får man
bara transient-id och norEduPersonNIN. Jag frågade Roland Hedberg och han
säger att det ska vara så =).
Utöver det behöver ni entity category "http://www.swamid.se/category/research-and-education" och "http://www.swamid.se/category/hei-service" för att även få
eduPersonPrincipalName (och lite andra attribut på kuppen).
Jag cc:ar Fredrik Åslund så kanske han kan fixa det åt er, eftersom det bara
rör sig om swamid-testing.
Vi har inte automatisk metadata-uppdatering ännu så säg till när det är
instoppat så laddar jag om.
/Fredrik
Diffstat (limited to 'swamid-2.0/lartorget.sll.se-shibbolet.xml')
-rw-r--r-- | swamid-2.0/lartorget.sll.se-shibbolet.xml | 126 |
1 files changed, 63 insertions, 63 deletions
diff --git a/swamid-2.0/lartorget.sll.se-shibbolet.xml b/swamid-2.0/lartorget.sll.se-shibbolet.xml index e5e622fe..58d62778 100644 --- a/swamid-2.0/lartorget.sll.se-shibbolet.xml +++ b/swamid-2.0/lartorget.sll.se-shibbolet.xml @@ -1,48 +1,48 @@ -<?xml version="1.0" encoding="utf-8"?> +<?xml version="1.0" encoding="UTF-8"?> <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://lartorget.sll.se/shibboleth"> - <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"> - <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/> - <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/> - <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> - <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/> - <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> - <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/> - <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"> - <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category"> - <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue> - <samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue> - <samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue> - </samla:Attribute> - </mdattr:EntityAttributes> - </md:Extensions> - <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> - <md:Extensions> - <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://lartorget.sll.se/Shibboleth.sso/Login"/> - <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://lartorget.sll.se/Shibboleth.sso/Login" index="1"/> - <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"> - <mdui:DisplayName xml:lang="sv">Lärtorget (SLL)</mdui:DisplayName> - <mdui:DisplayName xml:lang="en">Lärtorget (SLL)</mdui:DisplayName> - <mdui:Description xml:lang="sv">Lärtorget är Stockholms läns landstings utbildningsplattform PING PONG.</mdui:Description> - <mdui:Description xml:lang="en">Lärtorget is Stockholms läns landsting's learning platform PING PONG.</mdui:Description> - <mdui:Logo height="54" width="350">https://lartorget.sll.se/pp/lookAndFeel/skins/sll_simple/images/logotype-open-web.png</mdui:Logo> - </mdui:UIInfo> - </md:Extensions> - <md:KeyDescriptor> - <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> - <ds:KeyName>curuba.pingpong.net</ds:KeyName> - <ds:X509Data> - <ds:X509SubjectName>CN=curuba.pingpong.net</ds:X509SubjectName> - <ds:X509Certificate>MIIDADCCAeigAwIBAgIJAN3d7U7ah5lIMA0GCSqGSIb3DQEBBQUAMB4xHDAaBgNV + <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/> + <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"> + <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category"> + <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue> + <samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue> + <samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue> + </samla:Attribute> + </mdattr:EntityAttributes> + </md:Extensions> + <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> + <md:Extensions> + <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://lartorget.sll.se/Shibboleth.sso/Login"/> + <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://lartorget.sll.se/Shibboleth.sso/Login" index="1"/> + <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"> + <mdui:DisplayName xml:lang="sv">Lärtorget (SLL)</mdui:DisplayName> + <mdui:DisplayName xml:lang="en">Lärtorget (SLL)</mdui:DisplayName> + <mdui:Description xml:lang="sv">Lärtorget är Stockholms läns landstings utbildningsplattform PING PONG.</mdui:Description> + <mdui:Description xml:lang="en">Lärtorget is Stockholms läns landsting's learning platform PING PONG.</mdui:Description> + <mdui:Logo height="54" width="350">https://lartorget.sll.se/pp/lookAndFeel/skins/sll_simple/images/logotype-open-web.png</mdui:Logo> + </mdui:UIInfo> + </md:Extensions> + <md:KeyDescriptor> + <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> + <ds:KeyName>curuba.pingpong.net</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=curuba.pingpong.net</ds:X509SubjectName> + <ds:X509Certificate>MIIDADCCAeigAwIBAgIJAN3d7U7ah5lIMA0GCSqGSIb3DQEBBQUAMB4xHDAaBgNV BAMTE2N1cnViYS5waW5ncG9uZy5uZXQwHhcNMTMwODI5MTMzNDQwWhcNMjMwODI3 MTMzNDQwWjAeMRwwGgYDVQQDExNjdXJ1YmEucGluZ3BvbmcubmV0MIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13Kb3lhHuodhcIiVSvKl/NZm1sccLbMZ @@ -60,23 +60,23 @@ oLfT4WULlurUQvzFckCFEEIv/ukeP393U5mxWxrmA6Rns9PEvFFz0tniXUAOWdoG ljkTH3ji5vjgzALpSGwoYsS0SRhsPkICyhrroUOAZdx6AOC181wdrahjsjrPf0F3 XFg/xw== </ds:X509Certificate> - </ds:X509Data> - </ds:KeyInfo> - <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/> - <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/> - <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/> - <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/> - <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/> - <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/> - </md:KeyDescriptor> - <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lartorget.sll.se/Shibboleth.sso/Artifact/SOAP" index="1"/> - <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/SOAP"/> - <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/Redirect"/> - <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/POST"/> - <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/Artifact"/> - <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/POST" index="1"/> - <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/> - <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/Artifact" index="3"/> - <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/ECP" index="4"/> - </md:SPSSODescriptor> + </ds:X509Data> + </ds:KeyInfo> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/> + </md:KeyDescriptor> + <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lartorget.sll.se/Shibboleth.sso/Artifact/SOAP" index="1"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/SOAP"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/Redirect"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/POST"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lartorget.sll.se/Shibboleth.sso/SLO/Artifact"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/POST" index="1"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/Artifact" index="3"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://lartorget.sll.se/Shibboleth.sso/SAML2/ECP" index="4"/> + </md:SPSSODescriptor> </md:EntityDescriptor> |