Resolves SWAMID-3045

1 files changed, 116 insertions, 0 deletions

diff --git a/swamid-2.0/myaccount.chalmers.se.xml b/swamid-2.0/myaccount.chalmers.se.xml
new file mode 100644
index 00000000..82a8f82b
--- /dev/null
+++ b/swamid-2.0/myaccount.chalmers.se.xml
@@ -0,0 +1,116 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://myaccount.chalmers.se">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Kontoaktivering Chalmers</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Account activation Chalmers</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Kontoaktiveringstjänst hos Chalmers</mdui:Description>
+        <mdui:Description xml:lang="en">Account activation service at Chalmers</mdui:Description>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://student.portal.chalmers.se/sv/chalmersstudier/styrdokument/Sidor/behandling-personuppgifter.aspx</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://student.portal.chalmers.se/en/chalmersstudies/policy-documents/Pages/processing-personal-data.aspx</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://myaccount.chalmers.se/Shibboleth.sso/Login/Chalmers"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://myaccount.chalmers.se/Shibboleth.sso/Login/Chalmers-test"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://myaccount.chalmers.se/Shibboleth.sso/Login/antagning.se"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://myaccount.chalmers.se/Shibboleth.sso/Login/eduID-AL2"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://myaccount.chalmers.se/Shibboleth.sso/DS/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://myaccount.chalmers.se/Shibboleth.sso/DS/Login" index="1"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:KeyName>digkonto-prod.net.chalmers.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=digkonto-prod.net.chalmers.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIEKTCCApGgAwIBAgIUU4hQAkWPTkKav3Huv2Nf8BOsSbwwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://myaccount.chalmers.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://myaccount.chalmers.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://myaccount.chalmers.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://myaccount.chalmers.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://myaccount.chalmers.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://myaccount.chalmers.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Account activation</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Chalmers</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Chalmers</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.chalmers.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>System</md:GivenName>
+    <md:SurName>IT-avdelningen</md:SurName>
+    <md:EmailAddress>mailto:support@chalmers.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:SurName>IT-avdelningen</md:SurName>
+    <md:EmailAddress>mailto:support@chalmers.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>