Resolves SWAMIDOPS-8501

1 files changed, 231 insertions, 0 deletions

diff --git a/swamid-2.0/login.test.it.liu.se-idp-shibboleth.xml b/swamid-2.0/login.test.it.liu.se-idp-shibboleth.xml
new file mode 100644
index 00000000..ae3e0ae3
--- /dev/null
+++ b/swamid-2.0/login.test.it.liu.se-idp-shibboleth.xml
@@ -0,0 +1,231 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://login.test.it.liu.se/idp/shibboleth">
+  <Extensions>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
+        <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
+        <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">liu.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Linköpings Universitet (TEST)</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Linköping University (TEST)</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Testidentitsutgivare för anställda och studenter vid Linköpings universitet.</mdui:Description>
+        <mdui:Description xml:lang="en">Test Identity Provider for employees and students at Linköping University.</mdui:Description>
+        <mdui:Logo height="68" width="350">https://login.test.it.liu.se/images/logo-350x68-sv.png</mdui:Logo>
+        <mdui:Logo xml:lang="sv" height="68" width="350">https://login.test.it.liu.se/images/logo-350x68-sv.png</mdui:Logo>
+        <mdui:Logo xml:lang="en" height="68" width="350">https://login.test.it.liu.se/idp/images/logo-350x68-en.png</mdui:Logo>
+      </mdui:UIInfo>
+      <mdui:DiscoHints>
+        <mdui:DomainHint>liu.se</mdui:DomainHint>
+        <mdui:IPHint>130.236.0.0/16</mdui:IPHint>
+        <mdui:IPHint>192.36.54.0/24</mdui:IPHint>
+        <mdui:IPHint>192.36.93.0/24</mdui:IPHint>
+        <mdui:IPHint>192.36.94.0/24</mdui:IPHint>
+        <mdui:IPHint>192.12.235.0/24</mdui:IPHint>
+        <mdui:IPHint>193.10.86.0/24</mdui:IPHint>
+        <mdui:IPHint>2001:6b0:17::/48</mdui:IPHint>
+        <mdui:IPHint>2001:6b0:4c::/48</mdui:IPHint>
+        <mdui:GeolocationHint>geo:58.397836,15.576008</mdui:GeolocationHint>
+        <mdui:GeolocationHint>geo:58.403479,15.622827</mdui:GeolocationHint>
+        <mdui:GeolocationHint>geo:58.589874,16.176439</mdui:GeolocationHint>
+        <mdui:GeolocationHint>geo:59.350824,18.143391</mdui:GeolocationHint>
+      </mdui:DiscoHints>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.test.it.liu.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.test.it.liu.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.test.it.liu.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.test.it.liu.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.test.it.liu.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">liu.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.test.it.liu.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.test.it.liu.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+  </AttributeAuthorityDescriptor>
+  <Organization>
+    <OrganizationName xml:lang="sv">LiU</OrganizationName>
+    <OrganizationName xml:lang="en">LiU</OrganizationName>
+    <OrganizationDisplayName xml:lang="sv">Linköpings Universitet (TEST)</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Linköping University (TEST)</OrganizationDisplayName>
+    <OrganizationURL xml:lang="sv">http://liu.se</OrganizationURL>
+    <OrganizationURL xml:lang="en">http://liu.se/en</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="administrative">
+    <Company>Linköping University</Company>
+    <SurName>LiU-IT SAML admins</SurName>
+    <EmailAddress>mailto:saml-admins@it.liu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <Company>Linköping University</Company>
+    <SurName>LiU-IT SAML admins</SurName>
+    <EmailAddress>mailto:saml-admins@it.liu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="support">
+    <Company>Linköping University</Company>
+    <SurName>LiU-IT SAML admins</SurName>
+    <EmailAddress>mailto:saml-admins@it.liu.se</EmailAddress>
+  </ContactPerson>
+</EntityDescriptor>