diff options
-rw-r--r-- | swamid-testing-sp-1.0.mxml | 1 | ||||
-rw-r--r-- | swamid-testing/sp-t1.oru.se-shibboleth.xml | 132 |
2 files changed, 133 insertions, 0 deletions
diff --git a/swamid-testing-sp-1.0.mxml b/swamid-testing-sp-1.0.mxml index 443a247f..8fce9319 100644 --- a/swamid-testing-sp-1.0.mxml +++ b/swamid-testing-sp-1.0.mxml @@ -15,6 +15,7 @@ <xi:include href="swamid-testing/s2s.ifmsa.se-saml2-proxy_saml2_backend.xml"/> <xi:include href="swamid-testing/selfservice-test.test.hb.se-Shibboleth.xml"/> <xi:include href="swamid-testing/sesamutvf.its.uu.se-shibboleth.xml"/> + <xi:include href="swamid-testing/sp-t1.oru.se-shibboleth.xml"/> <xi:include href="swamid-testing/sp.haikom.com-saml-kph-test.xml"/> <xi:include href="swamid-testing/t0253.srv.lu.se-shibboleth.xml"/> <xi:include href="swamid-testing/test-his.hr.evry.se-shibboleth.xml"/> diff --git a/swamid-testing/sp-t1.oru.se-shibboleth.xml b/swamid-testing/sp-t1.oru.se-shibboleth.xml new file mode 100644 index 00000000..d0a53be0 --- /dev/null +++ b/swamid-testing/sp-t1.oru.se-shibboleth.xml @@ -0,0 +1,132 @@ +<?xml version="1.0" encoding="UTF-8"?> +<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://sp-t1.oru.se/shibboleth"> + <md:Extensions> + <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2022-12-08T08:16:15Z"> + <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy> + </mdrpi:RegistrationInfo> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/> + <mdattr:EntityAttributes> + <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> + <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue> + <samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue> + </samla:Attribute> + </mdattr:EntityAttributes> + </md:Extensions> + <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> + <md:Extensions> + <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp-t1.oru.se/Shibboleth.sso/DS/Login"/> + <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sp-t1.oru.se/Shibboleth.sso/DS/Login" index="1"/> + <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp-t1.oru.se/Shibboleth.sso/Login-AL2"/> + <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp-t1.oru.se/Shibboleth.sso/WAYF/idp.antagning.se"/> + <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp-t1.oru.se/Shibboleth.sso/WAYF/idp.test.antagning.se"/> + <mdui:UIInfo> + <mdui:Description xml:lang="en">Test system for Central webservice for Örebro University. The system is handling student activation, re-enrolls students and registers existing and new student accounts aswell as act as intermediary for password changes. EduID is used to validate AL2 accounts.</mdui:Description> + <mdui:Description xml:lang="sv">Testsystem för Central webbtjänst för Örebro universitet. Systemet aktiverar, återaktiverar och kursregistrerar nya och befintliga studentkonton samt är ombudssystem för lösenordsbyten. EduID används för att validera AL2-konton.</mdui:Description> + <mdui:DisplayName xml:lang="en">Central webservice for Örebro University</mdui:DisplayName> + <mdui:DisplayName xml:lang="sv">Central webbtjänst för Örebro universitet</mdui:DisplayName> + <mdui:InformationURL xml:lang="en">https://www.oru.se/utbildning/jag-ar-student/mina-studier/registrering/transfer-of-personal-data-to-the-central-webservice-for-orebro-university-in-connection-with-federated-login-privacy-policy</mdui:InformationURL> + <mdui:InformationURL xml:lang="sv">https://www.oru.se/utbildning/jag-ar-student/mina-studier/registrering/transfer-of-personal-data-to-the-central-webservice-for-orebro-university-in-connection-with-federated-login-privacy-policy</mdui:InformationURL> + <mdui:PrivacyStatementURL xml:lang="en">https://www.oru.se/utbildning/jag-ar-student/mina-studier/registrering/transfer-of-personal-data-to-the-central-webservice-for-orebro-university-in-connection-with-federated-login-privacy-policy</mdui:PrivacyStatementURL> + <mdui:PrivacyStatementURL xml:lang="sv">https://www.oru.se/utbildning/jag-ar-student/mina-studier/registrering/transfer-of-personal-data-to-the-central-webservice-for-orebro-university-in-connection-with-federated-login-privacy-policy</mdui:PrivacyStatementURL> + </mdui:UIInfo> + </md:Extensions> + <md:KeyDescriptor> + <ds:KeyInfo> + <ds:KeyName>sp-t1.oru.se</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>emailAddress=itsupport@oru.se,CN=sp-t1.oru.se,O=Internet Widgits Pty Ltd,ST=Some-State,C=SE</ds:X509SubjectName> + <ds:X509Certificate>MIIFgTCCA2kCFAngqMeO4J95JnZRbmafUPwPXuGUMA0GCSqGSIb3DQEBCwUAMH0x +CzAJBgNVBAYTAlNFMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRl +cm5ldCBXaWRnaXRzIFB0eSBMdGQxFTATBgNVBAMMDHNwLXQxLm9ydS5zZTEfMB0G +CSqGSIb3DQEJARYQaXRzdXBwb3J0QG9ydS5zZTAeFw0yMjEyMDgxMjI1NTZaFw0z +MjEyMDUxMjI1NTZaMH0xCzAJBgNVBAYTAlNFMRMwEQYDVQQIDApTb21lLVN0YXRl +MSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxFTATBgNVBAMMDHNw +LXQxLm9ydS5zZTEfMB0GCSqGSIb3DQEJARYQaXRzdXBwb3J0QG9ydS5zZTCCAiIw +DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALblMVqXAHXgQlrzB10nF8lbQVV/ +xDXAOQI1+l9C7gXUyGNHNja4ffvYCHIy1xXH+JVn4OC5mth0Ge3NW3yCy9m9JJZS +vuFhF6+QAmOYShEDWOipxPcQGyAAa97BQwl68W3Z8kev32Wfz+bDOhFRUIPy4BKI +L9juLVT7dj9wBMQ0iVP3bBdtPXVCT1H8rEJob1Y4bv1eZyroh+zlGtsDm/tTCBYa +gRTxOWNfRF4MD3FxFLywtt4Mw4R4qn6Gk528Uq7dbRLqZYHuIR3wEargQVkP1Lwe +nmflyCgrmTzo5wZeUzczn3CSQWFDhMLSm2lazSurBbJ2Xz/VWxgcPciXod8gZNva +Htt5iLJ8IGx6hlEtHS0ZreZKAAOVPvEIY/fGDdaoKbOPTrW+Q6BiEythx6m+vZNO +5zFBWfzjs4Q8fP3NcrVeC9mhOkuCwQlylhX7m5nA2ZGh8y5lW7FqfFaFXV9WZf6t +Cjm8Z4HhN/aLUGv9shJhmTD0h8wH23cROwcUZWxuUxdKHIp8QXfQMZ6YA1Yg1csn +W+nAm2AcinpWSN4qrMQKLou9PO3sA09xOYH3nG7lsBiPpPgsIKyw3vWm1aL3mZRe +v7LKVj4QTicMeWWDm0h/BS9UkFcdyv0egKeqXNqPwbij30xvx+CSHRF6iCDvrppH +qEudPiAgcQf+m/t9AgMBAAEwDQYJKoZIhvcNAQELBQADggIBAGCj68DPtOSW264C +W2pe2Pb53Kh5WUArfx0ATU2OGoqpRqQBc/iJo0R+OLD4MEMoTFd8/OxcRLfzbpp+ +6uqOus9to+OjVL+LtwugvJiGiR20XO21Qe8RiL1r26LB5Y24CJzZIJLS0iTfqTEU +fei04P8/H9fTjCThmqdDqcFSIjVtIOwTC5DCPXrnZEhyd9CFb3qv50EpZ3Kr+ZdT +L3WyM1FwIfxopCutU1LT+rOJnY6iJxg8yaBUdo7TkAIo4APHDGXdvssUVHRBfz/v +FWBf3UWKFNC8lepzebqAIFu5Y7t+AH7YImtSprCQJhGzNvYEaAj1ocgEDKtC/Hyi +Db3Y/e0cN8qLkXx9Vq5v4zDB3rxU8JvIAw3Elc2/q3ZpshLDqv09mls4hXaoIlxP +Px+jBLmxtheCricR2/7Y/w2B5Oq8+cXxatPXP60AZT8fJzbi2E6zp9Aw8bWMF2o/ +MXpmN0ySI//P+P7SwtlEP0Bvo3/sihr686nc9jo9rah1/bzKU+cEeXse5DvVkpO5 +wFaTfWRFJKRnZ9s+5OJD6ZGrYtaqnPce4teig4W/j8tFNKBvcXuntCMAG+YQG1lb +xwmNo3p8zfmooR7GfgwK9VbAkU5K/HFVyJk7+GT7LKbnvw65LzUOF751o4qZP57W +kbqIaURF3orLGDpBJ2m+KaMri5Jv</ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/> + </md:KeyDescriptor> + <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp-t1.oru.se/Shibboleth.sso/Artifact/SOAP" index="1"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp-t1.oru.se/Shibboleth.sso/SLO/SOAP"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp-t1.oru.se/Shibboleth.sso/SLO/Redirect"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp-t1.oru.se/Shibboleth.sso/SLO/POST"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp-t1.oru.se/Shibboleth.sso/SLO/Artifact"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp-t1.oru.se/Shibboleth.sso/SAML2/POST" index="1"/> + <md:AttributeConsumingService index="1"> + <md:ServiceName xml:lang="en">Central webservice for Örebro University</md:ServiceName> + <md:ServiceName xml:lang="sv">Central webbtjänst för Örebro universitet</md:ServiceName> + <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + </md:AttributeConsumingService> + </md:SPSSODescriptor> + <md:Organization> + <md:OrganizationName xml:lang="en">Örebro University</md:OrganizationName> + <md:OrganizationName xml:lang="sv">Örebro universitet</md:OrganizationName> + <md:OrganizationDisplayName xml:lang="en">Örebro University</md:OrganizationDisplayName> + <md:OrganizationDisplayName xml:lang="sv">Örebro universitet</md:OrganizationDisplayName> + <md:OrganizationURL xml:lang="en">https://www.oru.se/</md:OrganizationURL> + <md:OrganizationURL xml:lang="sv">https://www.oru.se/</md:OrganizationURL> + </md:Organization> + <md:ContactPerson contactType="administrative"> + <md:SurName>IT-support</md:SurName> + <md:EmailAddress>mailto:itsupport@oru.se</md:EmailAddress> + </md:ContactPerson> + <md:ContactPerson contactType="technical"> + <md:SurName>IT-support</md:SurName> + <md:EmailAddress>mailto:itsupport@oru.se</md:EmailAddress> + <md:TelephoneNumber>+46 19 303166</md:TelephoneNumber> + </md:ContactPerson> + <md:ContactPerson contactType="support"> + <md:EmailAddress>mailto:itsupport@oru.se</md:EmailAddress> + </md:ContactPerson> + <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security"> + <md:GivenName>IT support</md:GivenName> + <md:EmailAddress>mailto:itsupport@oru.se</md:EmailAddress> + </md:ContactPerson> +</md:EntityDescriptor> |