diff options
| -rw-r--r-- | swamid-2.0/antagningsp.slu.se-shibboleth.xml | 141 | ||||
| -rw-r--r-- | swamid-sp-2.0.mxml | 1 |
2 files changed, 142 insertions, 0 deletions
diff --git a/swamid-2.0/antagningsp.slu.se-shibboleth.xml b/swamid-2.0/antagningsp.slu.se-shibboleth.xml new file mode 100644 index 00000000..97d37675 --- /dev/null +++ b/swamid-2.0/antagningsp.slu.se-shibboleth.xml @@ -0,0 +1,141 @@ +<?xml version="1.0" encoding="UTF-8"?> +<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://antagningsp.slu.se/shibboleth"> + <md:Extensions> + <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/"> + <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy> + </mdrpi:RegistrationInfo> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/> + <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"> + <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category"> + <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue> + </samla:Attribute> + </mdattr:EntityAttributes> + </md:Extensions> + <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> + <md:Extensions> + <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://antagningsp.slu.se/Shibboleth.sso/Login"/> + <mdui:UIInfo> + <mdui:DisplayName xml:lang="en">Idportal</mdui:DisplayName> + <mdui:DisplayName xml:lang="sv">Idportal</mdui:DisplayName> + <mdui:Description xml:lang="en">Institute’s streaming service.</mdui:Description> + <mdui:Description xml:lang="sv">Tjänst för att låta studenter hämta ut konto och bekräfta sin identitet via antagning.se</mdui:Description> + <mdui:Description xml:lang="en">Service allowing students to activate their account and confirm identity using antagning.se</mdui:Description> + <mdui:PrivacyStatementURL xml:lang="en">http://antagningsp.slu.se:8080/</mdui:PrivacyStatementURL> + </mdui:UIInfo> + </md:Extensions> + <md:KeyDescriptor use="signing"> + <ds:KeyInfo> + <ds:KeyName>antagningsp.slu.se</ds:KeyName> + <ds:KeyName>https://antagningsp.slu.se/shibboleth</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=antagningsp.slu.se</ds:X509SubjectName> + <ds:X509Certificate>MIIELzCCApegAwIBAgIUaU6aKSTLFP8+ri83HUhKT+PyBj0wDQYJKoZIhvcNAQEL +BQAwHTEbMBkGA1UEAxMSYW50YWduaW5nc3Auc2x1LnNlMB4XDTIwMDkwODA4NTg1 +MFoXDTMwMDkwNjA4NTg1MFowHTEbMBkGA1UEAxMSYW50YWduaW5nc3Auc2x1LnNl +MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAude2kaF122FLIUsl03kA +9e02MI80TL8qVbI0nauJApRjIfU9vWBLSCOXSfDwaZRz1eTlr0tZeixAe4st591/ +LDmFS/IZqMCTPxovaMzCAuRzC6r4beVXOct6YpLl51cu5tk5Tt9dO39eMymQeIJ9 +lbTmfDfG9jR2Ch1rOFkRibr5aTUNNNyGluWJx9mfradmtlulsgQdnXGiSNukTjbT +bdz3k/sGD8xVYgjAeGb3l6ZrKOwhr4JFDc3ZD1XIUz4aYhmZVRB2Eb73x2QoAgMh +6pdECa++QQDQeJlsWbgYMF21G9YeYNnRkln3aJ0MrHPE6M0bhaMGr76YqlBKIlzV +NxxuFoIzCUFnC9OX3shoxBt4Ri8/V4MAhzY8raMAa1q9K3W/vdCcWd83Crx1/toV +ATsXPERpR+/5XPPKSDUzj0k1xOsPp2UJS/19ORwx4Qgr+GJhJqan+Zit18JBIBjA +Omj78GPGEo1PHVWZ29qbHreKQ6XhDinaMdSY3DnyYLSPAgMBAAGjZzBlMEQGA1Ud +EQQ9MDuCEmFudGFnbmluZ3NwLnNsdS5zZYYlaHR0cHM6Ly9hbnRhZ25pbmdzcC5z +bHUuc2Uvc2hpYmJvbGV0aDAdBgNVHQ4EFgQUGUiYKFSqxlTxO4Fs+I7PWb4Z8EIw +DQYJKoZIhvcNAQELBQADggGBABI0EQ6ZlqsslK9gTbdysyzIkcd+V633L5VeW+po +mQ7dUjFH5Qh8guX6fQpuP+Ok4IcG58hDRSWNyE5dW8UybH7Z7Nfx8N0SgODvGvOM +xlOaEotNnLPY26WHwGQPhySMRedyZ4QecTCOvCw8McqQB+lwogKYClDkyNyEM2p+ +Ml0iZLpjGnKVbDZipV7C1Q04NwYXNfpnFWfa74ckIvGS1okuvYr4HBZZ1zkFJBN7 +wwnr9rOGvsjaVjpZXhHgEnMMih24xWrQY7X92gNQbE+Q7Bpf6MUkj++RRNK18S8n +Ettta6Dy31GVC8RfYXnC4+/yLmgio9wO/+ywYXqe5CT/AOQ26ffZX6ERwqWF64ul +07EUxTxGu+A88HQKi+mrwTSgMBGd01AKnVFFvBSj/ssVyHbhEo5zEb+MWUzLb/IQ +vT7pSFPTG7yc8weByj+3EKhdLdHzZPTITS0FgfK8JLyySJ1+TB10yxWKaDl4r9ai +Sys6DC8zuy+Rqq8KEvCXxXCAqg== +</ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + </md:KeyDescriptor> + <md:KeyDescriptor use="encryption"> + <ds:KeyInfo> + <ds:KeyName>antagningsp.slu.se</ds:KeyName> + <ds:KeyName>https://antagningsp.slu.se/shibboleth</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=antagningsp.slu.se</ds:X509SubjectName> + <ds:X509Certificate>MIIELzCCApegAwIBAgIUW4gJpIaMGCwSvc6eo4zK5oW6PkIwDQYJKoZIhvcNAQEL +BQAwHTEbMBkGA1UEAxMSYW50YWduaW5nc3Auc2x1LnNlMB4XDTIwMDkwODA4NTgy +MloXDTMwMDkwNjA4NTgyMlowHTEbMBkGA1UEAxMSYW50YWduaW5nc3Auc2x1LnNl +MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmxvWd4ysbzwJ6FySIZeA +EIKL/wPuFkH/BbIfgZa3puoD+GsexzjtE2g3nXMUh00kiSSIDLfZgG4sGks6fwgV +7i+Hps++43TiNEqvhnHtjcXLmqkRajPBqrn++ZLSgirz2hhxgBA4BijSInDDkK1N +NykbIMzF5crYlf+RtaaWPY9K4S3YkrXVZYFOfTmGYRoh25X45d4Kf2dlJhtzqMqD +YLVTvagHUo7nIzPbJpojweCw1Ol4AHyWxRTl8xCKfHjRmaQDxRGV7d8ZP+jK4LOH +wGxeduUrp3jLT7xdlkVxF67xzweVdkNqrm57Fqev8894kcn5uNaCJYbDq8pywjrj +Q1l8rOA2xCEEfMpuc1c6hSQIW1PMvPG2FotQF5rKh1nqSTV26eMO/Yn/uw5kGHMc +xoQfaJQMkGTWMYsTXkn5BV/AHl/I1VsCeJpD5RQlofnHC3zs/n76e8Ot+gZEcHrA +n0/9rC68aiBUfwNn/+LX+IRvP0nKmcy8ScrFEw/7X3iJAgMBAAGjZzBlMEQGA1Ud +EQQ9MDuCEmFudGFnbmluZ3NwLnNsdS5zZYYlaHR0cHM6Ly9hbnRhZ25pbmdzcC5z +bHUuc2Uvc2hpYmJvbGV0aDAdBgNVHQ4EFgQUeMeYs2bbG4bNyN+hRm3SckCwX70w +DQYJKoZIhvcNAQELBQADggGBACRUx6+QZtoWQqSd856lqLuwmYAqAgcKgH+u9vsO +hxObzcQcklSdH+tzcLzN3FQo6/XdHFoKAmk3/QE65ESaqGYPMK5afJ+GPrds/tZF +mC2Hzy8svGf2SZqgLjhuZdnhei99gZQEWIiy5sUQ7Rs990DdxP8mgCwZNV1coeW+ +kQF+qJoRsCM+k/LcAVChT3Fd0jlY/8KSvhdrujhcqe2SUAWXoUTvQJp4q+DFJiO+ +L29/RvQCOPUCgJLvB8/tQpU+c9wplt1PQ2scQkJ3X2v3tli08JoCcbjDAbScDWhV +fZ2nuizjh7z10yFM6rMBFYllhHugeVcwpFoBFcEaIqao2el0SpkTkeG99blEnhEu +H8lIfgeTWRp6gdKR6h5ugh29nzfFVk4zr12/FH0vEoS2Qu3neN/e2Gamv2sVJuyj +Z/xuOU4WI/QoMtlXNMqje7/OTQ2zgCOX8glVBobWFDUih6ekQhlHk69Jg3DkAiLq +mx63m0i9K6gqC0HKdscaDXHDWg== +</ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/> + </md:KeyDescriptor> + <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://antagningsp.slu.se/Shibboleth.sso/Artifact/SOAP" index="1"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://antagningsp.slu.se/Shibboleth.sso/SLO/SOAP"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://antagningsp.slu.se/Shibboleth.sso/SLO/Redirect"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://antagningsp.slu.se/Shibboleth.sso/SLO/POST"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://antagningsp.slu.se/Shibboleth.sso/SLO/Artifact"/> + <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://antagningsp.slu.se/Shibboleth.sso/NIM/SOAP"/> + <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://antagningsp.slu.se/Shibboleth.sso/NIM/Redirect"/> + <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://antagningsp.slu.se/Shibboleth.sso/NIM/POST"/> + <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://antagningsp.slu.se/Shibboleth.sso/NIM/Artifact"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://antagningsp.slu.se/Shibboleth.sso/SAML2/POST" index="1"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://antagningsp.slu.se/Shibboleth.sso/SAML2/Artifact" index="2"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://antagningsp.slu.se/Shibboleth.sso/SAML2/ECP" index="3"/> + <md:AttributeConsumingService index="1"> + <md:ServiceName xml:lang="en">Release norEduPersonNIN</md:ServiceName> + <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + </md:AttributeConsumingService> + </md:SPSSODescriptor> + <md:Organization> + <md:OrganizationName xml:lang="en">SLU</md:OrganizationName> + <md:OrganizationDisplayName xml:lang="en">SLU</md:OrganizationDisplayName> + <md:OrganizationURL xml:lang="en">https://www.slu.se/</md:OrganizationURL> + </md:Organization> + <md:ContactPerson contactType="technical"> + <md:EmailAddress>mailto:IT-stod@slu.se</md:EmailAddress> + </md:ContactPerson> +</md:EntityDescriptor> diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml index cb8f755a..5cbc87de 100644 --- a/swamid-sp-2.0.mxml +++ b/swamid-sp-2.0.mxml @@ -645,4 +645,5 @@ <xi:include href="swamid-2.0/permit-eu.caleaccess.com.xml"/> <xi:include href="swamid-2.0/expertklient.antagning.se-ecs-sp.xml"/> <xi:include href="swamid-2.0/gitlab.hird.humlab.umu.se.xml"/> + <xi:include href="swamid-2.0/antagningsp.slu.se-shibboleth.xml"/> </md:EntitiesDescriptor> |