diff options
-rw-r--r-- | metadata/swamid-edugain/dev.edusign.sunet.se-shibboleth.xml | 158 |
1 files changed, 158 insertions, 0 deletions
diff --git a/metadata/swamid-edugain/dev.edusign.sunet.se-shibboleth.xml b/metadata/swamid-edugain/dev.edusign.sunet.se-shibboleth.xml new file mode 100644 index 00000000..fc40f575 --- /dev/null +++ b/metadata/swamid-edugain/dev.edusign.sunet.se-shibboleth.xml @@ -0,0 +1,158 @@ +<?xml version="1.0" encoding="UTF-8"?> +<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://dev.edusign.sunet.se/shibboleth"> + <md:Extensions> + <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2021-06-18T15:55:50Z"> + <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy> + </mdrpi:RegistrationInfo> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/> + <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/> + <mdattr:EntityAttributes> + <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category"> + <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue> + <samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue> + </samla:Attribute> + </mdattr:EntityAttributes> + </md:Extensions> + <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> + <md:Extensions> + <mdui:UIInfo> + <mdui:DisplayName xml:lang="sv">eduSign (Development)</mdui:DisplayName> + <mdui:DisplayName xml:lang="en">eduSign (Development)</mdui:DisplayName> + <mdui:Description xml:lang="sv">Testplats för eduSign (Development).</mdui:Description> + <mdui:Description xml:lang="en">Test site for eduSign (Development).</mdui:Description> + <mdui:InformationURL xml:lang="en">https://www.sunet.se/services/sakerhet/edusign/</mdui:InformationURL> + <mdui:InformationURL xml:lang="sv">https://www.sunet.se/services/sakerhet/edusign/</mdui:InformationURL> + <mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/info/eduSign+Privacy+Policy?showLanguage=sv_SE</mdui:PrivacyStatementURL> + <mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/info/eduSign+Privacy+Policy?showLanguage=en_GB</mdui:PrivacyStatementURL> + </mdui:UIInfo> + <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://dev.edusign.sunet.se/Shibboleth.sso/Login"/> + <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dev.edusign.sunet.se/Shibboleth.sso/Login" index="1"/> + </md:Extensions> + <md:KeyDescriptor use="signing"> + <ds:KeyInfo> + <ds:KeyName>dev.edusign.sunet.se</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=dev.edusign.sunet.se</ds:X509SubjectName> + <ds:X509Certificate>MIIEDjCCAnagAwIBAgIUHTtw0/TckaMT3p9b0yTl1MyI8k8wDQYJKoZIhvcNAQEL +BQAwHzEdMBsGA1UEAxMUZGV2LmVkdXNpZ24uc3VuZXQuc2UwHhcNMjQwMzExMDkz +NTA2WhcNMzQwMzA5MDkzNTA2WjAfMR0wGwYDVQQDExRkZXYuZWR1c2lnbi5zdW5l +dC5zZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAOH/2S1oaqb18EQ5 +a4f4KZ1EJ2zERefZXD23kmrLFHUFWRXJLk6Jm0GTlcFNRf41CVsMOszahgO6OSTI +Lak/Yo9S1+Q/dS6ScmUrjhE+QfiQzC8PdDzfgU7CaW0e9ihk6DMlJ3rl9TnXKMY4 +mBmozPF+02WwD4ld5Kol7nEliD6Y7hNjFg7amq8a81WwrrSDj2jp/MvDg2YaeC0T +/MJhCWaQu8AFo0gLNESIgOMu4BM7K+N8Jg2daj6+griW6wCOwmtXDBwlL/OKjC6j +DxrL59j6SoNQGgtO1G7h3E8B0YIw9dVC9AAbjNN2GcsHA5mMMm7350O8GyKIWMZ/ +t08Uuwvf3+M9u8GmX8ki7m2tRjq/W+g2AOn1Asi9GZk82x1GtogoUVd31SNj5Y7e +nPILC7zdW1k2CyWR2teFBN+csXcr7YBq4XJzkJLhsjEcDwvBmDm13zknHsd8SpU4 +oMoh5rtfqTBZ3AtcA/wsXdZaTVOk2pLgQraQL3YkJdNUO7iUDwIDAQABo0IwQDAf +BgNVHREEGDAWghRkZXYuZWR1c2lnbi5zdW5ldC5zZTAdBgNVHQ4EFgQUTOJV78lO +8JCh4HpFR+F6KWce0YkwDQYJKoZIhvcNAQELBQADggGBADwrIRODPVTxfJTM0A4H +fRkS47NYBC9ddEN9kHspaaRoiACmciORX2gENmDz9fUzu4EVQQJuD3CbCUod2T7m +mtOEh5HzHMFMEj3kfvRCm8hIgmhv2BJUTOseXBcTPB57aaAtBmOFKnaKXzhsoSIf +4hEJDR4g43YZ0jp2NRwkTcwMBKQFOYpJs1SmFRIQ3Ie5EhwLfpJ8HQ63aRwrHbLK +qymCZETbfppI+bY4ZOv6JKWPkBsA3o+/uKX2Ji15yH8oygYZbbEe6qkdETl7yHP8 +wxosrZlSIZ9SyflP4Vrwjc703JmkECNKs+QL2Xya7GN6/jsdDUB9vlwXB/kp7ntl +ZMM1uc+mYu6XRNxZ7b03dBb6hKivjVfS8sMJiJuFzUn4td1b++y/xB9Hj3Pl+CgE +9UYiOPHv8vZWaGvGFx7FsDe4IQ9Yo0+BJ5TmKoVA0q+28DpGfU9wdQrlllArlRb5 +pIrhAzyn5hQFLILP5ASSojA9qjdFhlGNcPVFhhTPaQKW1w==</ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + </md:KeyDescriptor> + <md:KeyDescriptor use="encryption"> + <ds:KeyInfo> + <ds:KeyName>dev.edusign.sunet.se</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=dev.edusign.sunet.se</ds:X509SubjectName> + <ds:X509Certificate>MIIEDjCCAnagAwIBAgIUHTtw0/TckaMT3p9b0yTl1MyI8k8wDQYJKoZIhvcNAQEL +BQAwHzEdMBsGA1UEAxMUZGV2LmVkdXNpZ24uc3VuZXQuc2UwHhcNMjQwMzExMDkz +NTA2WhcNMzQwMzA5MDkzNTA2WjAfMR0wGwYDVQQDExRkZXYuZWR1c2lnbi5zdW5l +dC5zZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAOH/2S1oaqb18EQ5 +a4f4KZ1EJ2zERefZXD23kmrLFHUFWRXJLk6Jm0GTlcFNRf41CVsMOszahgO6OSTI +Lak/Yo9S1+Q/dS6ScmUrjhE+QfiQzC8PdDzfgU7CaW0e9ihk6DMlJ3rl9TnXKMY4 +mBmozPF+02WwD4ld5Kol7nEliD6Y7hNjFg7amq8a81WwrrSDj2jp/MvDg2YaeC0T +/MJhCWaQu8AFo0gLNESIgOMu4BM7K+N8Jg2daj6+griW6wCOwmtXDBwlL/OKjC6j +DxrL59j6SoNQGgtO1G7h3E8B0YIw9dVC9AAbjNN2GcsHA5mMMm7350O8GyKIWMZ/ +t08Uuwvf3+M9u8GmX8ki7m2tRjq/W+g2AOn1Asi9GZk82x1GtogoUVd31SNj5Y7e +nPILC7zdW1k2CyWR2teFBN+csXcr7YBq4XJzkJLhsjEcDwvBmDm13zknHsd8SpU4 +oMoh5rtfqTBZ3AtcA/wsXdZaTVOk2pLgQraQL3YkJdNUO7iUDwIDAQABo0IwQDAf +BgNVHREEGDAWghRkZXYuZWR1c2lnbi5zdW5ldC5zZTAdBgNVHQ4EFgQUTOJV78lO +8JCh4HpFR+F6KWce0YkwDQYJKoZIhvcNAQELBQADggGBADwrIRODPVTxfJTM0A4H +fRkS47NYBC9ddEN9kHspaaRoiACmciORX2gENmDz9fUzu4EVQQJuD3CbCUod2T7m +mtOEh5HzHMFMEj3kfvRCm8hIgmhv2BJUTOseXBcTPB57aaAtBmOFKnaKXzhsoSIf +4hEJDR4g43YZ0jp2NRwkTcwMBKQFOYpJs1SmFRIQ3Ie5EhwLfpJ8HQ63aRwrHbLK +qymCZETbfppI+bY4ZOv6JKWPkBsA3o+/uKX2Ji15yH8oygYZbbEe6qkdETl7yHP8 +wxosrZlSIZ9SyflP4Vrwjc703JmkECNKs+QL2Xya7GN6/jsdDUB9vlwXB/kp7ntl +ZMM1uc+mYu6XRNxZ7b03dBb6hKivjVfS8sMJiJuFzUn4td1b++y/xB9Hj3Pl+CgE +9UYiOPHv8vZWaGvGFx7FsDe4IQ9Yo0+BJ5TmKoVA0q+28DpGfU9wdQrlllArlRb5 +pIrhAzyn5hQFLILP5ASSojA9qjdFhlGNcPVFhhTPaQKW1w==</ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/> + <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/> + </md:KeyDescriptor> + <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dev.edusign.sunet.se/Shibboleth.sso/Artifact/SOAP" index="1"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SLO/SOAP"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SLO/Redirect"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SLO/POST"/> + <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SLO/Artifact"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SAML2/POST" index="1"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SAML2/Artifact" index="3"/> + <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://dev.edusign.sunet.se/Shibboleth.sso/SAML2/ECP" index="4"/> + <md:AttributeConsumingService index="1"> + <md:ServiceName xml:lang="en">eduSign (Development)</md:ServiceName> + <md:ServiceName xml:lang="sv">eduSign (Development)</md:ServiceName> + <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="mailLocalAddress" Name="urn:oid:2.16.840.1.113730.3.1.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/> + </md:AttributeConsumingService> + </md:SPSSODescriptor> + <md:Organization> + <md:OrganizationName xml:lang="en">Sunet</md:OrganizationName> + <md:OrganizationName xml:lang="sv">Sunet</md:OrganizationName> + <md:OrganizationDisplayName xml:lang="en">Sunet</md:OrganizationDisplayName> + <md:OrganizationDisplayName xml:lang="sv">Sunet</md:OrganizationDisplayName> + <md:OrganizationURL xml:lang="en">https://sunet.se</md:OrganizationURL> + <md:OrganizationURL xml:lang="sv">https://sunet.se</md:OrganizationURL> + </md:Organization> + <md:ContactPerson contactType="technical"> + <md:GivenName>Enrique</md:GivenName> + <md:EmailAddress>mailto:enrique@cazalla.net</md:EmailAddress> + </md:ContactPerson> + <md:ContactPerson contactType="administrative"> + <md:GivenName>Enrique</md:GivenName> + <md:EmailAddress>mailto:enrique@cazalla.net</md:EmailAddress> + </md:ContactPerson> + <md:ContactPerson contactType="support"> + <md:GivenName>Enrique</md:GivenName> + <md:EmailAddress>mailto:mailto:enrique@cazalla.net</md:EmailAddress> + </md:ContactPerson> + <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security"> + <md:GivenName>Enrique</md:GivenName> + <md:EmailAddress>mailto:enrique@cazalla.net</md:EmailAddress> + </md:ContactPerson> +</md:EntityDescriptor> |