1 files changed, 119 insertions, 6 deletions
diff --git a/swamid-interfederations-1.0/idp.tut.fi.xml b/swamid-interfederations-1.0/idp.tut.fi.xml
index 409b20ea..dd7e91d3 100644
--- a/swamid-interfederations-1.0/idp.tut.fi.xml
+++ b/swamid-interfederations-1.0/idp.tut.fi.xml
@@ -1,30 +1,138 @@
 <?xml version="1.0"?>
-<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.tut.fi/shibboleth2">
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp.tut.fi/shibboleth2">
   <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
+      <shibmd:Scope regexp="false">tut.fi</shibmd:Scope>
       <saml:Attribute Name="tags">
         <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">kalmar</saml:AttributeValue>
         <saml:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">finland</saml:AttributeValue>
       </saml:Attribute>
-      <shibmd:Scope regexp="false">tut.fi</shibmd:Scope>
     </md:Extensions>
-    <md:KeyDescriptor use="signing">
+    <md:KeyDescriptor>
       <ds:KeyInfo>
         <ds:X509Data>
-          <ds:X509Certificate>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</ds:X509Certificate>
+          <ds:X509Certificate>MIIDizCCAnOgAwIBAgIRAOyX/1lkhpgnjDFpLHgH67MwDQYJKoZIhvcNAQEFBQAw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=</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
     </md:KeyDescriptor>
-    <md:KeyDescriptor use="encryption">
+    <md:KeyDescriptor>
       <ds:KeyInfo>
         <ds:X509Data>
-          <ds:X509Certificate>MIIDizCCAnOgAwIBAgIRAOyX/1lkhpgnjDFpLHgH67MwDQYJKoZIhvcNAQEFBQAwOTELMAkGA1UEBhMCRkkxDzANBgNVBAoTBlNvbmVyYTEZMBcGA1UEAxMQU29uZXJhIENsYXNzMiBDQTAeFw0wOTAyMDgxODA0NDdaFw0xMjAyMDgxODA0NDdaMGUxCzAJBgNVBAYTAkZJMSkwJwYDVQQKEyBUYW1wZXJlIFVuaXZlcnNpdHkgb2YgVGVjaG5vbG9neTEWMBQGA1UECxMNSVQgTWFuYWdlbWVudDETMBEGA1UEAxMKaWRwLnR1dC5maTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAx5sOPnZgQ9bIv5Aqz+OPPGLHQjB4K/BtOETr0RqhzIXrr1nskyZCQpWjsFDbA+LpJnBcpwRYlOwcP+t0gZINU+YTb384zkacoerfDgzUoivnzWzuQWv9YD4yv4yLQVt2fxyx21ieqOLRAIiixJZNYvf7+/y0bF7fwyLm1mBf2/cCAwEAAaOB5TCB4jATBgNVHSMEDDAKgAhKoKpYhNNePDAZBgNVHSAEEjAQMA4GDCsGAQQBgg8CAwEBAjByBgNVHR8EazBpMGegZaBjhmFsZGFwOi8vMTk0LjI1Mi4xMjQuMjQxOjM4OS9jbj1Tb25lcmElMjBDbGFzczIlMjBDQSxvPVNvbmVyYSxjPUZJP2NlcnRpZmljYXRlcmV2b2NhdGlvbmxpc3Q7YmluYXJ5MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUrtABwdJMhX17Z4QmhDVPOEOBJLowDQYJKoZIhvcNAQEFBQADggEBAGmdFaeRnQ3DWzfxLp7rG6OGBL/o7ynsxpNNNDwjI4Gk2kmOexYkFfGvtXuEmuXwO9JuTby+yi0Jn576uU6xaDCtpChNbipPEKD+SY1thhaNvcXosUJI+eyrbSNRy0KT/uMPxN43J9X5Cjj15bZpUBll75qv54V7bBEK624GmzStubY6GVrOxWG9XNae53vGXTEh6kNvkGuqCl3thZitkzLCR44WNO8DXHzQ9befkZIWt+q37Cok5b7Mm0TkGa15UodEZtel62LItWI2D1FISzjNzEnsb+kUbRGchJdb2M/D/hqQeFQCxfag7EYFy2mp9x0taM/tiQuferS6/LwiGeA=</ds:X509Certificate>
+          <ds:X509Certificate>MIIEfjCCA2agAwIBAgIQWIB+VOhffDPHGuGeMVopmDANBgkqhkiG9w0BAQUFADA2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</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
     </md:KeyDescriptor>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.tut.fi/idp/profile/SAML2/Redirect/SSO"/>
     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.tut.fi/idp/profile/SAML2/POST/SSO"/>
   </md:IDPSSODescriptor>
+  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <shibmd:Scope regexp="false">tut.fi</shibmd:Scope>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIDizCCAnOgAwIBAgIRAOyX/1lkhpgnjDFpLHgH67MwDQYJKoZIhvcNAQEFBQAw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=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIEfjCCA2agAwIBAgIQWIB+VOhffDPHGuGeMVopmDANBgkqhkiG9w0BAQUFADA2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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.tut.fi:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+  </md:AttributeAuthorityDescriptor>
   <md:Organization>
     <md:OrganizationName xml:lang="fi">Tampereen teknillinen yliopisto</md:OrganizationName>
     <md:OrganizationName xml:lang="en">Tampere University of Technology</md:OrganizationName>
@@ -36,4 +144,9 @@
     <md:OrganizationURL xml:lang="en">http://www.tut.fi</md:OrganizationURL>
     <md:OrganizationURL xml:lang="sv">http://www.tut.fi</md:OrganizationURL>
   </md:Organization>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>Teemu</md:GivenName>
+    <md:SurName>Turpeinen</md:SurName>
+    <md:EmailAddress>idp-support@tut.fi</md:EmailAddress>
+  </md:ContactPerson>
 </md:EntityDescriptor>