From 14eae7fa9d71f9aa6f2a4c0fb2c857148c5e93cc Mon Sep 17 00:00:00 2001
From: Leif Johansson <leifj@sunet.se>
Date: Mon, 28 Aug 2017 16:27:04 +0200
Subject: add kantara SP to swamid

---
 ...tive.org-confluence-plugins-servlet-samlsso.xml | 51 ++++++++++++++++++++++
 swamid-externals-2.0/metadata.lst                  |  2 +-
 swamid-sp-2.0.mxml                                 |  1 +
 3 files changed, 53 insertions(+), 1 deletion(-)
 create mode 100644 swamid-2.0/kantarainitiative.org-confluence-plugins-servlet-samlsso.xml

diff --git a/swamid-2.0/kantarainitiative.org-confluence-plugins-servlet-samlsso.xml b/swamid-2.0/kantarainitiative.org-confluence-plugins-servlet-samlsso.xml
new file mode 100644
index 00000000..5c7448b9
--- /dev/null
+++ b/swamid-2.0/kantarainitiative.org-confluence-plugins-servlet-samlsso.xml
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://kantarainitiative.org/confluence/plugins/servlet/samlsso">
+  <md:SPSSODescriptor WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>MIIDKDCCAhCgAwIBAgIGAV4lG7wQMA0GCSqGSIb3DQEBCwUAMFUxUzBRBgNVBAMMSlNBTUwgU2lu
+Z2xlU2lnbk9uIGNlcnRpZmljYXRlIGZvciBodHRwczovL2thbnRhcmFpbml0aWF0aXZlLm9yZy9j
+b25mbHVlbmNlMB4XDTE3MDgyNzE5MTIwOFoXDTI3MDgyNzE5MTIwOFowVTFTMFEGA1UEAwxKU0FN
+TCBTaW5nbGVTaWduT24gY2VydGlmaWNhdGUgZm9yIGh0dHBzOi8va2FudGFyYWluaXRpYXRpdmUu
+b3JnL2NvbmZsdWVuY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYi+o/GuShdvBc
+Ng+I4OSlanZFbSreyO6woEZWkP0aGcMO9BrP/Xmu1fY3qgBy48CMsSeps1YoO7JekQL91/Aj/BX8
+qVdQKArh3raI7brfd+h8+BJj7dSrNrr40tgNOfJfNEOsfmRxHTRmmyJkHFtaHbXxb+3kGtqtzoee
+qEL9DnTHu3aE/S3i2cUAIeObicU2qiGvjwdOUeA7wCMVuper9LpZdG8+NPIAO0V73LCIsiZRMH++
+U2LzaqgfKbKq9bt6kIRFa/JodPUBlvt66itmz+v7OkTIgYFNs+qRqYjIh9glpFtdW8Z8PX9LGizI
+m49D5SBs1t+fPdih2FzalP6zAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAJOCbWJdr9glMdTWKQm4
+VggzxPk8I6mGWfLnKo88q0cPgdagQ5WSYaecQBfc8doUwRXOuoyq+mt8TwQjCT4N/6ad3NhhREfL
+WUMFghUG9S3jFrGxfW9cWktM/LlkF4Wg474ycKs042Ep34R5siHx3Cw+d6pHJt5sia71GfgO4FFk
+t2X18TWpJkTIRFlgxNz+7masn+UuAv3xNZrUSYe2YtlTjqRIPBP5wrKWE01a7ZdzOP7S1UvTjiDW
+PMS4rjAWc41dsrr8CuH3t/NKbvDc9Rn6U+qLGttLcJ1Jlpw2i3fPGGJ+osSsX9+h3KUdLv9j7zJB
+8mDgzdNKONIVTEQ7YsQ=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>MIIDKDCCAhCgAwIBAgIGAV4lG7wQMA0GCSqGSIb3DQEBCwUAMFUxUzBRBgNVBAMMSlNBTUwgU2lu
+Z2xlU2lnbk9uIGNlcnRpZmljYXRlIGZvciBodHRwczovL2thbnRhcmFpbml0aWF0aXZlLm9yZy9j
+b25mbHVlbmNlMB4XDTE3MDgyNzE5MTIwOFoXDTI3MDgyNzE5MTIwOFowVTFTMFEGA1UEAwxKU0FN
+TCBTaW5nbGVTaWduT24gY2VydGlmaWNhdGUgZm9yIGh0dHBzOi8va2FudGFyYWluaXRpYXRpdmUu
+b3JnL2NvbmZsdWVuY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYi+o/GuShdvBc
+Ng+I4OSlanZFbSreyO6woEZWkP0aGcMO9BrP/Xmu1fY3qgBy48CMsSeps1YoO7JekQL91/Aj/BX8
+qVdQKArh3raI7brfd+h8+BJj7dSrNrr40tgNOfJfNEOsfmRxHTRmmyJkHFtaHbXxb+3kGtqtzoee
+qEL9DnTHu3aE/S3i2cUAIeObicU2qiGvjwdOUeA7wCMVuper9LpZdG8+NPIAO0V73LCIsiZRMH++
+U2LzaqgfKbKq9bt6kIRFa/JodPUBlvt66itmz+v7OkTIgYFNs+qRqYjIh9glpFtdW8Z8PX9LGizI
+m49D5SBs1t+fPdih2FzalP6zAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAJOCbWJdr9glMdTWKQm4
+VggzxPk8I6mGWfLnKo88q0cPgdagQ5WSYaecQBfc8doUwRXOuoyq+mt8TwQjCT4N/6ad3NhhREfL
+WUMFghUG9S3jFrGxfW9cWktM/LlkF4Wg474ycKs042Ep34R5siHx3Cw+d6pHJt5sia71GfgO4FFk
+t2X18TWpJkTIRFlgxNz+7masn+UuAv3xNZrUSYe2YtlTjqRIPBP5wrKWE01a7ZdzOP7S1UvTjiDW
+PMS4rjAWc41dsrr8CuH3t/NKbvDc9Rn6U+qLGttLcJ1Jlpw2i3fPGGJ+osSsX9+h3KUdLv9j7zJB
+8mDgzdNKONIVTEQ7YsQ=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://kantarainitiative.org/confluence/plugins/servlet/samlsso" index="0"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://kantarainitiative.org/confluence/plugins/servlet/samlsso" index="1"/>
+  </md:SPSSODescriptor>
+</md:EntityDescriptor>
diff --git a/swamid-externals-2.0/metadata.lst b/swamid-externals-2.0/metadata.lst
index 20336476..9310833c 100644
--- a/swamid-externals-2.0/metadata.lst
+++ b/swamid-externals-2.0/metadata.lst
@@ -7,5 +7,5 @@
 # Already in eduGAIN via http://mds.edugain.org
 #https://ladok3.its.umu.se/swamid-md/terena.org-sp.xml
 
-https://kantarainitiative.org/shibboleth/metadata.xml
+#https://kantarainitiative.org/shibboleth/metadata.xml
 #https://callback-test.inloggning.se/authify/metadata/?fed_name=swamidfederation e-identitet-swamid.crt
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index a820dd0b..ab73d7fd 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -664,4 +664,5 @@
   <xi:include href="swamid-2.0/timesketch.cert.sunet.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/led-jenkins.its.umu.se-securityrealm-finishlogin.xml"/>
   <xi:include href="swamid-2.0/portaluu.onricoh.se-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/kantarainitiative.org-confluence-plugins-servlet-samlsso.xml"/>
 </md:EntitiesDescriptor>
-- 
cgit v1.2.3