From 24a6b19620eddfaee360d332ba97d97677eba9d9 Mon Sep 17 00:00:00 2001
From: Björn Mattsson <Bjorn.Mattsson@bth.se>
Date: Fri, 18 Sep 2020 15:00:29 +0200
Subject: Updated Metadata for testaprisma.vr.se

---
 swamid-2.0/testaprisma.vr.se-shibboleth.xml | 90 +++++++++++++++++++----------
 1 file changed, 60 insertions(+), 30 deletions(-)

diff --git a/swamid-2.0/testaprisma.vr.se-shibboleth.xml b/swamid-2.0/testaprisma.vr.se-shibboleth.xml
index 5ae827a0..72d57790 100644
--- a/swamid-2.0/testaprisma.vr.se-shibboleth.xml
+++ b/swamid-2.0/testaprisma.vr.se-shibboleth.xml
@@ -1,8 +1,4 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<!--
-This is example metadata only. Do *NOT* supply it as is without review,
-and do *NOT* provide it in real time to your partners.
- -->
 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://testaprisma.vr.se/shibboleth">
   <md:Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
@@ -26,12 +22,11 @@ and do *NOT* provide it in real time to your partners.
     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
       <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
-        <samla:AttributeValue>http://www.swamid.se/category/eu-adequate-protection</samla:AttributeValue>
-        <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue>
+        <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
       </samla:Attribute>
     </mdattr:EntityAttributes>
   </md:Extensions>
-  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
       <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://testaprisma.vr.se/Shibboleth.sso/Login"/>
       <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://testaprisma.vr.se/Shibboleth.sso/Login" index="1"/>
@@ -42,27 +37,64 @@ and do *NOT* provide it in real time to your partners.
         <mdui:Description xml:lang="en">Prisma is a joint portal used by several research funders.</mdui:Description>
       </mdui:UIInfo>
     </md:Extensions>
-    <md:KeyDescriptor>
+    <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
-        <ds:KeyName>testaprisma.vr.se</ds:KeyName>
+        <ds:KeyName>paportalweb1.ad.vr.se</ds:KeyName>
         <ds:X509Data>
-          <ds:X509SubjectName>CN=testaprisma.vr.se</ds:X509SubjectName>
-          <ds:X509Certificate>MIIC+jCCAeKgAwIBAgIJALyDb0U/kwgyMA0GCSqGSIb3DQEBBQUAMBwxGjAYBgNV
-BAMTEXRlc3RhcHJpc21hLnZyLnNlMB4XDTE0MDUwMjA4MzYwOFoXDTI0MDQyOTA4
-MzYwOFowHDEaMBgGA1UEAxMRdGVzdGFwcmlzbWEudnIuc2UwggEiMA0GCSqGSIb3
-DQEBAQUAA4IBDwAwggEKAoIBAQC6ojfwiDlOFQMYd/ENAcVUaW3YQ1k1L+JlE81K
-Z8ZZh796aWxwwVisbmZqBek/H6eNWpxLR//D77YEx8TwdmMzDuB9RbNLsbp28uu6
-UssH7qVUIdw5nnpEAywK+NGsLJbVEhrZerp8ydpAu5Qj9Th0WIiLThXiXc/9WH4S
-VeEkHD22LI1FjsgXQjlcVxyvyIDlHgnkzQmrUfwAtyVY67ASFEsy4SkJAeuGzi2I
-vMPrc938LPUANRHtJrECcbBUsmnpZBeU24DBdR5rYLL1BPjYrsWkyrHVciP/zT4j
-N+fvnJC1I8NflYhtdxQx2nJbHiNw1mvFt3jsAs6eeaLpwEbHAgMBAAGjPzA9MBwG
-A1UdEQQVMBOCEXRlc3RhcHJpc21hLnZyLnNlMB0GA1UdDgQWBBRZtyMF+9cE8Bgi
-ypEcHApzkfy4CTANBgkqhkiG9w0BAQUFAAOCAQEAdruGJJ79YxJMkORE7Li8jATg
-s2+bU8dnTEDNls2RBfRYKlYHQg+mjtyYYdZR7qTy0aJibwofgo6ieXdX6Jg5eMU9
-/+93xCFYTPEofWj9pZy5BDx6AvxyhgQ9XjtdsMDphGMRoWTc92BGdNjAAw/Oag75
-H9PjoorE61MIqluiO6Pb/W+bE2mYgeIWsqsutJQfa6Duk9UjnVVYAMspkRyQ9Z0f
-JeN4ASzWWgxCEmOjT+bj6VFvnRwPDOlTi7paqdpasPoxKVSx/S/4bgpH23vNtu9b
-Dy3oscht7rhlGhTsIsDulx5tPZY9ZyOVoZ6d6RQxvIwExf5Tt7QW1w0i0Pb9xA==
+          <ds:X509SubjectName>CN=paportalweb1.ad.vr.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIEETCCAnmgAwIBAgIUB0IwVVanzUEr7mgTM1TrwM7ViREwDQYJKoZIhvcNAQEL
+BQAwIDEeMBwGA1UEAxMVcGFwb3J0YWx3ZWIxLmFkLnZyLnNlMB4XDTIwMDkxODEx
+MzgzM1oXDTMwMDkxNjExMzgzM1owIDEeMBwGA1UEAxMVcGFwb3J0YWx3ZWIxLmFk
+LnZyLnNlMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAyVTaXAMhiiWh
+HAHdXQjeKalwxShtBF4fmX8KBENlQScaq4TbV+w3LD5Py9X972IGMYlgdG8q5/1J
+5ZOcoIoip8bndQIn6N7UzLNnmayY6HDq4Vhxd4SKun143SwG8RUdOCQvtdnRA6KV
+chAiQNrN7IiPb+GzHL9mG0+UbrnBHPgnVriidP4PtFsCjAoBqcPx4uKBVOwtwbA0
+rzuDMwQyg4UWg1le9Ory5ayzMLpToLoJbVBnkX4qiO23iqZ2l86iCKvBYrMXKEr5
+oBOpfQKn2xwo5FyQA6mj21AS2IGhVztAheC7QeYpHhlS6PVRE4XaIPIIKv2h7gux
+SJPxRQ/O72c2+y0hLubLxwsXr82nfrBXtpZ69NlOzZ3vGEPtSmM/73F8DocW0dY8
+L8f+LCvWSThuNsY8cQtU9KhPt7okog6ZAA7LpkgksWkPAS6dI+1IYW4XjNWTHebf
+MWOk4mgeb39y5B+LEOAb8zNu4eofoMCtB7qqJYyUtNP4gMj1l16xAgMBAAGjQzBB
+MCAGA1UdEQQZMBeCFXBhcG9ydGFsd2ViMS5hZC52ci5zZTAdBgNVHQ4EFgQUE2jU
+pRb9gVLYHVPAd698Gm90EnwwDQYJKoZIhvcNAQELBQADggGBAKZiH0gWI2dbuucR
+8tXvygire/B+thimNy4mpFHM13dlocUfMefq0SDuMbJ491skGnO1Hzi+kDVaq+P/
+iESv3SWCGkj3ob2qzY7yEWuRKG8fv5b2fRxvytzckKwfZHAvsu2+IQ7uUJh1bp3u
+Y+p3gH1wXdHrQQ9r8+qsnz/9DtiYbv5S4M0o7KD5aCipc9pcubvAGm16GkpHVX9e
+035VxW0Lac57NhzjInsyS6F+c1Zyc8hQaGkHgqM8Om3YVmE8vUeEb2enDdCjCNkt
+309clZoPDNDvdzhYislyPEHH7nXtXikADplqpKcLUiTqLcviWJbmStE+EDCajcvv
+aTbofC5nhsPqeRfpeMuI1Q+HRAyevgMdqkO5cL5Fkc3yKRQQC8y4CqpQqo3eHluV
+wHLl+6kOqGPXaX8QtYLM9I74UZUqPaUQ22CKvNU9QeCSJD5/kVHLziwffOzehsM4
+cTI3nzx6Q674+oEzvKloeGJxD8+1bYIg2QxSwgegso4F/00/Cw==
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>paportalweb1.ad.vr.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=paportalweb1.ad.vr.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIEETCCAnmgAwIBAgIUTySP/hfK2w7NjcQySKEnUV+rLWgwDQYJKoZIhvcNAQEL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 </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
@@ -82,9 +114,7 @@ Dy3oscht7rhlGhTsIsDulx5tPZY9ZyOVoZ6d6RQxvIwExf5Tt7QW1w0i0Pb9xA==
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testaprisma.vr.se/Shibboleth.sso/SLO/POST"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://testaprisma.vr.se/Shibboleth.sso/SLO/Artifact"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML2/POST" index="1"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML2/Artifact" index="2"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML2/ECP" index="3"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML/POST" index="4"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML/Artifact" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://testaprisma.vr.se/Shibboleth.sso/SAML2/ECP" index="4"/>
   </md:SPSSODescriptor>
 </md:EntityDescriptor>
-- 
cgit v1.2.3