From 317415d10e0b4576ee647a429b169ce7962eea8a Mon Sep 17 00:00:00 2001
From: Mikael Frykholm <mifr@sunet.se>
Date: Mon, 2 Oct 2023 07:51:36 +0200
Subject: SWAMID-3189: new entityID for selma migrering-admin

---
 ...ering-admin.selma7.its.uu.se-Shibboleth.sso.xml | 173 +++++++++++++++++++++
 metadata/swamid-sp-2.0.mxml                        |   1 +
 2 files changed, 174 insertions(+)
 create mode 100644 metadata/swamid-2.0/migrering-admin.selma7.its.uu.se-Shibboleth.sso.xml

diff --git a/metadata/swamid-2.0/migrering-admin.selma7.its.uu.se-Shibboleth.sso.xml b/metadata/swamid-2.0/migrering-admin.selma7.its.uu.se-Shibboleth.sso.xml
new file mode 100644
index 00000000..a48a7125
--- /dev/null
+++ b/metadata/swamid-2.0/migrering-admin.selma7.its.uu.se-Shibboleth.sso.xml
@@ -0,0 +1,173 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso">
+  <md:Extensions>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2023-09-01T07:14:55Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes>
+      <samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+        <samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/Login"/>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/DS/Login"/>
+      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/DS/Login" index="1"/>
+      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/DS-TEST/Login"/>
+      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/DS-TEST/Login" index="2"/>
+      <mdui:UIInfo>
+        <mdui:Description xml:lang="en">Selma is the university's system for managing information about courses and programmes at the Bachelor's and Master's level.</mdui:Description>
+        <mdui:Description xml:lang="sv">Selma är lärosätets utbildningsdatabas och innehåller uppgifter om våra utbildningar på grundnivå och avancerad nivå.</mdui:Description>
+        <mdui:DisplayName xml:lang="en">Selma</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">Selma</mdui:DisplayName>
+        <mdui:InformationURL xml:lang="en">https://mp.uu.se/c/perm/link?p=881104&amp;l=en</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="sv">https://mp.uu.se/c/perm/link?p=881104&amp;l=sv</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://mp.uu.se/en/web/info/undervisa/studieadm/studieadm-system/selma/personuppgifter-i-selma</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://mp.uu.se/sv/web/info/undervisa/studieadm/studieadm-system/selma/personuppgifter-i-selma</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:KeyName>migrering-admin.selma7.its.uu.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=migrering-admin.selma7.its.uu.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIFNDCCAxygAwIBAgIUNMdpZE2eqy5uCW8AGAI9MIu2doowDQYJKoZIhvcNAQEL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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>migrering-admin.selma7.its.uu.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=migrering-admin.selma7.its.uu.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIFNDCCAxygAwIBAgIUGtP9y9lxAG7P1s0ZAWFoGepKgNwwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SAML2/Artifact" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://migrering-admin.selma7.its.uu.se/Shibboleth.sso/SAML2/ECP" index="3"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Selma</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Selma</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Uppsala University</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Uppsala universitet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Uppsala University</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Uppsala universitet</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">http://www.uu.se/en/</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">http://www.uu.se/</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:Company>Uppsala universitet</md:Company>
+    <md:GivenName>IT Support</md:GivenName>
+    <md:EmailAddress>mailto:itsupport@uu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46-18-4714400</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:Company>Uppsala universitet</md:Company>
+    <md:GivenName>Operations</md:GivenName>
+    <md:EmailAddress>mailto:drift@uadm.uu.se</md:EmailAddress>
+    <md:TelephoneNumber>mailto:drift@uadm.uu.se</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>IT Support</md:GivenName>
+    <md:EmailAddress>mailto:itsupport@uu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46-18-4714400</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:GivenName>Uppsala University Computer Security Incident Response Team</md:GivenName>
+    <md:EmailAddress>mailto:security@uu.se</md:EmailAddress>
+    <md:TelephoneNumber>+46-18-4717560</md:TelephoneNumber>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/metadata/swamid-sp-2.0.mxml b/metadata/swamid-sp-2.0.mxml
index e1aa9ebc..a96f3e1a 100644
--- a/metadata/swamid-sp-2.0.mxml
+++ b/metadata/swamid-sp-2.0.mxml
@@ -255,6 +255,7 @@
   <xi:include href="swamid-2.0/mfa.release-check.swamid.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/mica.cohorts.medsci.test.uu.se-Shibboleth.sso.xml"/>
   <xi:include href="swamid-2.0/mica.cohorts.medsci.uu.se-Shibboleth.sso.xml"/>
+  <xi:include href="swamid-2.0/migrering-admin.selma7.its.uu.se-Shibboleth.sso.xml"/>
   <xi:include href="swamid-2.0/mintentateknat.kvk.uu.se-shibboleth.xml"/>
   <xi:include href="swamid-2.0/misp-saas-idp-proxy.sunet.se-sp.xml"/>
   <xi:include href="swamid-2.0/misp.cert.sunet.se-shibboleth.xml"/>
-- 
cgit v1.2.3