From 78bbddefcee06caf2899c8a3f788d9f39767aa46 Mon Sep 17 00:00:00 2001
From: Björn Mattsson <bjorn@sunet.se>
Date: Mon, 3 May 2021 15:22:31 +0200
Subject: SWAMID-198, SAML iDP

---
 swamid-2.0/fs.uka.se-adfs-services-trust.xml | 32 ++++++++++++++++++++++++++++
 swamid-idp-2.0.mxml                          |  1 +
 2 files changed, 33 insertions(+)
 create mode 100644 swamid-2.0/fs.uka.se-adfs-services-trust.xml

diff --git a/swamid-2.0/fs.uka.se-adfs-services-trust.xml b/swamid-2.0/fs.uka.se-adfs-services-trust.xml
new file mode 100644
index 00000000..a6091923
--- /dev/null
+++ b/swamid-2.0/fs.uka.se-adfs-services-trust.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="http://fs.uka.se/adfs/services/trust">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <IDPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <KeyDescriptor use="encryption">
+      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
+        <X509Data>
+          <X509Certificate>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</X509Certificate>
+        </X509Data>
+      </KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
+        <X509Data>
+          <X509Certificate>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</X509Certificate>
+        </X509Data>
+      </KeyInfo>
+    </KeyDescriptor>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.uka.se/adfs/ls/"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.uka.se/adfs/ls/"/>
+    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.uka.se/adfs/ls/"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.uka.se/adfs/ls/"/>
+  </IDPSSODescriptor>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support"/>
+</md:EntityDescriptor>
diff --git a/swamid-idp-2.0.mxml b/swamid-idp-2.0.mxml
index 7fd64a04..7e43ad48 100644
--- a/swamid-idp-2.0.mxml
+++ b/swamid-idp-2.0.mxml
@@ -15,4 +15,5 @@
   <xi:include href="swamid-2.0/swamid.vr.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/fs.bth.se-adfs-services-trust.xml"/>
   <xi:include href="swamid-2.0/fs.nrm.se-adfs-services-trust.xml"/>
+  <xi:include href="swamid-2.0/fs.uka.se-adfs-services-trust.xml"/>
 </md:EntitiesDescriptor>
-- 
cgit v1.2.3