From 98e56b10a21e828cbc622822f8d8388ae4ef6c8c Mon Sep 17 00:00:00 2001
From: Paul Scott <paul.scott@kau.se>
Date: Mon, 14 Mar 2016 15:36:04 +0100
Subject: Add HiS Test IdP Shib 3

---
 swamid-2.0/idp2.his.se-idp-shibboleth.xml | 189 ++++++++++++++++++++++++++++++
 swamid-testing-idp-1.0.mxml               |   1 +
 2 files changed, 190 insertions(+)
 create mode 100644 swamid-2.0/idp2.his.se-idp-shibboleth.xml

diff --git a/swamid-2.0/idp2.his.se-idp-shibboleth.xml b/swamid-2.0/idp2.his.se-idp-shibboleth.xml
new file mode 100644
index 00000000..ee9deeb3
--- /dev/null
+++ b/swamid-2.0/idp2.his.se-idp-shibboleth.xml
@@ -0,0 +1,189 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+     This is example metadata only. Do *NOT* supply it as is without review,
+     and do *NOT* provide it in real time to your partners.
+
+     This metadata is not dynamic - it will not change as your configuration changes.
+-->
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp2.his.se/idp/shibboleth">
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">his.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">University of Skövde</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Identity Provider for University of Skövde</mdui:Description>
+        <mdui:Logo height="80" width="80">https://idp2.his.se/idp/images/ny_his_logo.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+MIIDFzCCAf+gAwIBAgIUPxI/suX3rB+fJLkvWZFXb/6RpbowDQYJKoZIhvcNAQEL
+BQAwFjEUMBIGA1UEAwwLaWRwMi5oaXMuc2UwHhcNMTYwMzE0MTA0ODA1WhcNMzYw
+MzE0MTA0ODA1WjAWMRQwEgYDVQQDDAtpZHAyLmhpcy5zZTCCASIwDQYJKoZIhvcN
+AQEBBQADggEPADCCAQoCggEBAIe16W8dFxVZClwQxBBbIuZnWnI/Mk8nH6RGx+1d
+30/E0xLJExAN9IFi8PKGoj8M+YQesVNi3CpTlMOee+w/5PBNmhTlgkidRCsxz88L
+UWbWCJpq6XVOkzoxQMOnu3YG/NpRPGflgKHD/V71Wi/+kKuy/f6/BTc9d1ZoWDV4
+W3wmVN/exxnYssd4WU21y/kOawrJg0SscPVNyZyNwlsmzwhy6iPPyqChPRHziE6z
+ikRb7ael0ocnyskMx6nQhJowo0bCNCmjoymGN+2+Z7X4Lco/zQYkojYshyrPrRQK
+9uViy2Xmzq4M616N6gp3EJmvXkZS0d6u9odhiuB3m7xb2LUCAwEAAaNdMFswHQYD
+VR0OBBYEFN5IuDJoWnyE03tiLnd+H99jsWsxMDoGA1UdEQQzMDGCC2lkcDIuaGlz
+LnNlhiJodHRwczovL2lkcDIuaGlzLnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3
+DQEBCwUAA4IBAQBoxCCTtp8z3wXzBKtZ3YZZn+XaW0UKR4Xhy0t08NJHBU3nyFNb
+xLdygJCU2GyRx+mwXAqbCe2TU4pwlNsEo0069wiFcqvvLMMMqKP4Iz2frM4qVMNv
+r+Arg5sxh87lEKnFGum8ZhJh0oL5yoj1BQgy0tnNl/HjDQ3EH/QvNnLYI9fJXFB6
+n/t3vqoVNBv37ICo/KcLmMz7VWhafZs2ORyibSCu/BQpkfJ7vV1e4y90ATXE/grI
+Xcr4ilV4pak0YQJycMVqYRB5Uuds8AoiTc4za19q4EfT988s5/lAF/vaTFz1mP6F
+lydgJ83mLCTu9Bueh30Fp3aQ64DAHbCABkgW
+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp2.his.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp2.his.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <!--
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp2.his.se/idp/profile/SAML2/Redirect/SLO"/>
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp2.his.se/idp/profile/SAML2/POST/SLO"/>
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp2.his.se:8443/idp/profile/SAML2/SOAP/SLO"/>
+        -->
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp2.his.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp2.his.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp2.his.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">his.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp2.his.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+    <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp2.his.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
+    <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->
+  </AttributeAuthorityDescriptor>
+</EntityDescriptor>
diff --git a/swamid-testing-idp-1.0.mxml b/swamid-testing-idp-1.0.mxml
index 346b6cff..932433a5 100644
--- a/swamid-testing-idp-1.0.mxml
+++ b/swamid-testing-idp-1.0.mxml
@@ -65,4 +65,5 @@
   <xi:include href="swamid-2.0/shib-test02.skolfederation.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idp2.it.gu.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/nya-00.ladok.umu.se-idp-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/idp2.his.se-idp-shibboleth.xml"/>
 </EntitiesDescriptor>
-- 
cgit v1.2.3