From a1f8cc7567103ccb932053bc8331163c893df1df Mon Sep 17 00:00:00 2001
From: Paul Scott <paul.scott@kau.se>
Date: Mon, 30 Nov 2020 12:55:24 +0000
Subject: Updates to SWAMID-3559
---
.../login.sto3.safespring.com-5000-mellon.xml | 93 ++++++++++++++++++++++
swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml | 86 ++++++++++++++++++++
.../v2.dashboard.sto1.safedc.net-5000-mellon.xml | 9 +++
swamid-sp-2.0.mxml | 2 +
4 files changed, 190 insertions(+)
create mode 100644 swamid-2.0/login.sto3.safespring.com-5000-mellon.xml
create mode 100644 swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml
diff --git a/swamid-2.0/login.sto3.safespring.com-5000-mellon.xml b/swamid-2.0/login.sto3.safespring.com-5000-mellon.xml
new file mode 100644
index 00000000..f71f4466
--- /dev/null
+++ b/swamid-2.0/login.sto3.safespring.com-5000-mellon.xml
@@ -0,0 +1,93 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://login.sto3.safespring.com:5000/mellon">
+ <md:Extensions>
+ <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+ <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+ </mdrpi:RegistrationInfo>
+ <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+ <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
+ <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
+ </samla:Attribute>
+ </mdattr:EntityAttributes>
+ </md:Extensions>
+ <SPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+ <md:Extensions>
+ <mdui:UIInfo>
+ <mdui:DisplayName xml:lang="en">Sunet Cloud Services</mdui:DisplayName>
+ <mdui:Description xml:lang="en">Sunet Cloud Services OpenStack</mdui:Description>
+ <mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+ <mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+ </mdui:UIInfo>
+ </md:Extensions>
+ <KeyDescriptor use="signing">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIICzjCCAbYCCQDwu05k3Z8WpDANBgkqhkiG9w0BAQsFADApMScwJQYDVQQDDB5s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</ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <KeyDescriptor use="encryption">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIICzjCCAbYCCQDwu05k3Z8WpDANBgkqhkiG9w0BAQsFADApMScwJQYDVQQDDB5s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</ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+ <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+ <AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/postResponse"/>
+ <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/artifactResponse"/>
+ <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://login.sto3.safespring.com:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/paosResponse"/>
+ </SPSSODescriptor>
+ <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+ <OrganizationName xml:lang="en">Safespring</OrganizationName>
+ <OrganizationDisplayName xml:lang="sv">Blue Safespring AB</OrganizationDisplayName>
+ <OrganizationDisplayName xml:lang="en">Safespring</OrganizationDisplayName>
+ <OrganizationURL xml:lang="en">https://www.safespring.com</OrganizationURL>
+ </Organization>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+ <Company>Safespring AB</Company>
+ <GivenName>Safespring Support</GivenName>
+ <EmailAddress>mailto:support@safespring.com</EmailAddress>
+ </ContactPerson>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+ <GivenName>Anders Vaage</GivenName>
+ <EmailAddress>mailto:anders.vaage@safespring.com</EmailAddress>
+ </ContactPerson>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+ <Company>Safespring AB</Company>
+ <GivenName>Safespring Support</GivenName>
+ <EmailAddress>mailto:support@safespring.com</EmailAddress>
+ </ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml b/swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml
new file mode 100644
index 00000000..88b13b25
--- /dev/null
+++ b/swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://v2.api.sto4.safedc.net:5000/mellon">
+ <md:Extensions>
+ <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+ <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+ </mdrpi:RegistrationInfo>
+ </md:Extensions>
+ <SPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+ <md:Extensions>
+ <mdui:UIInfo>
+ <mdui:DisplayName xml:lang="en">Sunet Cloud Services</mdui:DisplayName>
+ <mdui:Description xml:lang="en">Sunet Cloud Services OpenStack</mdui:Description>
+ <mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+ <mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/Molntjanster</mdui:InformationURL>
+ </mdui:UIInfo>
+ </md:Extensions>
+ <KeyDescriptor use="signing">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIICyDCCAbACCQCjm05KUR+CvDANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBt2
+Mi5hcGkuc3RvNC5zYWZlZGMubmV0OjUwMDAwHhcNMjAxMTMwMTAzMTEyWhcNMzAx
+MTMwMTAzMTEyWjAmMSQwIgYDVQQDDBt2Mi5hcGkuc3RvNC5zYWZlZGMubmV0OjUw
+MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXDCUfjVKYg+w6ExF
+jbbqoTQOEfngCTn8dwgHun9cEBOM5MN/6NFm1jVVJjwvq0zCIhnSFZXQAEJRx6t2
+UTL15ynW9r9hVj49sAzsZyyjSaTBqmrGkm2KVl9xeAlTV7tLDSaPt7IA5oCFbnis
+IA68og7xLcrg2hVIj3DLabi8Atc9k37McYV4ZxJYm4LvlPebzrzuqPAPIDvCbApW
+jbwyYEfU8HS9qAxLC3nOKqZ0EWNMV59uofpcn0jCBxGfeccMEOV0ITbZKb3HFC+k
+WzJFlFsBguYzJMUgAsykCnL0KjXM8Hlqj9xkc9pNSKj5kKqUery3OknZ+Jt4aJ6x
+VPCZAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAH7gsPBc/QoSpH47Oit/Cu5mnNZJ
+7SDj0td654ULuCfHQFowZavC8XflJsJ7Jx1q2X+tsK1+MnuFTxib+IuZ9JegLEim
+EmMKvRPCjjFpah+Ag6thvcSjGHnkXloNkP6eQPTkVpcEJ/vcy7evKczX3oCsV+9e
+0Oq0nX8mQlxIRJyYmP4Oo1rH5DfisLVZ5J6mrMX4py9SURye/1S/FELCKA6+M6Ci
+nJFJxR8PAoE8E3OSafL5DiuAf099ru1a84dUi3QE8382RM8CT3sxbtRyuW026ZCb
+x0nGlVC5qVyncNEGPC5ExIxPRCI/I/n5Ar/DS5Lc8NJe9FbsR6G/lmlAVEc=</ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <KeyDescriptor use="encryption">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIICyDCCAbACCQCjm05KUR+CvDANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBt2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=</ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/logout"/>
+ <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+ <AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/postResponse"/>
+ <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/artifactResponse"/>
+ <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://v2.api.sto4.safedc.net:5000/identity/v3/auth/OS-FEDERATION/identity_providers/nordunet/protocols/saml2/websso/paosResponse"/>
+ </SPSSODescriptor>
+ <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+ <OrganizationName xml:lang="en">Safespring</OrganizationName>
+ <OrganizationDisplayName xml:lang="sv">Blue Safespring AB</OrganizationDisplayName>
+ <OrganizationDisplayName xml:lang="en">Safespring</OrganizationDisplayName>
+ <OrganizationURL xml:lang="en">https://www.safespring.com</OrganizationURL>
+ </Organization>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+ <Company>Safespring AB</Company>
+ <GivenName>Safespring Support</GivenName>
+ <EmailAddress>mailto:support@safespring.com</EmailAddress>
+ </ContactPerson>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+ <GivenName>Anders Vaage</GivenName>
+ <EmailAddress>mailto:anders.vaage@safespring.com</EmailAddress>
+ </ContactPerson>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+ <Company>Safespring AB</Company>
+ <GivenName>Safespring Support</GivenName>
+ <EmailAddress>mailto:support@safespring.com</EmailAddress>
+ </ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml b/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml
index 2d5ee49c..ee7b4baa 100644
--- a/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml
+++ b/swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml
@@ -76,6 +76,15 @@ gxlUzeCg29hnmSDs+72Dc1C5sQJ44/Z+Jx1REEzitNeXUlykNfgT/fJsx95GIOPL
<OrganizationDisplayName xml:lang="en">Safespring</OrganizationDisplayName>
<OrganizationURL xml:lang="en">https://www.safespring.com</OrganizationURL>
</Organization>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+ <Company>Safespring AB</Company>
+ <GivenName>Safespring Support</GivenName>
+ <EmailAddress>mailto:support@safespring.com</EmailAddress>
+ </ContactPerson>
+ <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+ <GivenName>Anders Vaage</GivenName>
+ <EmailAddress>mailto:anders.vaage@safespring.com</EmailAddress>
+ </ContactPerson>
<ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
<Company>Safespring AB</Company>
<GivenName>Safespring Support</GivenName>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index 179f321a..c52f7a48 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -663,4 +663,6 @@
<xi:include href="swamid-2.0/miunid.miun.se-saml-miun-metadata.xml"/>
<xi:include href="swamid-2.0/eduvpn.sunet.se-shibboleth.xml"/>
<xi:include href="swamid-2.0/v2.dashboard.sto1.safedc.net-5000-mellon.xml"/>
+ <xi:include href="swamid-2.0/v2.api.sto4.safedc.net-5000-mellon.xml"/>
+ <xi:include href="swamid-2.0/login.sto3.safespring.com-5000-mellon.xml"/>
</md:EntitiesDescriptor>
--
cgit v1.2.3