From a6187fa0cec53c11bc34ed18c43b353650ead943 Mon Sep 17 00:00:00 2001
From: Johan Wassberg <jocar@sunet.se>
Date: Thu, 30 Nov 2023 09:24:55 +0100
Subject: SWAMID-3510: Added bankid.eduid.se

---
 .../swamid-2.0/bankid.eduid.se-saml2-metadata.xml  | 153 +++++++++++++++++++++
 1 file changed, 153 insertions(+)
 create mode 100644 metadata/swamid-2.0/bankid.eduid.se-saml2-metadata.xml

diff --git a/metadata/swamid-2.0/bankid.eduid.se-saml2-metadata.xml b/metadata/swamid-2.0/bankid.eduid.se-saml2-metadata.xml
new file mode 100644
index 00000000..35a71af2
--- /dev/null
+++ b/metadata/swamid-2.0/bankid.eduid.se-saml2-metadata.xml
@@ -0,0 +1,153 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://bankid.eduid.se/saml2-metadata">
+  <md:Extensions>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2023-11-28T08:08:28Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
+    <md:Extensions>
+      <mdui:UIInfo>
+        <mdui:Description xml:lang="en">eduID Sweden BankID identity verification</mdui:Description>
+        <mdui:Description xml:lang="sv">eduID Sverige BankID identitetsverifiering</mdui:Description>
+        <mdui:DisplayName xml:lang="en">eduID Sweden BankID identity verification</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">eduID Sverige BankID identitetsverifiering</mdui:DisplayName>
+        <mdui:InformationURL xml:lang="en">https://eduid.se/faq</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="sv">https://eduid.se/faq</mdui:InformationURL>
+        <mdui:Logo xml:lang="en" height="100" width="290">https://eduid.se/static/img/eduid-logo-black.svg</mdui:Logo>
+        <mdui:Logo xml:lang="sv" height="100" width="290">https://eduid.se/static/img/eduid-logo-black.svg</mdui:Logo>
+        <mdui:PrivacyStatementURL xml:lang="en">https://sunet.se/om-sunet/behandling-av-personuppgifter-i-eduid</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://sunet.se/om-sunet/behandling-av-personuppgifter-i-eduid</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIFQTCCAymgAwIBAgIUEDJ0GhjyUJyOgdoQ46JBiWMtIu8wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIFQTCCAymgAwIBAgIUEDJ0GhjyUJyOgdoQ46JBiWMtIu8wDQYJKoZIhvcNAQEL
+BQAwMDELMAkGA1UEBhMCU0UxITAfBgNVBAMMGGJhbmtpZC0yMDIzMTEzMC5lZHVp
+ZC5zZTAeFw0yMzExMzAwNzM4MDFaFw0zMzExMjcwNzM4MDFaMDAxCzAJBgNVBAYT
+AlNFMSEwHwYDVQQDDBhiYW5raWQtMjAyMzExMzAuZWR1aWQuc2UwggIiMA0GCSqG
+SIb3DQEBAQUAA4ICDwAwggIKAoICAQCu9lbUTBfo5rbl5//tSzc7RnSfepjx3WyG
+s/QXYaOLgbGB1Iw/yBlWJpqSAGCgxg6fA29B9r6Esf1SRTFET8Qrishsi+vaFa32
+EAkcMNfqf/rNicyZMDCvuRVCFfWa1JVbNiFlOQh9fhr8Q116QN07wxt95Mr60tSF
+mmjyde+AIZa2GnLiTM76dE5dSITE7PH1GsKS/DOhqhxNqEJyQ/3Drvcl63fFbCHA
+zGVqnsKfrK91S1d5KDqnor/MPENzx71UNFvM7O9Vb1EI5KjCai4KKhc/r8exXC48
+rbyLHE2PFaMmaymPGbFh7dpL4Ohf9YXvlOm9xGMERYkkl29grKZNNXarr1uR27fz
+2IkyMWDJa8Pk0g1VJ7vKrpN9liFnBmXupws6L6i3OeU93G7uSC/ynPWRL072gyUx
+Pr8yLavVTjqAWENhOWfv8g/wwu71elamxumtAJlTc9jqJRDyeaWpXE/o3/zzmA7S
+sjmRuweyXOsb37emSw7JJVjpQExpo5jAjTjsGhKJoVnnCY//+7GaAi3efVBdEVh+
+kr+ocW9zq3yu8MipkiassRjnxFHNuGZLF9YmkpGGKc70iwHUmXR4mSKOhgBycD1U
+dFWzZTUNV003CDpNPT1zDesPkuLelnx3E1G3HRW6YTduOd3LZeurRSwQHTSHNA5F
+qR9gvi7VLwIDAQABo1MwUTAdBgNVHQ4EFgQUP5oFLNh4Xj/Aa3P9wbl820Bfvpww
+HwYDVR0jBBgwFoAUP5oFLNh4Xj/Aa3P9wbl820BfvpwwDwYDVR0TAQH/BAUwAwEB
+/zANBgkqhkiG9w0BAQsFAAOCAgEAcWuPu6Ntfj71MLLV7OsDg8jfyrAt3EvXt8ZH
+bHnrcXNyAlxocDKUj8p4PBL1GSE1holpbKhAJbo2eX04AA4JVlghR+D/84cOMY4N
+lRBDBVeRx2JaifFAxBKGD8Lhi795O9YmahUSfxTWkAtHjKBdD8aCFRGwpM1Au7Yf
+U1YYyBtzaxAmUCs8lL+bm2/fQNjuctpOFhRj8QEZKQJdtNFWGm3J0SLz9xZ97kla
+RBQhLpn1R5/CoUfV8m9fxiAuBGgJGGwFs91KzLbPAfLRAcBaf4DJ54HY0F5BNmkM
+TKGQwKluTS3TqbMrV/qUKBWGL5O/VDGFb1KAmhDLDk5az/JoAo97cqCAOTBblWa4
+8njGHIHgdeaZMhjYGio2nG0bMj7elSLFIfPCsH6PskGbmGZSeKNK+ST/nkWsKLwO
+KzwAZktCO3b7iJnhwvZscnxqztTeLlDX+2XJXb3rD5nLrKBdIyrGCaj7QwWk+D24
+2RYmSg6t4WHnDp2zJV43k8tP7G+6xZbGi1ZEcgt8w5e4/5vOtiThGBuNYQi72uSJ
+vtJEivW20Ysen3BXJ5L5uM627fIH1ryL9VHtbtwHgqUHjM5mqiOlFpyfl7tYUWRu
+niEmCSUHEXXk2GFUQj/mgF+VAEVG/5YvWQke/XQhTyq7ih+5kR0n49pQr3UO3+FU
+GETOy+U=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bankid.eduid.se/logout"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bankid.eduid.se/saml2-acs" index="1"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">eduID Sweden BankID SP</md:ServiceName>
+      <md:ServiceName xml:lang="sv">eduID Sverige BankID-SP</md:ServiceName>
+      <md:RequestedAttribute Name="urn:oid:1.2.752.29.4.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="personalIdentityNumber" isRequired="true"/>
+      <md:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="displayName" isRequired="true"/>
+      <md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="givenName" isRequired="true"/>
+      <md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="sn" isRequired="true"/>
+      <md:RequestedAttribute Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="transactionIdentifier" isRequired="true"/>
+      <md:RequestedAttribute Name="urn:oid:1.2.752.201.3.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="authContextParams" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Sunet</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Sunet</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.sunet.se</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://www.sunet.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="technical">
+    <md:Company>Vetenskapsrådet</md:Company>
+    <md:GivenName>SUNET eduID team</md:GivenName>
+    <md:SurName/>
+    <md:EmailAddress>mailto:feedback@eduid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>SUNET eduID team</md:GivenName>
+    <md:EmailAddress>mailto:feedback@eduid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>eduID Support</md:GivenName>
+    <md:EmailAddress>mailto:support@eduid.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:GivenName>Security Response Team</md:GivenName>
+    <md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>
-- 
cgit v1.2.3