From a917953590957dba1c3622ca23e838e8211c3127 Mon Sep 17 00:00:00 2001
From: Björn Mattsson <bjorn@sunet.se>
Date: Wed, 12 Oct 2022 15:15:16 +0200
Subject: SWAMID-1569 Updated https://visp.humlab.umu.se

---
 swamid-2.0/visp.humlab.umu.se.xml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/swamid-2.0/visp.humlab.umu.se.xml b/swamid-2.0/visp.humlab.umu.se.xml
index 13b0e422..97212aa9 100644
--- a/swamid-2.0/visp.humlab.umu.se.xml
+++ b/swamid-2.0/visp.humlab.umu.se.xml
@@ -24,7 +24,7 @@
       <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
     </mdrpi:RegistrationInfo>
   </md:Extensions>
-  <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+  <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
       <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://visp.humlab.umu.se/Shibboleth.sso/DS/Login"/>
       <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://visp.humlab.umu.se/Shibboleth.sso/DS/Login" index="1"/>
@@ -39,6 +39,14 @@
         <mdui:PrivacyStatementURL xml:lang="en">https://www.umu.se/en/about-the-website/legal-information/processing-of-personal-data/</mdui:PrivacyStatementURL>
       </mdui:UIInfo>
     </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:KeyName>visp-signing</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIFxTCCA62gAwIBAgIUaljo6SmBKojz4CWyiyxbmIc2jccwDQYJKoZIhvcNAQELBQAwcjELMAkGA1UEBhMCU0UxCzAJBgNVBAgMAlZCMQ0wCwYDVQQHDAR2aXNwMRkwFwYDVQQKDBBVbWVhIHVuaXZlcnNpdGV0MQ8wDQYDVQQLDAZIdW1sYWIxGzAZBgNVBAMMEnZpc3AuaHVtbGFiLnVtdS5zZTAeFw0yMjEwMDcxMzM0MTVaFw0zMjEwMDQxMzM0MTVaMHIxCzAJBgNVBAYTAlNFMQswCQYDVQQIDAJWQjENMAsGA1UEBwwEdmlzcDEZMBcGA1UECgwQVW1lYSB1bml2ZXJzaXRldDEPMA0GA1UECwwGSHVtbGFiMRswGQYDVQQDDBJ2aXNwLmh1bWxhYi51bXUuc2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDSu1XMUERUIXJhlVuHlmS2buw1bt+VEqqwsxo+aIrfoMtnc/AFNv0sI4JC9bwuMKrgcq+XvPqayJQFAlRaRDLiO+UzHivikyfSypHeAfO3xiP5oVCxiMuKuTTMxc5exnmbfhKnYVxMkWF5nXidoy/jBQZG04UFrUXgatMVm/cI/Kjink82+obxL5hqMKAKf3/rrGVJsqU3iX0kEfVH04YHukKk72b2fizqh4iby+cfbC7pS/h7y9KLNJHWZE9JiNKeCvwjNxLjOmlzLUmqZr6jBsPYIMPOjUq9GkmgPm9p0Z70ZGWX2kTCqkUprcyf9JtU0usPEpOiuPmQod3v/4y2Zch8FYnarcJWSFDXPbKYwGYATHcXA8hZlJ5iONawsBX6dK5b12Ss03kmSf5zVhm9+QQjWM9m1CIIe8tSgESJvrSzDJVQ3TNyx7IlrMKlJWyvX+z9M9KT7j8iqo+p9FIZhj90Vh7Cdc3f+hCpMYJuBwpSUslkfWVB8nssnMYTYm3k8yswKtrGP8soXfYp6NVVuVHJEVsBNQ8RgDMpqMk4b3ZN0oZpdXP67v9n+nX97yxOJ6x7f47oMPlEYaQnUUu4BC3t42lGKiPQ6RKFpWcCq1KjlXnbjvcNJ3Er4jNnLE8AtkbMOTi/9kTihCeLN/HbDNvD/Yz2zpPUAbcGIxwhwwIDAQABo1MwUTAdBgNVHQ4EFgQUHNKueRJjuXsBpmJ1Po+UbasQS74wHwYDVR0jBBgwFoAUHNKueRJjuXsBpmJ1Po+UbasQS74wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAoLMA9BRU9bGgAFx06jSDIEk4rZVhdKlYhYcO6hZydQQ4kjYdJQhHZFfgOyhTPPBM76t0qnzIWvYwoi9wYHGcFxUEjHJfIjVGSTe+zODHh0EYxF7gXMUaci9cYp2hS5owZ/7byqvI+Ucux873RUx/wLMAF1TrquJdx4rC/bbwBAFPDOZ/wJ99OVenDZQk3Ns9ius70q3Xgey0SsTPg4qRkUUU0MoPOrSYUFZbhB8jsASH8q018hFXVFld5kuccFUsFYLrkym9ArW1pn3EBP1GYhf9jNGfYDGyD4SiOzPnJ7TkimYl3dHwNegkdhhn9NKznRxBQHimUHQovryTE1HrOz+SVa+G2LmnPa75SSJd82TCcrdIduv0jaPP35347HttHrVFOAr3fkOhkEHGNxahgmI6uurjgKGO11dSqbIyiE+JgGs5DbQQmjAJGyOGVWakYJdfSIlNw92fXBTGX5ce2tnicRXX3Zpu3YukOmwXe9/zVyiENEA8xpPwWaKOt1Mi08CvO7Y53KfwDk86jJCyB/Kbx8bW9UUbB39kq6lWjq56vYdlmrP8E1LN62HzeiPTCdYZa5h5ka9eQAaIn38gp+mg1tswAX+VdVmNlujbXb/aMqQKaAdsU4O6DYWr/MCg4iVmW6VqABPLQBSvN4tvvI3Yb+5Kb/g6IMyUDGSyjDE=</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
     <md:KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:KeyName>visp</ds:KeyName>
@@ -56,6 +64,10 @@
       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </md:KeyDescriptor>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://visp.humlab.umu.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://visp.humlab.umu.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://visp.humlab.umu.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://visp.humlab.umu.se/Shibboleth.sso/SLO/Artifact"/>
     <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://visp.humlab.umu.se/Shibboleth.sso/SAML2/POST" isDefault="true" index="1"/>
   </md:SPSSODescriptor>
-- 
cgit v1.2.3