From ce086feea8d4a0419a83be9126b588e0827ddfbd Mon Sep 17 00:00:00 2001
From: Fredrik Aslund <fredrik.aslund@umu.se>
Date: Wed, 16 Sep 2015 11:55:14 +0200
Subject: ls00002.ad.mah.se-idp-shibboleth added to swamid-testing-idp
 SWAMIDOPS-7804

---
 swamid-2.0/ls00002.ad.mah.se-idp-shibboleth.xml | 199 ++++++++++++++++++++++++
 swamid-testing-idp-1.0.mxml                     |   1 +
 2 files changed, 200 insertions(+)
 create mode 100644 swamid-2.0/ls00002.ad.mah.se-idp-shibboleth.xml

diff --git a/swamid-2.0/ls00002.ad.mah.se-idp-shibboleth.xml b/swamid-2.0/ls00002.ad.mah.se-idp-shibboleth.xml
new file mode 100644
index 00000000..d0f26316
--- /dev/null
+++ b/swamid-2.0/ls00002.ad.mah.se-idp-shibboleth.xml
@@ -0,0 +1,199 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+     This is example metadata only. Do *NOT* supply it as is without review,
+     and do *NOT* provide it in real time to your partners.
+
+     This metadata is not dynamic - it will not change as your configuration changes.
+-->
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://ls00002.ad.mah.se/idp/shibboleth">
+  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">ad.mah.se</shibmd:Scope>
+      <!--
+    Fill in the details for your IdP here 
+
+            <mdui:UIInfo>
+                <mdui:DisplayName xml:lang="en">A Name for the IdP at ls00002.ad.mah.se</mdui:DisplayName>
+                <mdui:Description xml:lang="en">Enter a description of your IdP at ls00002.ad.mah.se</mdui:Description>
+                <mdui:Logo height="HeightInPixels" width="WidthInPixels">https://ls00002.ad.mah.se/Path/To/Logo.png</mdui:Logo>
+            </mdui:UIInfo>
+-->
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ls00002.ad.mah.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ls00002.ad.mah.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <!--
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ls00002.ad.mah.se/idp/profile/SAML2/Redirect/SLO"/>
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ls00002.ad.mah.se/idp/profile/SAML2/POST/SLO"/>
+        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ls00002.ad.mah.se:8443/idp/profile/SAML2/SOAP/SLO"/>
+        -->
+    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://ls00002.ad.mah.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ls00002.ad.mah.se/idp/profile/SAML2/POST/SSO"/>
+    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ls00002.ad.mah.se/idp/profile/SAML2/Redirect/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">ad.mah.se</shibmd:Scope>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+MIIDLzCCAhegAwIBAgIUVNV40DAZB5mUHVKVe6tGY1I42hkwDQYJKoZIhvcNAQEL
+BQAwHDEaMBgGA1UEAwwRbHMwMDAwMi5hZC5tYWguc2UwHhcNMTUwOTE1MTM0ODIx
+WhcNMzUwOTE1MTM0ODIxWjAcMRowGAYDVQQDDBFsczAwMDAyLmFkLm1haC5zZTCC
+ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJFxEzw0GeMNcOml3Nw3OIGB
+MTNSGG9r6dDsDV5tSHR6Yr/klOSoVnNh6zA2Ll750WM40oWN9jOZGc9uu+SFsXxh
+brkXcm1F78fVXV/h9G225sgux7g4/eMEC65gJncid566EF+ZJg1t0KIKxJq6j2W0
+D5eDSaS6gUi7HF1Nk3047xYUQkN7NJdJfiWn2jHBMa0eEWzPDo2BhgZFkIUB0H0C
+BN9t4RCtJeoj8sS7aDv5FShkTk7f40RLwH6Awr/oj8uRuDcNssRNO410QxRjtTov
+iKsQxGRAd9fbxBounyR8Ug3uCSVIz/wcW99fj4MOluyjz3kV7P+gmfAJlBgRJCMC
+AwEAAaNpMGcwHQYDVR0OBBYEFH7Ht/AR5jhuoXbez822ADbykyQIMEYGA1UdEQQ/
+MD2CEWxzMDAwMDIuYWQubWFoLnNlhihodHRwczovL2xzMDAwMDIuYWQubWFoLnNl
+L2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQAdqjtt6OkfZmFfITCY
+vMuiid+scQo++NZVr/maC3GobCCqGEEb5biTaXT7u9Txd/gmc3Va0jp8a8zfg7xT
+s3B4ptKQrSZdlEnBRjb1jEKjEwC/r5mrBw5zCkToZq2ZB4UnrvjqP26L0tJjIJcZ
+tFPyUKph+Ra8kTudJR55h8cGNtrcacrrWYCgTuxOwvHI0kAbI9wf4nKJodi809/B
+Jxk5G3+4FL1Bih22sNjCjyKhwzTZqeFO5nSEwHqHItc+wmWwXFrNlXorD9iR7AFX
+D7P4t/ZEhlF/1zXOrZe9RHTruTRckpDu7hWcwcuQCJww+kmlw3GzNjRMMN6RvxX0
+JV2n
+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+MIIDMDCCAhigAwIBAgIVALRMqgBuPbEymZ1A3rOUBJgcu+6jMA0GCSqGSIb3DQEB
+CwUAMBwxGjAYBgNVBAMMEWxzMDAwMDIuYWQubWFoLnNlMB4XDTE1MDkxNTEzNDgx
+OVoXDTM1MDkxNTEzNDgxOVowHDEaMBgGA1UEAwwRbHMwMDAwMi5hZC5tYWguc2Uw
+ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK/VyAL5u8SSu/vI5ejQrI
+L9fYl+3kOVkRqMbTrmkYDoJuH/hJ/EFkzsf10lL+Q9pblEe7tPHZW11L7hhg8uRv
+7rcHAA/wNyHrJj8wop0AvxJ/mw5me91KajBijnkznURYlHSnDwXMVlPNsnzt7zvL
+hfVh+ViSsYeIrqUGmWqNGv45RRmkywZOhzAxBecn6Y6RhNPGWrBF1J5vTfH2Awhb
+s163xVKk1C2kk27xfaxrCEzFv3uJ6WJVSdc2c2PaH02/BzIhvP5YfU31BUYMW6W5
+5ElGxc1EeBoHy72a8nWJC2vSEDJuTT9JlmLyIacjz88b4KUjaxcncGB42bame2+n
+AgMBAAGjaTBnMB0GA1UdDgQWBBSis6HHtfa5Ghu1UWkShNy/j9cEdDBGBgNVHREE
+PzA9ghFsczAwMDAyLmFkLm1haC5zZYYoaHR0cHM6Ly9sczAwMDAyLmFkLm1haC5z
+ZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAEEY+ulRi3+21GAoJ
+2jXfWASbFfAFxAfAjxgv/CzmRQFm1WAOLDG5Ga3A0oYcdgmJvMImjSu6Lk/0AxAh
+Ey+B6C2sJxuGwNtjvxo+8xrOPG2enF2efRwVePFCNOvjfOuq2I13eDyVBg93bzs2
+PMXfgPIsJKQlnVAvVxXzYmOd/HFnxzoHRHdAL2VcQ6jAWvE0MIHFwA8l9lFg1F85
+alrwBzVOxqN669C/+0b1kf5Nzfg1TkmSu7n7N4uXwdr8OqEKU98VlN/nusqbtRlE
+rf8c1bD9VuQXjDgzgsgYdOm4MQgHTC/hBNC2+9EvWY28zZqBDY7QJOjU6+b6uIxU
+CeM5ag==
+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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+                        </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ls00002.ad.mah.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+    <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ls00002.ad.mah.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
+    <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->
+  </AttributeAuthorityDescriptor>
+</EntityDescriptor>
diff --git a/swamid-testing-idp-1.0.mxml b/swamid-testing-idp-1.0.mxml
index f5f40921..eb4de61a 100644
--- a/swamid-testing-idp-1.0.mxml
+++ b/swamid-testing-idp-1.0.mxml
@@ -45,4 +45,5 @@
   <xi:include href="swamid-2.0/idptest.hj.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/demo.weblogin.uu.se-idp-shibboleth.xml"/>
   <xi:include href="swamid-2.0/idpsimplesaml.irf.se-simplesaml-saml2-idp-metadata.php.xml"/>
+  <xi:include href="swamid-2.0/ls00002.ad.mah.se-idp-shibboleth.xml"/>
 </EntitiesDescriptor>
-- 
cgit v1.2.3