From fc85305adbaf1f08fe7c6042547818d345daa6e6 Mon Sep 17 00:00:00 2001
From: Björn Mattsson <bjorn@sunet.se>
Date: Fri, 5 Jan 2024 13:15:13 +0100
Subject: SWAMID-3676 Updated idp.mah.se

---
 .../swamid-edugain/idp.mah.se-idp-shibboleth.xml   | 33 ++++++++++++++++++----
 1 file changed, 28 insertions(+), 5 deletions(-)

diff --git a/metadata/swamid-edugain/idp.mah.se-idp-shibboleth.xml b/metadata/swamid-edugain/idp.mah.se-idp-shibboleth.xml
index 12579a8f..0e3d2f4c 100644
--- a/metadata/swamid-edugain/idp.mah.se-idp-shibboleth.xml
+++ b/metadata/swamid-edugain/idp.mah.se-idp-shibboleth.xml
@@ -121,10 +121,27 @@ Sb3rBCm5iyTFace5tFk069wtFHASk2Xy8atTMLx0nbFkq5eE/DVRsYj+C7QZOLTf
     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.mah.se/idp/profile/SAML2/POST/SSO"/>
     <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.mah.se/idp/profile/SAML2/Redirect/SSO"/>
   </md:IDPSSODescriptor>
-  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0" errorURL="https://idp.mah.se/error/?errorurl_code=ERRORURL_CODE&amp;errorurl_ts=ERRORURL_TS&amp;errorurl_rp=ERRORURL_RP&amp;errorurl_tid=ERRORURL_TID&amp;errorurl_ctx=ERRORURL_CTX">
     <md:Extensions>
-      <shibmd:Scope regexp="false">mah.se</shibmd:Scope>
-      <shibmd:Scope regexp="false">mau.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Malmö universitet</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Malmö University</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Proxied MFA Service Provider för Malmö universitet</mdui:Description>
+        <mdui:Description xml:lang="en">Proxied MFA Service Provider for Malmö University</mdui:Description>
+        <mdui:InformationURL xml:lang="sv">https://service.mau.se/solutions/open-knowledge-items/item/KA%201552/sv_SE/</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://service.mau.se/solutions/open-knowledge-items/item/KA%201552/en/</mdui:InformationURL>
+        <mdui:Logo xml:lang="en" height="163" width="56">https://mau.se/siteassets/mau_en_logotype.svg</mdui:Logo>
+        <mdui:Keywords xml:lang="sv">mah mau malmo+universitet malmo+university</mdui:Keywords>
+        <mdui:Keywords xml:lang="en">mah mau malmo+universitet malmo+university</mdui:Keywords>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://service.mau.se/solutions/open-knowledge-items/item/KA%201558/sv_SE/</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://service.mau.se/solutions/open-knowledge-items/item/KA%201558/en/</mdui:PrivacyStatementURL>
+        <mdui:Logo xml:lang="sv" height="170" width="56">https://mau.se/siteassets/mau_sv_logotyp.svg</mdui:Logo>
+      </mdui:UIInfo>
+      <mdui:DiscoHints>
+        <mdui:DomainHint>mah.se</mdui:DomainHint>
+        <mdui:IPHint>195.178.224.0/19</mdui:IPHint>
+        <mdui:GeolocationHint>geo:55.6087954,12.9945611</mdui:GeolocationHint>
+      </mdui:DiscoHints>
     </md:Extensions>
     <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
@@ -195,8 +212,14 @@ Sb3rBCm5iyTFace5tFk069wtFHASk2Xy8atTMLx0nbFkq5eE/DVRsYj+C7QZOLTf
         </ds:X509Data>
       </ds:KeyInfo>
     </md:KeyDescriptor>
-    <md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.mah.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
-  </md:AttributeAuthorityDescriptor>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.mah.se/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Shibboleth proxied MFA Malmö universitet</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Shibboleth proxied MFA Malmö University</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="personalIdentityNumber" Name="urn:oid:1.2.752.29.4.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
   <md:Organization>
     <md:OrganizationName xml:lang="en">Malmö University</md:OrganizationName>
     <md:OrganizationName xml:lang="sv">Malmö universitet</md:OrganizationName>
-- 
cgit v1.2.3