From 9aa0bce6106e43a44edb3b7db1e74474e288d321 Mon Sep 17 00:00:00 2001
From: Johan Wassberg <jocar@sunet.se>
Date: Mon, 22 Aug 2022 11:37:25 +0200
Subject: SWAMID-1191: Updated visp-demo.humlab.umu.se

---
 swamid-2.0/visp-demo.humlab.umu.se.xml | 63 ++++++++++++++++++++++------------
 1 file changed, 41 insertions(+), 22 deletions(-)

(limited to 'swamid-2.0/visp-demo.humlab.umu.se.xml')

diff --git a/swamid-2.0/visp-demo.humlab.umu.se.xml b/swamid-2.0/visp-demo.humlab.umu.se.xml
index 16c1c782..c4747748 100644
--- a/swamid-2.0/visp-demo.humlab.umu.se.xml
+++ b/swamid-2.0/visp-demo.humlab.umu.se.xml
@@ -1,56 +1,75 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://visp-demo.humlab.umu.se">
   <md:Extensions>
-    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2021-09-07T08:11:57Z">
-      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
-    </mdrpi:RegistrationInfo>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
       <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
       </samla:Attribute>
     </mdattr:EntityAttributes>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2021-09-07T08:11:57Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
   </md:Extensions>
   <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://visp-demo.humlab.umu.se/Shibboleth.sso/DS/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://visp-demo.humlab.umu.se/Shibboleth.sso/DS/Login" index="1"/>
       <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="sv">Visual Speech</mdui:DisplayName>
-        <mdui:DisplayName xml:lang="en">Visual Speech</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="sv">Visual Speech Demo</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Visual Speech Demo</mdui:DisplayName>
         <mdui:Description xml:lang="sv">Humlabs infrastruktur för ett online forskningsflöde gällande taldata</mdui:Description>
-        <mdui:Description xml:lang="en">Humlab infrastructure for an online research flow in regards to speech data</mdui:Description>
+        <mdui:Description xml:lang="en">Humlab infrastructure for an online research flow regarding speech data</mdui:Description>
         <mdui:InformationURL xml:lang="sv">https://visp-demo.humlab.umu.se/om</mdui:InformationURL>
         <mdui:InformationURL xml:lang="en">https://visp-demo.humlab.umu.se/about</mdui:InformationURL>
-        <mdui:PrivacyStatementURL xml:lang="en">https://www.umu.se/en/about-the-website/legal-information/processing-of-personal-data/</mdui:PrivacyStatementURL>
         <mdui:PrivacyStatementURL xml:lang="sv">https://www.umu.se/om-webbplatsen/juridisk-information/behandling-av-personuppgifter/</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://www.umu.se/en/about-the-website/legal-information/processing-of-personal-data/</mdui:PrivacyStatementURL>
       </mdui:UIInfo>
     </md:Extensions>
     <md:KeyDescriptor use="encryption">
       <ds:KeyInfo>
-        <ds:KeyName>2T7VWmh2Y47GE8XQi_RlpXclgIMCr_uUbnvWG1Jd7cs</ds:KeyName>
+        <ds:KeyName>visp</ds:KeyName>
         <ds:X509Data>
-          <ds:X509Certificate>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</ds:X509Certificate>
+          <ds:X509Certificate>MIIGCzCCA/OgAwIBAgIUer0mcKntw8tqS4Iq4PbUl3AzDz4wDQYJKoZIhvcNAQEL BQAwgZQxCzAJBgNVBAYTAlNFMRUwEwYDVQQIDAxWYXN0ZXJib3R0ZW4xDTALBgNV BAcMBFVtZWExGTAXBgNVBAoMEFVtZWEgdW5pdmVyc2l0ZXQxDzANBgNVBAsMBkh1 bWxhYjENMAsGA1UEAwwEdmlzcDEkMCIGCSqGSIb3DQEJARYVc3VwcG9ydEBodW1s YWIudW11LnNlMB4XDTIyMDgxODEzMTA0M1oXDTMyMDgxNTEzMTA0M1owgZQxCzAJ BgNVBAYTAlNFMRUwEwYDVQQIDAxWYXN0ZXJib3R0ZW4xDTALBgNVBAcMBFVtZWEx GTAXBgNVBAoMEFVtZWEgdW5pdmVyc2l0ZXQxDzANBgNVBAsMBkh1bWxhYjENMAsG A1UEAwwEdmlzcDEkMCIGCSqGSIb3DQEJARYVc3VwcG9ydEBodW1sYWIudW11LnNl MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7EivOgsGP6fdVXnV1sgH ktWapf5spu53h6IHqK/d89Uw1Wo75m1vJWhy91wahcpX/rpFJHVbAuQsy30w8X6M qYIdXF5Pp0RIM1Qj9AIqXR9WpJmEHZO5hoIo5LJcAZkQD9RGIr4EADsBWJQiy6Lx TJ9p/Ic0vGBzZwAbUX11S0O6s15Cf6GKx6hnNAJTUW7lUZp4pPeTwZO5DUbYcH9s QdeckpG1uI592PbfcABwADoHKkN0WnExYcTgV/sP9Nqibdm3n3rG0cqjMC/WvWDT q2I90LMZCrebgulE65/INBCNU/Z3tVB+vAYOPNi3zhlZx5ob9RrGuTn6zX1gGzAw zFNVW8sO1sDFQvqdhkMV1vlgMV5X0COjvn5ek3oCYurgQ+az7qwqeQRoK3kfL9/O LDx0BUBdVARQ4ZhCzUYgjBR0xwiRTdiNsAXj5Ux7waYgAkZmswXhcxUQMJ7V00CK Dg0IaRb+8JyQGafjwWMhFg6BCwMMN35C0mR33hzPgjp65Kerp3MDmw1LDf+Sq34G 7Xs7Til6IZliUYf6YF0t0DRnIkWysD5H57As3TYYmnG5Rfmaiy36jUq6e6sTiKeh LlJGlRz/bAJ93xCum6GMdUvN0MIpsi/pfg+OqVL3aOk0r8LwBDuTsgKvFEtH3f4A g2v+IuzOzUeZqQ4TgddHK40CAwEAAaNTMFEwHQYDVR0OBBYEFNFfclaNKhiGXQy1 VagjrnbPnOgAMB8GA1UdIwQYMBaAFNFfclaNKhiGXQy1VagjrnbPnOgAMA8GA1Ud EwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAMwjZ7GMJFqiqS9SjGNdct8M 0USR2CKapR11i0U39FqwJAWc+Z+7Ag1bWWKNNdNJ5Hy5WlTd+QanodIcnLCwRNlk cv2gQESPHafGaUJyN2S5CmqnPRrZn24ILKVc8T6ix0+lF1dohY+gNcm5pcCr2Ttz gOCqilgS+ePDMve95m7k6ZDC0ucga25HSXuzA4i4zFdT8ecQC0wSLFK4hgeWts6M OMlHZFWPfNMdoPqDEa0IyGVm4qk+3+o0Rg3T2rk6tmrqoP10m+ZiAfeMokfPB8ce 5PRe80g1iqYFHaenMVMMQYNzXBOQi5l7LaxRvQREchfxhObRTYKeVdSt+P1sDfJe e2MO4PVVjMVqYVeZbYCmFQFrrdFMFU9QmwJ6/kkjZN6zbbRf19eNGJ73d0KkZkme A5P1s3iyhJAYpXx4LWVDCNpfu8WNibJdL+xGopieBUDA2Dhp/S/VipsXMEKe2OsV p5LBJ97BIhbcIhCbZdfvQQoS/v/tAnwC2wIFROXEY5rxD/Zyp9xlxQNf4s/OYJ9P hMOiq1upMMoqd6+5x603W9qp4XfhSaiFWlewo95muGWrFVP5JDi/cw1FjcSHkv2o hh2hHKRVsRvV69t82ddDD0dUN346TPmarY6aJeFXMUFUx36Pm1kMUCLNtP1L1X9p KfetW/xyUFPhfihNR86q</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </md:KeyDescriptor>
-    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.visp-demo.humlab.umu.se/auth/realms/visp/broker/Umu-id/endpoint"/>
     <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.visp-demo.humlab.umu.se/auth/realms/visp/broker/Umu-id/endpoint" index="1" isDefault="true"/>
-    <md:AttributeConsumingService index="1" isDefault="true">
-      <md:ServiceName xml:lang="en">Visual Speech</md:ServiceName>
-      <md:ServiceName xml:lang="sv">Visual Speech</md:ServiceName>
-      <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
-    </md:AttributeConsumingService>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://visp-demo.humlab.umu.se/Shibboleth.sso/SAML2/POST" isDefault="true" index="1"/>
   </md:SPSSODescriptor>
   <md:Organization>
     <md:OrganizationName xml:lang="sv">Umeå universitet</md:OrganizationName>
-    <md:OrganizationName xml:lang="en">Umeå universitet</md:OrganizationName>
+    <md:OrganizationName xml:lang="en">Umeå university</md:OrganizationName>
     <md:OrganizationDisplayName xml:lang="sv">Umeå universitet</md:OrganizationDisplayName>
-    <md:OrganizationDisplayName xml:lang="en">Umeå universitet</md:OrganizationDisplayName>
-    <md:OrganizationURL xml:lang="en">https://umu.se</md:OrganizationURL>
-    <md:OrganizationURL xml:lang="sv">https://umu.se</md:OrganizationURL>
+    <md:OrganizationDisplayName xml:lang="en">Umeå university</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="sv">https://www.umu.se/</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="en">https://www.umu.se/en</md:OrganizationURL>
   </md:Organization>
   <md:ContactPerson contactType="technical">
-    <md:GivenName>Johan von Boer</md:GivenName>
-    <md:EmailAddress>mailto:johan.von.boer@umu.se</md:EmailAddress>
+    <md:GivenName>Humlab Support</md:GivenName>
+    <md:EmailAddress>mailto:support@humlab.umu.se</md:EmailAddress>
   </md:ContactPerson>
   <md:ContactPerson contactType="support">
     <md:GivenName>Humlab Support</md:GivenName>
-- 
cgit v1.2.3