From 187eaa350c9597144c17ce204e21f8eedc4495fb Mon Sep 17 00:00:00 2001
From: Johan Wassberg <jocar@sunet.se>
Date: Fri, 13 Jan 2023 07:30:28 +0100
Subject: SWAMID-2527: UK didn't like algorithm of connect.eduid.se

---
 swamid-2.0/connect.eduid.se-sunet.xml | 86 +++++++++++++++++++++++++++++++++++
 1 file changed, 86 insertions(+)
 create mode 100644 swamid-2.0/connect.eduid.se-sunet.xml

(limited to 'swamid-2.0')

diff --git a/swamid-2.0/connect.eduid.se-sunet.xml b/swamid-2.0/connect.eduid.se-sunet.xml
new file mode 100644
index 00000000..bda002aa
--- /dev/null
+++ b/swamid-2.0/connect.eduid.se-sunet.xml
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://connect.eduid.se/sunet">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2023-01-12T11:57:43Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <mdattr:EntityAttributes>
+      <samla:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al1</samla:AttributeValue>
+        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al2</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+  </md:Extensions>
+  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" WantAuthnRequestsSigned="false" errorURL="https://error.swamid.se/?errorurl_code=ERRORURL_CODE&amp;errorurl_ts=ERRORURL_TS&amp;errorurl_rp=ERRORURL_RP&amp;errorurl_tid=ERRORURL_TID&amp;errorurl_ctx=ERRORURL_CTX&amp;entityid=https://connect.eduid.se/sunet">
+    <md:Extensions>
+      <shibmd:Scope regexp="false">sunet.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:Description xml:lang="en">Login for SUNET employees - Connect</mdui:Description>
+        <mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/info/Sunet+Identity+Provider+Service+Definition+and+Privacy+Policy?showLanguage=en_GB</mdui:InformationURL>
+        <mdui:Logo xml:lang="en" height="205" width="256">https://static.sunet.se/images/sunet256.png</mdui:Logo>
+        <mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/info/Sunet+Identity+Provider+Service+Definition+and+Privacy+Policy?showLanguage=en_GB</mdui:PrivacyStatementURL>
+        <mdui:Description xml:lang="sv">Inloggning för anställda på SUNET - Connect</mdui:Description>
+        <mdui:DisplayName xml:lang="sv">SUNET - Connect</mdui:DisplayName>
+        <mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/info/Sunet+Identity+Provider+Service+Definition+and+Privacy+Policy?showLanguage=sv_SE</mdui:InformationURL>
+        <mdui:Logo xml:lang="sv" height="205" width="256">https://static.sunet.se/images/sunet256.png</mdui:Logo>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/info/Sunet+Identity+Provider+Service+Definition+and+Privacy+Policy?showLanguage=sv_SE</mdui:PrivacyStatementURL>
+        <mdui:DisplayName xml:lang="en">SUNET - Connect</mdui:DisplayName>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://connect.eduid.se/EduidSP/SunetIDP/sso/post"/>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://connect.eduid.se/EduidSP/SunetIDP/sso/redirect"/>
+  </md:IDPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Sunet</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Sunet</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://sunet.se</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://sunet.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>SUNET NOC</md:GivenName>
+    <md:EmailAddress>mailto:noc@sunet.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>SUNET NOC</md:GivenName>
+    <md:EmailAddress>mailto:noc@sunet.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>SUNET NOC</md:GivenName>
+    <md:EmailAddress>mailto:noc@sunet.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:GivenName>SUNET CERT</md:GivenName>
+    <md:EmailAddress>mailto:cert@cert.sunet.se</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>
-- 
cgit v1.2.3