From 26d46786b2f27457217d64eec2390e1a01253903 Mon Sep 17 00:00:00 2001
From: Johan Wassberg <jocar@sunet.se>
Date: Tue, 20 Dec 2022 13:18:03 +0100
Subject: SWAMID-2402: Updated passportprod.lu.se

---
 ...ssportprod.lu.se-activateaccount-shibboleth.xml | 43 ++++++++++++++++++----
 1 file changed, 36 insertions(+), 7 deletions(-)

(limited to 'swamid-2.0')

diff --git a/swamid-2.0/passportprod.lu.se-activateaccount-shibboleth.xml b/swamid-2.0/passportprod.lu.se-activateaccount-shibboleth.xml
index c1eabc0c..c2854b9b 100644
--- a/swamid-2.0/passportprod.lu.se-activateaccount-shibboleth.xml
+++ b/swamid-2.0/passportprod.lu.se-activateaccount-shibboleth.xml
@@ -22,9 +22,8 @@
     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     <mdattr:EntityAttributes>
       <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
-        <samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue>
-        <samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue>
-        <samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue>
+        <samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue>
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
       </samla:Attribute>
     </mdattr:EntityAttributes>
   </md:Extensions>
@@ -38,10 +37,10 @@
         <mdui:DisplayName xml:lang="sv">Lösenordsportal för Lunds universitet</mdui:DisplayName>
         <mdui:Description xml:lang="en">Administration and activating accounts</mdui:Description>
         <mdui:Description xml:lang="sv">Administration och aktivering av konton</mdui:Description>
-        <mdui:Logo xml:lang="en" height="78" width="350">http://www.lunduniversity.lu.se/sites/www.lunduniversity.lu.se/files/lund_university_logotype.png</mdui:Logo>
-        <mdui:Logo xml:lang="sv" height="78" width="350">http://www.lu.se/sites/www.lu.se/files/logo.png</mdui:Logo>
         <mdui:InformationURL xml:lang="en">https://passportprod.lu.se</mdui:InformationURL>
         <mdui:InformationURL xml:lang="sv">https://passportprod.lu.se</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://passport.lu.se/privacy/</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://passport.lu.se/privacy/</mdui:PrivacyStatementURL>
       </mdui:UIInfo>
     </md:Extensions>
     <md:KeyDescriptor>
@@ -64,8 +63,7 @@ czQXVTANBgkqhkiG9w0BAQUFAAOCAQEAmXkKKSjw0imbaKmMdqYFOLHoDGp4c6wi
 gVsd3XlY7NqXicukF6IRg4r7/jdo2yeUU7Z5/piAQmH/GNH37rNhjYXLCRu4i2Mx
 0ecfB1zt/F/alqrL7sx78i+BhTSKI/OURkr+ifjXHdZAp5z1lpLn+YxL3VL6aEke
 bK7+H+UyCLeQ4gkfKPEkbHdeDsdcIJxtKjur6L2PS3Mr+tPtVNPLEXOZNLwKicuU
-lQd6YWu02Yr4FawRDeUp8PI+VMYf1WapfZ0FFE2Od+FUc/i+8TMudA==
-</ds:X509Certificate>
+lQd6YWu02Yr4FawRDeUp8PI+VMYf1WapfZ0FFE2Od+FUc/i+8TMudA==</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
@@ -92,5 +90,36 @@ lQd6YWu02Yr4FawRDeUp8PI+VMYf1WapfZ0FFE2Od+FUc/i+8TMudA==
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://passportprod.lu.se/Shibboleth.sso/SAML2/ECP" index="4"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://passportprod.lu.se/Shibboleth.sso/SAML/POST" index="5"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://passportprod.lu.se/Shibboleth.sso/SAML/Artifact" index="6"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Lund University user account management portal</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Lunds universitets kontohanteringsportal</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
   </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Lund University</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Lunds universitet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Lund University</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">Lunds universitet</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.lunduniversity.lu.se</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://www.lu.se</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:GivenName>Passport administrators</md:GivenName>
+    <md:EmailAddress>mailto:passportadmin@epic.lu.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>Passport administrators</md:GivenName>
+    <md:EmailAddress>mailto:passportadmin@epic.lu.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>LU Servicedesk</md:GivenName>
+    <md:EmailAddress>mailto:servicedesk@lu.se</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:GivenName>LU IRT</md:GivenName>
+    <md:EmailAddress>mailto:abuse@lu.se</md:EmailAddress>
+  </md:ContactPerson>
 </md:EntityDescriptor>
-- 
cgit v1.2.3