From 772ed387890495a5d8c01904a09f8f8e123705a8 Mon Sep 17 00:00:00 2001
From: Paul Scott <paul.scott@kau.se>
Date: Wed, 1 Jun 2022 16:42:34 +0200
Subject: SWAMID-999 updates assemblage.dc.kau.se

---
 swamid-2.0/assemblage.dc.kau.se.xml | 142 ++++++++++++++++++++++--------------
 1 file changed, 88 insertions(+), 54 deletions(-)

(limited to 'swamid-2.0')

diff --git a/swamid-2.0/assemblage.dc.kau.se.xml b/swamid-2.0/assemblage.dc.kau.se.xml
index ea9f4f37..412e5ed9 100644
--- a/swamid-2.0/assemblage.dc.kau.se.xml
+++ b/swamid-2.0/assemblage.dc.kau.se.xml
@@ -5,79 +5,109 @@
       <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
     </mdrpi:RegistrationInfo>
   </md:Extensions>
-  <SPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="sv">Assemblage</mdui:DisplayName>
         <mdui:DisplayName xml:lang="en">Assemblage</mdui:DisplayName>
         <mdui:Description xml:lang="sv">Intern applikations- och tjänstplattform för IT-avdelningen på Karlstads universitet</mdui:Description>
         <mdui:Description xml:lang="en">Internal application and service platform for the IT department at Karlstad University</mdui:Description>
+        <mdui:PrivacyStatementURL xml:lang="en">https://www.kau.se/en/about-university/contact/about-kause/contact-webmaster/processing-personal-data-karlstad-university</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://www.kau.se/om-universitetet/kontakt/om-kause/kontakta-webbredaktionen/personuppgiftsbehandling-vid-karlstads</mdui:PrivacyStatementURL>
+        <mdui:InformationURL xml:lang="en">https://inslaget.kau.se/stod-service/it-support</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="sv">https://inslaget.kau.se/stod-service/it-support</mdui:InformationURL>
       </mdui:UIInfo>
     </md:Extensions>
-    <KeyDescriptor use="signing">
+    <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
         <ds:X509Data>
-          <ds:X509Certificate>MIIDmjCCAoICCQCSY8OVdc1+6TANBgkqhkiG9w0BAQsFADCBjjELMAkGA1UEBhMC
-U0UxFDASBgNVBAgMC1bDg8Kkcm1sYW5kMREwDwYDVQQHDAhLYXJsc3RhZDEeMBwG
-A1UECgwVS2FybHN0YWRzIHVuaXZlcnNpdGV0MRcwFQYDVQQLDA5JVC1hdmRlbG5p
-bmdlbjEdMBsGA1UEAwwUYXNzZW1ibGFnZS5kYy5rYXUuc2UwHhcNMjAxMjE2MTIw
-ODU2WhcNMjExMjE2MTIwODU2WjCBjjELMAkGA1UEBhMCU0UxFDASBgNVBAgMC1bD
-g8Kkcm1sYW5kMREwDwYDVQQHDAhLYXJsc3RhZDEeMBwGA1UECgwVS2FybHN0YWRz
-IHVuaXZlcnNpdGV0MRcwFQYDVQQLDA5JVC1hdmRlbG5pbmdlbjEdMBsGA1UEAwwU
-YXNzZW1ibGFnZS5kYy5rYXUuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQDIQGbxzh5kHch6ubGpoEWqQ7q5JgY9akUnUsa9v9+io1pifnkntoVKi96Q
-on8mRzfUlScTe8W5BEy5bad8EY79YJMbDxkkWJOW0nbOfhLaZMRphUvQX6/Jf94B
-q3zt91d5zjeh2UC0/253Y3lS852E0FFt9x6T/PEJlWIsRQGoZv7SnDNbp0Rt2SqD
-yCGwh2ZMjxfI7umli03Y2CREmBhQLclpY1twvpFjSL05lgNe25ADyEVMChVWF57w
-bl49Hs7o8VuzB4WGFzigF1yiM2W7ybKcPcBPaSOYjmQTCwfx7PRwP4GvdvitL8GT
-LDQ06gt7iMnCwvc2KTQIIZ1LQG6fAgMBAAEwDQYJKoZIhvcNAQELBQADggEBABCs
-++HUv5z4OoA8RM2jsGDe1oosKGuGzVsKPoOlDaw8ZPUhA0GvcvWikYunApLFveRV
-m9jA091y3aQnungdlfM/T2vcBDvrhjNoJ+Ihuuof9oSVQC2iRCAm/xpMxTl8jxv0
-DiSo3QBsSXfPyjiiRSjqioeeNxqdvYo2wQyeoelxl3M7BPbVKgDc834wCQ4Gz10g
-UAvGMv1BeEL04ENhlvMmWG5dORDIzaFyvtWyKWISlweiIYobihDH4fQCl1YnmgyI
-YBSLpNvYX+GG72wreBmRztFqQt6wozucSTHZ5XUZmpbaVL15eDJsrBERSaDSfbNS
-AlmixXjhfsB2tYk7EIc=
+          <ds:X509Certificate>MIIF/zCCA+egAwIBAgIUQsXEVA9p+AzPS8CSfxzLP3NF7ZMwDQYJKoZIhvcNAQEL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 </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-    </KeyDescriptor>
-    <KeyDescriptor use="encryption">
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
-          <ds:X509Certificate>MIIDmjCCAoICCQCSY8OVdc1+6TANBgkqhkiG9w0BAQsFADCBjjELMAkGA1UEBhMC
-U0UxFDASBgNVBAgMC1bDg8Kkcm1sYW5kMREwDwYDVQQHDAhLYXJsc3RhZDEeMBwG
-A1UECgwVS2FybHN0YWRzIHVuaXZlcnNpdGV0MRcwFQYDVQQLDA5JVC1hdmRlbG5p
-bmdlbjEdMBsGA1UEAwwUYXNzZW1ibGFnZS5kYy5rYXUuc2UwHhcNMjAxMjE2MTIw
-ODU2WhcNMjExMjE2MTIwODU2WjCBjjELMAkGA1UEBhMCU0UxFDASBgNVBAgMC1bD
-g8Kkcm1sYW5kMREwDwYDVQQHDAhLYXJsc3RhZDEeMBwGA1UECgwVS2FybHN0YWRz
-IHVuaXZlcnNpdGV0MRcwFQYDVQQLDA5JVC1hdmRlbG5pbmdlbjEdMBsGA1UEAwwU
-YXNzZW1ibGFnZS5kYy5rYXUuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQDIQGbxzh5kHch6ubGpoEWqQ7q5JgY9akUnUsa9v9+io1pifnkntoVKi96Q
-on8mRzfUlScTe8W5BEy5bad8EY79YJMbDxkkWJOW0nbOfhLaZMRphUvQX6/Jf94B
-q3zt91d5zjeh2UC0/253Y3lS852E0FFt9x6T/PEJlWIsRQGoZv7SnDNbp0Rt2SqD
-yCGwh2ZMjxfI7umli03Y2CREmBhQLclpY1twvpFjSL05lgNe25ADyEVMChVWF57w
-bl49Hs7o8VuzB4WGFzigF1yiM2W7ybKcPcBPaSOYjmQTCwfx7PRwP4GvdvitL8GT
-LDQ06gt7iMnCwvc2KTQIIZ1LQG6fAgMBAAEwDQYJKoZIhvcNAQELBQADggEBABCs
-++HUv5z4OoA8RM2jsGDe1oosKGuGzVsKPoOlDaw8ZPUhA0GvcvWikYunApLFveRV
-m9jA091y3aQnungdlfM/T2vcBDvrhjNoJ+Ihuuof9oSVQC2iRCAm/xpMxTl8jxv0
-DiSo3QBsSXfPyjiiRSjqioeeNxqdvYo2wQyeoelxl3M7BPbVKgDc834wCQ4Gz10g
-UAvGMv1BeEL04ENhlvMmWG5dORDIzaFyvtWyKWISlweiIYobihDH4fQCl1YnmgyI
-YBSLpNvYX+GG72wreBmRztFqQt6wozucSTHZ5XUZmpbaVL15eDJsrBERSaDSfbNS
-AlmixXjhfsB2tYk7EIc=
+          <ds:X509Certificate>MIIF/zCCA+egAwIBAgIUQsXEVA9p+AzPS8CSfxzLP3NF7ZMwDQYJKoZIhvcNAQEL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 </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
-      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
-      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
-    </KeyDescriptor>
-    <AssertionConsumerService index="1" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://assemblage.dc.kau.se/login/callback"/>
-  </SPSSODescriptor>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+    </md:KeyDescriptor>
+    <md:AssertionConsumerService index="1" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://assemblage.dc.kau.se/login/callback"/>
+  </md:SPSSODescriptor>
   <md:Organization>
-    <md:OrganizationName xml:lang="en">KAU</md:OrganizationName>
-    <md:OrganizationName xml:lang="sv">KAU</md:OrganizationName>
-    <md:OrganizationDisplayName xml:lang="en">Karlstad University</md:OrganizationDisplayName>
-    <md:OrganizationDisplayName xml:lang="sv">Karlstads universitet</md:OrganizationDisplayName>
+    <md:OrganizationName xml:lang="en">Karlstad University</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Karlstads universitet</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">KAU</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="sv">KAU</md:OrganizationDisplayName>
     <md:OrganizationURL xml:lang="en">https://www.kau.se/en</md:OrganizationURL>
     <md:OrganizationURL xml:lang="sv">https://www.kau.se</md:OrganizationURL>
   </md:Organization>
@@ -93,4 +123,8 @@ AlmixXjhfsB2tYk7EIc=
     <md:SurName>IT-avdelningen</md:SurName>
     <md:EmailAddress>mailto:2525@kau.se</md:EmailAddress>
   </md:ContactPerson>
+  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <md:GivenName>Incident Response Team, IT department</md:GivenName>
+    <md:EmailAddress>mailto:irt@kau.se</md:EmailAddress>
+  </md:ContactPerson>
 </md:EntityDescriptor>
-- 
cgit v1.2.3