blob: 0ed3ee551b59ce62b01d11b8a6f7a2d1e2acfc29 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://bankid.eduid.se/saml2-metadata">
<md:Extensions>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2023-11-28T08:08:28Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
<md:Extensions>
<mdui:UIInfo>
<mdui:Description xml:lang="en">eduID Sweden BankID identity verification</mdui:Description>
<mdui:Description xml:lang="sv">eduID Sverige BankID identitetsverifiering</mdui:Description>
<mdui:DisplayName xml:lang="en">eduID Sweden BankID identity verification</mdui:DisplayName>
<mdui:DisplayName xml:lang="sv">eduID Sverige BankID identitetsverifiering</mdui:DisplayName>
<mdui:InformationURL xml:lang="en">https://eduid.se/faq</mdui:InformationURL>
<mdui:InformationURL xml:lang="sv">https://eduid.se/faq</mdui:InformationURL>
<mdui:Logo xml:lang="en" height="100" width="290">https://eduid.se/static/img/eduid-logo-black.svg</mdui:Logo>
<mdui:Logo xml:lang="sv" height="100" width="290">https://eduid.se/static/img/eduid-logo-black.svg</mdui:Logo>
<mdui:PrivacyStatementURL xml:lang="en">https://sunet.se/om-sunet/behandling-av-personuppgifter-i-eduid</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://sunet.se/om-sunet/behandling-av-personuppgifter-i-eduid</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIFQTCCAymgAwIBAgIUEDJ0GhjyUJyOgdoQ46JBiWMtIu8wDQYJKoZIhvcNAQEL
BQAwMDELMAkGA1UEBhMCU0UxITAfBgNVBAMMGGJhbmtpZC0yMDIzMTEzMC5lZHVp
ZC5zZTAeFw0yMzExMzAwNzM4MDFaFw0zMzExMjcwNzM4MDFaMDAxCzAJBgNVBAYT
AlNFMSEwHwYDVQQDDBhiYW5raWQtMjAyMzExMzAuZWR1aWQuc2UwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCu9lbUTBfo5rbl5//tSzc7RnSfepjx3WyG
s/QXYaOLgbGB1Iw/yBlWJpqSAGCgxg6fA29B9r6Esf1SRTFET8Qrishsi+vaFa32
EAkcMNfqf/rNicyZMDCvuRVCFfWa1JVbNiFlOQh9fhr8Q116QN07wxt95Mr60tSF
mmjyde+AIZa2GnLiTM76dE5dSITE7PH1GsKS/DOhqhxNqEJyQ/3Drvcl63fFbCHA
zGVqnsKfrK91S1d5KDqnor/MPENzx71UNFvM7O9Vb1EI5KjCai4KKhc/r8exXC48
rbyLHE2PFaMmaymPGbFh7dpL4Ohf9YXvlOm9xGMERYkkl29grKZNNXarr1uR27fz
2IkyMWDJa8Pk0g1VJ7vKrpN9liFnBmXupws6L6i3OeU93G7uSC/ynPWRL072gyUx
Pr8yLavVTjqAWENhOWfv8g/wwu71elamxumtAJlTc9jqJRDyeaWpXE/o3/zzmA7S
sjmRuweyXOsb37emSw7JJVjpQExpo5jAjTjsGhKJoVnnCY//+7GaAi3efVBdEVh+
kr+ocW9zq3yu8MipkiassRjnxFHNuGZLF9YmkpGGKc70iwHUmXR4mSKOhgBycD1U
dFWzZTUNV003CDpNPT1zDesPkuLelnx3E1G3HRW6YTduOd3LZeurRSwQHTSHNA5F
qR9gvi7VLwIDAQABo1MwUTAdBgNVHQ4EFgQUP5oFLNh4Xj/Aa3P9wbl820Bfvpww
HwYDVR0jBBgwFoAUP5oFLNh4Xj/Aa3P9wbl820BfvpwwDwYDVR0TAQH/BAUwAwEB
/zANBgkqhkiG9w0BAQsFAAOCAgEAcWuPu6Ntfj71MLLV7OsDg8jfyrAt3EvXt8ZH
bHnrcXNyAlxocDKUj8p4PBL1GSE1holpbKhAJbo2eX04AA4JVlghR+D/84cOMY4N
lRBDBVeRx2JaifFAxBKGD8Lhi795O9YmahUSfxTWkAtHjKBdD8aCFRGwpM1Au7Yf
U1YYyBtzaxAmUCs8lL+bm2/fQNjuctpOFhRj8QEZKQJdtNFWGm3J0SLz9xZ97kla
RBQhLpn1R5/CoUfV8m9fxiAuBGgJGGwFs91KzLbPAfLRAcBaf4DJ54HY0F5BNmkM
TKGQwKluTS3TqbMrV/qUKBWGL5O/VDGFb1KAmhDLDk5az/JoAo97cqCAOTBblWa4
8njGHIHgdeaZMhjYGio2nG0bMj7elSLFIfPCsH6PskGbmGZSeKNK+ST/nkWsKLwO
KzwAZktCO3b7iJnhwvZscnxqztTeLlDX+2XJXb3rD5nLrKBdIyrGCaj7QwWk+D24
2RYmSg6t4WHnDp2zJV43k8tP7G+6xZbGi1ZEcgt8w5e4/5vOtiThGBuNYQi72uSJ
vtJEivW20Ysen3BXJ5L5uM627fIH1ryL9VHtbtwHgqUHjM5mqiOlFpyfl7tYUWRu
niEmCSUHEXXk2GFUQj/mgF+VAEVG/5YvWQke/XQhTyq7ih+5kR0n49pQr3UO3+FU
GETOy+U=</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIFQTCCAymgAwIBAgIUEDJ0GhjyUJyOgdoQ46JBiWMtIu8wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bankid.eduid.se/logout"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bankid.eduid.se/saml2-acs" index="1"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">eduID Sweden BankID SP</md:ServiceName>
<md:ServiceName xml:lang="sv">eduID Sverige BankID-SP</md:ServiceName>
<md:RequestedAttribute Name="urn:oid:1.2.752.29.4.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="personalIdentityNumber" isRequired="true"/>
<md:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="displayName" isRequired="true"/>
<md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="givenName" isRequired="true"/>
<md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="sn" isRequired="true"/>
<md:RequestedAttribute Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="transactionIdentifier" isRequired="true"/>
<md:RequestedAttribute Name="urn:oid:1.2.752.201.3.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="authContextParams" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
<md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Sunet</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">Sunet</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://sunet.se</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://sunet.se</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:Company>Vetenskapsrådet</md:Company>
<md:GivenName>SUNET eduID team</md:GivenName>
<md:EmailAddress>mailto:feedback@eduid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="administrative">
<md:GivenName>SUNET eduID team</md:GivenName>
<md:EmailAddress>mailto:feedback@eduid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:GivenName>eduID Support</md:GivenName>
<md:EmailAddress>mailto:support@eduid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
