blob: d967361c1a36e6a95fbf4e88be322ba9270fdc71 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://demo04.extutv.ladok.se/gui-sp">
<md:Extensions>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdattr:EntityAttributes>
<samla:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>https://refeds.org/sirtfi</samla:AttributeValue>
<samla:AttributeValue>https://refeds.org/sirtfi2</samla:AttributeValue>
</samla:Attribute>
<samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>https://refeds.org/category/personalized</samla:AttributeValue>
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2024-12-17T20:03:49Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</md:Extensions>
<md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/Login"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/Login" index="1"/>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="sv">Ladok för personal demo04.extutv.ladok.se</mdui:DisplayName>
<mdui:DisplayName xml:lang="en">Ladok for employees demo04.extutv.ladok.se</mdui:DisplayName>
<mdui:Description xml:lang="sv">Ladok är en central tjänst för studieadministration riktad till studenter och studieadministrativ personal på universitet och högskolor i Sverige.</mdui:Description>
<mdui:Description xml:lang="en">Ladok is a central service for study administration aimed at students and study administrative staff at higher education institutions in Sweden.</mdui:Description>
<mdui:Logo xml:lang="sv" width="64" height="64">https://www.start.ladok.se/logo/ladok_sv.png</mdui:Logo>
<mdui:Logo xml:lang="en" width="64" height="64">https://www.start.ladok.se/logo/ladok_en.png</mdui:Logo>
<mdui:InformationURL xml:lang="sv">https://ladokkonsortiet.se/vara-tjanster/systemet-ladok</mdui:InformationURL>
<mdui:InformationURL xml:lang="en">https://ladokkonsortiet.se/in-english/about-us/the-ladok-system</mdui:InformationURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://ladokkonsortiet.se/om-oss/policies-och-dokument/overforing-av-personuppgifter-till-ladok-i-samband-med-federerad-inloggning</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="en">https://ladokkonsortiet.se/in-english/about-us/policies-and-documents/transfer-of-personal-data-to-ladok-when-using-federated-login</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:KeyName>https://demo04.extutv.ladok.se/gui-sp</ds:KeyName>
<ds:KeyName>demo04.extutv.ladok.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=demo04.extutv.ladok.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFIDCCAwigAwIBAgIUKhTt+VOihcICWJkw0/a2te87VfwwDQYJKoZIhvcNAQELBQAwITEfMB0GA1UEAwwWZGVtbzA0LmV4dHV0di5sYWRvay5zZTAeFw0yNDA4MTIxNTE4MzdaFw0zNDA4MTAxNTE4MzdaMCExHzAdBgNVBAMMFmRlbW8wNC5leHR1dHYubGFkb2suc2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD1GV30W7VvIBsV7zixnL8u+4QjBtbvdaQfl4pSkyK1r/wDjMANEUuu7ocFbZZFR005Kha4Hrf2Rm78i6wUIjPewZb/lkx5y10v0zRUKrn/4hSyye9omgzwjczRkqReozVofg9Pvv3GTkKkALsyskfHSrq9+pFmoOCzRopm6Vb/hX3vlFJRozmZAabIqtiuoeU6xQ1KaaLa1yEr/xfsdEphJZidov9ksvkfo8zLoWjSg9hhA1Upr5o8D7eMSAviqvewGgt8WggewjhkXY3McrkUUO9sD6tp/46iOuuYTmB1xMzFrOl3eN8FB6byPnpebcU8sgI4s4VFAUJ5LEzfKB9XEpcQHzlPoXSSXngr/h3YsBlktpr7so4D3VKCEYEucQ+JquvZCxVw/uWXxjnZWcpogRJsdwnerr0KQu4ecswqzMDdgI9zc6a8Eh79XZpakl0zp+qvdBZE7onsOhhHublK3DcA2i+p+d3FwurQp5g8xMnyyrpYOCmiHBXAxzAoDBLJkEDoSKeZx4uupLJiQzSwArGy2rbP5H5vL9RVkih1kHzoWHOcTZrCfeDGdZ8PrFO2vWBxbR5JHCq9ZatZ3dBO5h/mKhJxihfB/DKFKLlZWdufmEXOiTL75G52RbQmWUyScBWxNclY8f5TXEEGyAAfBStCwDgRPZLBC6fQX9VzowIDAQABo1AwTjAdBgNVHQ4EFgQU/wWQVR/fLp2DwAgdTOoR79qkI88wHwYDVR0jBBgwFoAU/wWQVR/fLp2DwAgdTOoR79qkI88wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEA0qq0i/wU703fM8qZofxMrA39iI5YYj1l50TdH9Z2zcRbqjeGnW+pe4mU/vRiVPFUTvMbgVkP98GfZyRB5AESdz4Tgz9TbMWyW+EgFXqgNzKeA6ymbRegoYFcxf7xAP/dgxIYH/LG32EWQNHFUu0eFyEMkE9xBLmcWJFsKJKoQVSP+Aq5ADfiAQDHw71QHCq1yCWa6R29S4Z2eyYAvK5MbolLrZsP57dlvN6AZhbBc/I7d5KYcVpxydmf62Kh5XbpbZ1kdVx0KtO+A8jzcZk3LyN7dPmcCtjvBiThEwJwFKtEqzxJYnuCsrgVttjdXQ0SAOMFnIeWHcXcx+QIwzneq53XCGtWP8jQ2dMuhcKE9xuDSf/8Hmm5i8o9807f3gG0DMxVXbNbP33/Ov1ULWRwZNbPLiVa6KAQOSJn8rDND90vIZd8kbjCIn4YQLtzOB0Ofg6NQR98GR74ejV/8pEL8zk6nD7F/JpaDFzTQm4TSZRhv9HeLdzTHbWUCrTdOFNhinh9Gzr65XtMGid3SUcmLN4KcnHoGIk82UIQDwB6LqD++GtS2Jl1ppHCiyS2en8AY5dcQC3MJ40YJSf+QQdkgw7EogHGCJtLqj9GOdJanHCWjyVZqLtTeGVYmf4Sio/r6AopBkoiOUIB3GHS47Z4LmLQvamR5BVfmDtK6m5ihbU=</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:KeyName>https://demo04.extutv.ladok.se/gui-sp</ds:KeyName>
<ds:KeyName>demo04.extutv.ladok.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=demo04.extutv.ladok.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFIDCCAwigAwIBAgIUKhTt+VOihcICWJkw0/a2te87VfwwDQYJKoZIhvcNAQELBQAwITEfMB0GA1UEAwwWZGVtbzA0LmV4dHV0di5sYWRvay5zZTAeFw0yNDA4MTIxNTE4MzdaFw0zNDA4MTAxNTE4MzdaMCExHzAdBgNVBAMMFmRlbW8wNC5leHR1dHYubGFkb2suc2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD1GV30W7VvIBsV7zixnL8u+4QjBtbvdaQfl4pSkyK1r/wDjMANEUuu7ocFbZZFR005Kha4Hrf2Rm78i6wUIjPewZb/lkx5y10v0zRUKrn/4hSyye9omgzwjczRkqReozVofg9Pvv3GTkKkALsyskfHSrq9+pFmoOCzRopm6Vb/hX3vlFJRozmZAabIqtiuoeU6xQ1KaaLa1yEr/xfsdEphJZidov9ksvkfo8zLoWjSg9hhA1Upr5o8D7eMSAviqvewGgt8WggewjhkXY3McrkUUO9sD6tp/46iOuuYTmB1xMzFrOl3eN8FB6byPnpebcU8sgI4s4VFAUJ5LEzfKB9XEpcQHzlPoXSSXngr/h3YsBlktpr7so4D3VKCEYEucQ+JquvZCxVw/uWXxjnZWcpogRJsdwnerr0KQu4ecswqzMDdgI9zc6a8Eh79XZpakl0zp+qvdBZE7onsOhhHublK3DcA2i+p+d3FwurQp5g8xMnyyrpYOCmiHBXAxzAoDBLJkEDoSKeZx4uupLJiQzSwArGy2rbP5H5vL9RVkih1kHzoWHOcTZrCfeDGdZ8PrFO2vWBxbR5JHCq9ZatZ3dBO5h/mKhJxihfB/DKFKLlZWdufmEXOiTL75G52RbQmWUyScBWxNclY8f5TXEEGyAAfBStCwDgRPZLBC6fQX9VzowIDAQABo1AwTjAdBgNVHQ4EFgQU/wWQVR/fLp2DwAgdTOoR79qkI88wHwYDVR0jBBgwFoAU/wWQVR/fLp2DwAgdTOoR79qkI88wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEA0qq0i/wU703fM8qZofxMrA39iI5YYj1l50TdH9Z2zcRbqjeGnW+pe4mU/vRiVPFUTvMbgVkP98GfZyRB5AESdz4Tgz9TbMWyW+EgFXqgNzKeA6ymbRegoYFcxf7xAP/dgxIYH/LG32EWQNHFUu0eFyEMkE9xBLmcWJFsKJKoQVSP+Aq5ADfiAQDHw71QHCq1yCWa6R29S4Z2eyYAvK5MbolLrZsP57dlvN6AZhbBc/I7d5KYcVpxydmf62Kh5XbpbZ1kdVx0KtO+A8jzcZk3LyN7dPmcCtjvBiThEwJwFKtEqzxJYnuCsrgVttjdXQ0SAOMFnIeWHcXcx+QIwzneq53XCGtWP8jQ2dMuhcKE9xuDSf/8Hmm5i8o9807f3gG0DMxVXbNbP33/Ov1ULWRwZNbPLiVa6KAQOSJn8rDND90vIZd8kbjCIn4YQLtzOB0Ofg6NQR98GR74ejV/8pEL8zk6nD7F/JpaDFzTQm4TSZRhv9HeLdzTHbWUCrTdOFNhinh9Gzr65XtMGid3SUcmLN4KcnHoGIk82UIQDwB6LqD++GtS2Jl1ppHCiyS2en8AY5dcQC3MJ40YJSf+QQdkgw7EogHGCJtLqj9GOdJanHCWjyVZqLtTeGVYmf4Sio/r6AopBkoiOUIB3GHS47Z4LmLQvamR5BVfmDtK6m5ihbU=</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SLO/Artifact"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/SOAP"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/Redirect"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/POST"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/NIM/Artifact"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://demo04.extutv.ladok.se/Shibboleth.sso/SAML2/ECP" index="4"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="sv">Ladok för personal</md:ServiceName>
<md:ServiceName xml:lang="en">Ladok for employees</md:ServiceName>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="sv">Umeå universitet</md:OrganizationName>
<md:OrganizationName xml:lang="en">Umea University</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="sv">Ladokkonsortiet</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="en">Ladok Consortium</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="sv">https://ladokkonsortiet.se/</md:OrganizationURL>
<md:OrganizationURL xml:lang="en">https://ladokkonsortiet.se/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="administrative">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladokincident@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
</md:EntityDescriptor>
|
