blob: 500d792969b354fa9ad5940ce5d54dd4a51a2b9f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://metadata.lab.swamid.se/shibboleth">
<md:Extensions>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2021-10-26T09:33:57Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes>
<samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
<samla:AttributeValue>https://refeds.org/category/personalized</samla:AttributeValue>
</samla:Attribute>
<samla:Attribute Name="https://refeds.org/entity-selection-profile" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>eyJwcm9maWxlcyI6eyJlZHVnYWluIjp7ImVudGl0aWVzIjpbeyJpbmNsdWRlIjpmYWxzZSwibWF0Y2giOiJyZWdpc3RyYXRpb25BdXRob3JpdHkiLCJzZWxlY3QiOiJodHRwczovL29wZW5hdGhlbnMubmV0In1dLCJzdHJpY3QiOiB0cnVlfX19</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://metadata.lab.swamid.se/Shibboleth.sso/Login"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://metadata.lab.swamid.se/Shibboleth.sso/Login" index="1"/>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/seamless-access"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/seamless-access" index="2"/>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/thiss.io"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/thiss.io" index="3"/>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/swamid-qa"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/swamid-qa" index="4"/>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/fidus"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://metadata.lab.swamid.se/Shibboleth.sso/DS/fidus" index="5"/>
<mdui:UIInfo>
<mdui:Description xml:lang="en">This is a service for handling Metdadata for entities in SWAMID.</mdui:Description>
<mdui:Description xml:lang="sv">Detta är en tjänst för att hantera metadata för entiteter i SWAMID.</mdui:Description>
<mdui:DisplayName xml:lang="en">SWAMID Metdata admin tool - lab</mdui:DisplayName>
<mdui:DisplayName xml:lang="sv">SWAMID Metadatahanterare - lab</mdui:DisplayName>
<mdui:InformationURL xml:lang="en">https://metadata.swamid.se/</mdui:InformationURL>
<mdui:InformationURL xml:lang="sv">https://metadata.swamid.se/</mdui:InformationURL>
<mdui:Logo xml:lang="en" height="115" width="100">https://metadata.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
<mdui:Logo xml:lang="sv" height="115" width="100">https://metadata.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
<mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/SWAMID/SWAMID+Metadata+admin+tool+-+Privacy+Policy?showLanguage=en_GB</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/SWAMID/SWAMID+Metadata+admin+tool+-+Privacy+Policy?showLanguage=sv_SE</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:KeyName>metadata.lab.swamid.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=metadata.lab.swamid.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFFDCCAvygAwIBAgIUVYf53WMuAj58/hsBc2mg0Lv+6qQwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:KeyName>metadata.lab.swamid.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=metadata.lab.swamid.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFFDCCAvygAwIBAgIUL1D5kZhcZB94llPjPjhFrrhRn7IwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://metadata.lab.swamid.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://metadata.lab.swamid.se/Shibboleth.sso/SAML2/ECP" index="4"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">Metadata admin for SWAMID</md:ServiceName>
<md:ServiceName xml:lang="sv">Metadata admin for SWAMID</md:ServiceName>
<md:RequestedAttribute FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
<md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://www.swamid.se/</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://www.swamid.se/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="administrative">
<md:GivenName>SWAMID Operations</md:GivenName>
<md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:GivenName>SWAMID Operations</md:GivenName>
<md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:GivenName>SWAMID Operations</md:GivenName>
<md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|