blob: 5242283e9c669cb7d334b24411009f83dce157ec (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://metadata.swamid.se/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2021-03-30T17:16:47Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdattr:EntityAttributes>
<samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
<samla:AttributeValue>https://refeds.org/category/personalized</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="sv">SWAMID Metadatahanterare</mdui:DisplayName>
<mdui:DisplayName xml:lang="en">SWAMID Metadata admin tool</mdui:DisplayName>
<mdui:Description xml:lang="sv">Detta är en tjänst för att hantera metadata för entiteter i SWAMID.</mdui:Description>
<mdui:Description xml:lang="en">This is a service for handling Metdadata for entities in SWAMID.</mdui:Description>
<mdui:InformationURL xml:lang="sv">https://metadata.swamid.se/</mdui:InformationURL>
<mdui:InformationURL xml:lang="en">https://metadata.swamid.se/</mdui:InformationURL>
<mdui:Logo xml:lang="en" height="100" width="115">https://metadata.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
<mdui:Logo xml:lang="sv" height="100" width="115">https://metadata.swamid.se/swamid-logo-2-100x115.png</mdui:Logo>
<mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/SWAMID/SWAMID+Metadata+admin+tool+-+Privacy+Policy?showLanguage=en_GB</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/SWAMID/SWAMID+Metadata+admin+tool+-+Privacy+Policy?showLanguage=sv_SE</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:KeyName>metadata.swamid.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=metadata.swamid.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFCDCCAvCgAwIBAgIUXhZTS1ioHrb7SRXJ+A5gFxEgxXswDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:KeyName>metadata.swamid.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=metadata.swamid.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFCDCCAvCgAwIBAgIUUqfFg9jqcAJ1NxLzR15E15dVG/IwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://metadata.swamid.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://metadata.swamid.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://metadata.swamid.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://metadata.swamid.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://metadata.swamid.se/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://metadata.swamid.se/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://metadata.swamid.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://metadata.swamid.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://metadata.swamid.se/Shibboleth.sso/SAML2/ECP" index="4"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">Metadata for SWAMID</md:ServiceName>
<md:ServiceName xml:lang="sv">Metadata for SWAMID</md:ServiceName>
<md:RequestedAttribute FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">The Swedish Research Council</md:OrganizationName>
<md:OrganizationName xml:lang="sv">Vetenskapsrådet</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">Swedish Academic Identity Federation (SWAMID)</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.swamid.se</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">http://www.swamid.se</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="administrative">
<md:GivenName>SWAMID Operations</md:GivenName>
<md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:GivenName>SWAMID Operations</md:GivenName>
<md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:GivenName>SWAMID Operations</md:GivenName>
<md:EmailAddress>mailto:operations@swamid.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
