blob: 3bf5c37b11ac0f5334215d26fc2dd151af74fa70 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://account-idac.ki.se/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2019-05-28T16:34:22Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdattr:EntityAttributes>
<samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
<samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://account.ki.se/Shibboleth.sso/Login"/>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="sv">KI Account</mdui:DisplayName>
<mdui:DisplayName xml:lang="en">KI Account</mdui:DisplayName>
<mdui:Description xml:lang="sv">Kontohantering/aktivering för anställda, studenter, m.fl. som har konto på KI</mdui:Description>
<mdui:Description xml:lang="en">Account management/activation for employees, students and others with accounts at KI</mdui:Description>
<mdui:InformationURL xml:lang="en">https://account.ki.se</mdui:InformationURL>
<mdui:InformationURL xml:lang="sv">https://account.ki.se</mdui:InformationURL>
<mdui:PrivacyStatementURL xml:lang="en">https://account.ki.se/pp_en.html</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://account.ki.se/pp_sv.html</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:KeyName>kiaccount02</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=kiaccount02</ds:X509SubjectName>
<ds:X509Certificate>MIID6DCCAlCgAwIBAgIJALYKDgHvZN4tMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNV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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:KeyName>kiaccount02</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=kiaccount02</ds:X509SubjectName>
<ds:X509Certificate>MIID6DCCAlCgAwIBAgIJAI6eisFXz5z5MA0GCSqGSIb3DQEBCwUAMBYxFDASBgNV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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://account.ki.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://account.ki.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://account.ki.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://account.ki.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://account.ki.se/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://account.ki.se/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://account.ki.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://account.ki.se/Shibboleth.sso/SAML2/ECP" index="4"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">KI Account</md:ServiceName>
<md:ServiceName xml:lang="sv">KI Account</md:ServiceName>
<md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Karolinska Institutet</md:OrganizationName>
<md:OrganizationName xml:lang="sv">Karolinska Institutet</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="sv">Karolinska Institutet</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="en">Karolinska Institutet</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://ki.se</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://ki.se</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:Company>Karolinska Institutet</md:Company>
<md:EmailAddress>mailto:selfservice@ki.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:Company>Karolinska Institutet</md:Company>
<md:EmailAddress>mailto:selfservice@ki.se</md:EmailAddress>
<md:TelephoneNumber>+46 8 524 82222</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson contactType="administrative">
<md:Company>Karolinska Institutet</md:Company>
<md:EmailAddress>mailto:selfservice@ki.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:Company>Karolinska Institutet</md:Company>
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:abuse@ki.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
