blob: 2e5ea64fc339af33559e68d121f1895503ad5a68 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://administrationsverktyg.umu.se/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
<mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
<samla:AttributeValue>http://www.swamid.se/category/hei-service</samla:AttributeValue>
<samla:AttributeValue>http://www.swamid.se/category/research-and-education</samla:AttributeValue>
<samla:AttributeValue>http://www.swamid.se/category/sfs-1993-1153</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
<md:Extensions>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/DS/ds.swamid.se"/>
<idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/DS/ds.swamid.se" index="1"/>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/IDP"/>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/Loginx"/>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="sv">Produktionssystem för administration av användarkonton vid Umeå universitet</mdui:DisplayName>
<mdui:DisplayName xml:lang="en">Production environment for user accounts at Umea University</mdui:DisplayName>
<mdui:Description xml:lang="sv">Administration av användarkonton</mdui:Description>
<mdui:Description xml:lang="en">Administration of user accounts</mdui:Description>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor>
<ds:KeyInfo>
<ds:KeyName>administrationsverktyg.umu.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>emailAddress=tommy.larsson@umu.se,CN=administrationsverktyg.umu.se,OU=its,O=umea university,L=umea,ST=umea,C=SE</ds:X509SubjectName>
<ds:X509Certificate>MIIE0DCCA7igAwIBAgIJAKyNek9su3+oMA0GCSqGSIb3DQEBCwUAMIGgMQswCQYD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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIEEDCCAvigAwIBAgIJAJ5qWBv+yDyJMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/Artifact"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/SOAP"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/NIM/Artifact"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/NIM/POST"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/NIM/Redirect"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/NIM/SOAP"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML/Artifact" index="6"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML/POST" index="7"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML2/Artifact" index="8"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML2/ECP" index="9"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML2/POST" index="10"/>
</md:SPSSODescriptor>
<md:ContactPerson contactType="administrative">
<md:GivenName>Tommy</md:GivenName>
<md:SurName>Larsson</md:SurName>
<md:EmailAddress>mailto:tommy.larsson@umu.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
