swamid-2.0/administrationsverktyg.umu.se-shibboleth.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://administrationsverktyg.umu.se/shibboleth">
  <md:Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2017-12-12T10:13:50Z">
      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    <mdattr:EntityAttributes>
      <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
      </samla:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/DS/ds.swamid.se"/>
      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/DS/ds.swamid.se" index="1"/>
      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/Loginx"/>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="sv">Produktionssystem för administration av användarkonton vid Umeå universitet</mdui:DisplayName>
        <mdui:DisplayName xml:lang="en">Production environment for user accounts at Umea University</mdui:DisplayName>
        <mdui:Description xml:lang="sv">Administration av användarkonton</mdui:Description>
        <mdui:Description xml:lang="en">Administration of user accounts</mdui:Description>
        <mdui:PrivacyStatementURL xml:lang="en">https://administrationsverktyg.umu.se/privacy/?system=https://administrationsverktyg.umu.se/shibboleth&amp;lang=en</mdui:PrivacyStatementURL>
        <mdui:PrivacyStatementURL xml:lang="sv">https://administrationsverktyg.umu.se/privacy/?system=https://administrationsverktyg.umu.se/shibboleth&amp;lang=sv</mdui:PrivacyStatementURL>
        <mdui:InformationURL xml:lang="en">https://administrationsverktyg.umu.se/privacy/Information?system=https://administrationsverktyg.umu.se/shibboleth&amp;lang=en</mdui:InformationURL>
        <mdui:InformationURL xml:lang="sv">https://administrationsverktyg.umu.se/privacy/Information?system=https://administrationsverktyg.umu.se/shibboleth&amp;lang=sv</mdui:InformationURL>
      </mdui:UIInfo>
      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/adfs"/>
      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/eduid"/>
    </md:Extensions>
    <md:KeyDescriptor>
      <ds:KeyInfo>
        <ds:KeyName>administrationsverktyg.umu.se</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>emailAddress=tommy.larsson@umu.se,CN=administrationsverktyg.umu.se,OU=ITS,O=ITS,L=Umea,ST=vasterbotten,C=SE</ds:X509SubjectName>
          <ds:X509Certificate>MIIEEDCCAvigAwIBAgIJAJ5qWBv+yDyJMA0GCSqGSIb3DQEBCwUAMIGcMQswCQYD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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/Artifact"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/POST"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/Redirect"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SLO/SOAP"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML/Artifact" index="6"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML/POST" index="7"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML2/Artifact" index="8"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML2/ECP" index="9"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://administrationsverktyg.umu.se/Shibboleth.sso/SAML2/POST" index="10"/>
    <md:AttributeConsumingService index="1">
      <md:ServiceName xml:lang="en">Administration of user accounts at Umea University</md:ServiceName>
      <md:ServiceName xml:lang="sv">Administration av användarkonton vid Umeå universitet</md:ServiceName>
      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">Umea University</md:OrganizationName>
    <md:OrganizationName xml:lang="sv">Umeå universitet</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="sv">Umeå universitet</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="en">Umea University</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="sv">https://www.umu.se</md:OrganizationURL>
    <md:OrganizationURL xml:lang="en">https://www.umu.se/en/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="administrative">
    <md:Company>Umeå University</md:Company>
    <md:SurName>ITS datordrift</md:SurName>
    <md:EmailAddress>mailto:datordrift@its.umu.se</md:EmailAddress>
    <md:TelephoneNumber>+46 90 786 6300</md:TelephoneNumber>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:Company>Umeå University</md:Company>
    <md:SurName>ITS datordrift</md:SurName>
    <md:EmailAddress>mailto:datordrift@its.umu.se</md:EmailAddress>
    <md:TelephoneNumber>+46 90 786 6300</md:TelephoneNumber>
  </md:ContactPerson>
  <md:ContactPerson contactType="support">
    <md:Company>Umeå University</md:Company>
    <md:SurName>ITS datordrift</md:SurName>
    <md:EmailAddress>mailto:datordrift@its.umu.se</md:EmailAddress>
    <md:TelephoneNumber>+46 90 786 6300</md:TelephoneNumber>
  </md:ContactPerson>
  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
    <md:GivenName>UmU Incident Response Team</md:GivenName>
    <md:EmailAddress>mailto:abuse@umu.se</md:EmailAddress>
    <md:TelephoneNumber>+46 90 786 6300</md:TelephoneNumber>
  </md:ContactPerson>
</md:EntityDescriptor>