blob: 4e4917b2f3e7aa9102d5d408f783a1725dcbc0ee (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
|
<?xml version="1.0" encoding="UTF-8"?>
<!-- v20210623 -->
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://inacademia.org/metadata/inacademia-simple-validation.xml">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2017-04-10T18:49:39Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>https://refeds.org/sirtfi</samla:AttributeValue>
</samla:Attribute>
<samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
<samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue>
</samla:Attribute>
<samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:profiles:subject-id:req" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>any</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="en">InAcademia Affiliation Validation Service</mdui:DisplayName>
<mdui:DisplayName xml:lang="de">InAcademia Affiliation Validation Service</mdui:DisplayName>
<mdui:Description xml:lang="en">InAcademia validates the academic affiliation assigned to users by home institutions. This data is provided in pseudonymised form to registered services that request it.</mdui:Description>
<mdui:Description xml:lang="de">InAcademia prüft die akademische Zugehörigkeit die Heimatuniversitäten Anwendern zugewiesen haben. Diese Daten werden auf Anforderung in pseudonymisierter Form an registrierte Services weitergeleitet.</mdui:Description>
<mdui:Keywords xml:lang="en">Academic Affiliation Validation</mdui:Keywords>
<mdui:Keywords xml:lang="de">Academic Affiliation Validation</mdui:Keywords>
<mdui:Logo xml:lang="en" height="75" width="276">https://inacademia.org/wp-content/uploads/2019/10/inacademia_logo_main.png</mdui:Logo>
<mdui:Logo xml:lang="de" height="75" width="276">https://inacademia.org/wp-content/uploads/2019/10/inacademia_logo_main.png</mdui:Logo>
<mdui:InformationURL xml:lang="en">https://inacademia.org/about</mdui:InformationURL>
<mdui:InformationURL xml:lang="de">https://inacademia.org/about</mdui:InformationURL>
<mdui:PrivacyStatementURL xml:lang="en">https://inacademia.org/privacy-statement/</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="de">https://inacademia.org/privacy-statement/</mdui:PrivacyStatementURL>
<mdui:Description xml:lang="sv">InAcademia validerar den akademiska tillhörighet som lärosätet tilldelats användaren. Dessa uppgifter tillhandahålls i pseudonymiserad form till registrerade tjänster som begär det.</mdui:Description>
<mdui:Logo xml:lang="sv" height="75" width="276">https://inacademia.org/wp-content/uploads/2019/10/inacademia_logo_main.png</mdui:Logo>
<mdui:DisplayName xml:lang="sv">InAcademia Affiliation Validation Service</mdui:DisplayName>
<mdui:InformationURL xml:lang="sv">https://inacademia.org/about</mdui:InformationURL>
<mdui:Keywords xml:lang="sv">Academic Affiliation Validation</mdui:Keywords>
<mdui:PrivacyStatementURL xml:lang="sv">https://inacademia.org/privacy-statement/</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIFrzCCA5egAwIBAgIJAJ7He1WDjB6qMA0GCSqGSIb3DQEBCwUAMG4xCzAJBgNV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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIFrzCCA5egAwIBAgIJAJ7He1WDjB6qMA0GCSqGSIb3DQEBCwUAMG4xCzAJBgNV
BAYTAkVVMRMwEQYDVQQIDApTb21lLVN0YXRlMRMwEQYDVQQKDApJbkFjYWRlbWlh
MRwwGgYDVQQLDBNTaWduaW5nIENlcnRpZmljYXRlMRcwFQYDVQQDDA5pbmFjYWRl
bWlhLm9yZzAeFw0xNzA3MDUxNjIxNDNaFw0yNzA3MDMxNjIxNDNaMG4xCzAJBgNV
BAYTAkVVMRMwEQYDVQQIDApTb21lLVN0YXRlMRMwEQYDVQQKDApJbkFjYWRlbWlh
MRwwGgYDVQQLDBNTaWduaW5nIENlcnRpZmljYXRlMRcwFQYDVQQDDA5pbmFjYWRl
bWlhLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL5A2uV67ia4
FD5vvzZiNsP5XcdaSxqkDxzf+zC4JfnY+2xRsxdCtznxCc1dfsrT4dbg/xfXfced
Fxz0GcNIXM6eQkxFUztUbIgkKjt8m2wsDHiByiG7b3PtAqh+ZozttDW5cKNMf67c
2qWS6g0/ZqDhGuyEVYpRVmFpKJ56/yGvSle5QLV2u/TEhJCt8z/4/EZdzjEY6ljb
M/LCbfPyJHgiPJZf6+oKvKVQrdixe88/Jy+ISRCGWoCyhs1LHLqs/17nK4huej/w
dmzn/e5Md6OFxnb6sJkNUmb3wCWyi03KJCR4W/I2LX0BKR38yQAf2YKaU2a77UN8
WYTDfgjyW8WbqTpZ85S3l1WKJ2dEiTiIvAfoodSgRye0YVBcZtcleMT+MAmZBKp7
TsBuCS78CZ7kr9BEKkR5c8bvjkCvcUzJK84WAdX2vsazhnF5oUT1QNeNe2LF51OD
VTQOPvDuI3upEJuZtQiHAKHvlApzm68LqtB+QI7YEqisMBu0q5xs8WSMEHakJa0y
cWEQPYaALZP09h06OSuUXWdXDFgJn9APDWEXtjZJq9zD/1E0cMjVm7cGpmAmH/Cv
9CfXL3YzYV25doENWiYP3AibLvs7RueYjr0iWpLZmi15tBgu3c991PkI2zx1n/uD
YHBMzLvjBSr72Tt4QigWMLVQR6PEDMONAgMBAAGjUDBOMB0GA1UdDgQWBBS2ESl6
idHz81HR/aAzMpc+wG+HLzAfBgNVHSMEGDAWgBS2ESl6idHz81HR/aAzMpc+wG+H
LzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQAlf6ttaoNN00b8PQS4
qsbuFIa/pxOKIRnchIMXWB1L/+0I5zdupkZ2Uumy6iunfpvNpWjrTY1hLZa+HtOD
Bquxan6QUm4+dmkfg1y0tzseZiKj2ZLy8wxsrLLf+q1EmHHKvuBDsn52OVWBZG/p
BbLT/uCwJaM7AnfIppETpGL4DFCkFspeLY2mgLqfz9fMRLeJRgPyXamS2CuB/bbX
GKCMlFjOKrRb1GNYu79IBNjKxIDnIV4IgqUhkTnRLqxfrexWQU9ANyCX/kexsAeU
pOvzwgwR3iwu77ry9b3AtMGQ/26QsaMjeD0SbbrfJT5ffMKRgYk8Yp5MflEyWVfI
tTbGHOCSaxyP7QL5hvlQMF+qqI/W6rLdj9PJ6OTH451btgiXPb/pv65Zq3F35BO6
9k89e4vhzUDLeSGGfKqDoDSdhFJqjiHWQecAq6BCChDpdIz/U/S7aSkOi4MKxk5q
kGC16780BusA1PbP9VmH6L18N9bYthe3zaVbYqMYiwIO9YvWWUe28q3OPUkfvSTa
32k/sfrJ0o+irX+aRVDE/CWEu+ltlG9e3iXk/RLt/n2eimTbMrhnPI21D5jgXmh9
zY91qGAJIzbynoNQ0cH6njsRUyfOiz/oVniEpxuoRj+TkXo6KuDIZQ930zli9LcL
YFDRpeiG/ZuZFBXEc7xgyiIa+Q==
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://op.srv.inacademia.org/InAcademiaBackend/acs/post" index="1"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">InAcademia Affiliation Validation Service</md:ServiceName>
<md:ServiceName xml:lang="de">InAcademia Affiliation Validation Service</md:ServiceName>
<md:ServiceName xml:lang="sv">InAcademia Affiliation Validation Service</md:ServiceName>
<md:ServiceDescription xml:lang="en">InAcademia validates the academic affiliation assigned to users by home institutions. This data is provided in pseudonymised form to registered services that request it.</md:ServiceDescription>
<md:ServiceDescription xml:lang="de"> InAcademia prüft die akademische Zugehörigkeit die Heimatuniversitäten Anwendern zugewiesen haben. Diese Daten werden auf Anforderung in pseudonymisierter Form an registrierte Services weitergeleitet.</md:ServiceDescription>
<md:ServiceDescription xml:lang="sv">InAcademia validerar den akademiska tillhörighet som lärosätet tilldelats användaren. Dessa uppgifter tillhandahålls i pseudonymiserad form till registrerade tjänster som begär det.</md:ServiceDescription>
<md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonUniqueId" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.13" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="schacHomeOrganization" Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">InAcademia operated by GÉANT</md:OrganizationName>
<md:OrganizationName xml:lang="de">InAcademia operated by GÉANT</md:OrganizationName>
<md:OrganizationName xml:lang="sv">InAcademia operated by GÉANT</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">InAcademia</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="de">InAcademia</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">InAcademia</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://inacademia.org/about</md:OrganizationURL>
<md:OrganizationURL xml:lang="de">https://inacademia.org/about</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://inacademia.org/about</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="support">
<md:GivenName>InAcademia</md:GivenName>
<md:SurName>Enduser Support</md:SurName>
<md:EmailAddress>mailto:support@inacademia.org</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="administrative">
<md:GivenName>InAcademia</md:GivenName>
<md:SurName>Administrative Support</md:SurName>
<md:EmailAddress>mailto:admin@inacademia.org</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:GivenName>InAcademia</md:GivenName>
<md:SurName>Technical Support</md:SurName>
<md:EmailAddress>mailto:tech@inacademia.org</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:GivenName>InAcademia</md:GivenName>
<md:SurName>security Support</md:SurName>
<md:EmailAddress>mailto:support@inacademia.org</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
