blob: fe5eefb0603b166ae9dd618d9caab65f48fc12b7 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
|
<?xml version="1.0" encoding="UTF-8"?>
<!--
This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
-->
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://integratorsportal.ladok.se/shibboleth">
<md:Extensions>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2021-12-20T13:24:12Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
<md:Extensions>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://integratorsportal.ladok.se/Shibboleth.sso/Login"/>
<idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://integratorsportal.ladok.se/Shibboleth.sso/Login" index="1"/>
<mdui:UIInfo>
<mdui:Description xml:lang="en">Ladok is a central service for study administration aimed at students and study administrative staff at higher education institutions in Sweden.</mdui:Description>
<mdui:Description xml:lang="sv">Ladok är en central tjänst för studieadministration riktad till studenter och studieadministrativ personal på universitet och högskolor i Sverige.</mdui:Description>
<mdui:DisplayName xml:lang="en">Ladok integrator's portal</mdui:DisplayName>
<mdui:DisplayName xml:lang="sv">Ladok integratörsportal</mdui:DisplayName>
<mdui:InformationURL xml:lang="en">https://ladok.se/</mdui:InformationURL>
<mdui:InformationURL xml:lang="sv">https://ladok.se/</mdui:InformationURL>
<mdui:Logo xml:lang="en" height="98" width="96">https://www.start.ladok.se/logo/ladok_en.png</mdui:Logo>
<mdui:Logo xml:lang="sv" height="98" width="96">https://www.start.ladok.se/logo/ladok_sv.png</mdui:Logo>
<mdui:PrivacyStatementURL xml:lang="en">https://ladok.se/transfer-of-personal-data-to-ladok-when-using-federated-login</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://ladok.se/overforing-av-personuppgifter-till-ladok-i-samband-med-federerad-inloggning</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:KeyName>integratorsportal.ladok.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=integratorsportal.ladok.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFKzCCAxOgAwIBAgIUX9lO+QpNaqJv8al+y4m1EDKdqDwwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:KeyName>integratorsportal.ladok.se</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=integratorsportal.ladok.se</ds:X509SubjectName>
<ds:X509Certificate>MIIFKzCCAxOgAwIBAgIUX9lO+QpNaqJv8al+y4m1EDKdqDwwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://integratorsportal.ladok.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SLO/Artifact"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://integratorsportal.ladok.se/Shibboleth.sso/NIM/SOAP"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://integratorsportal.ladok.se/Shibboleth.sso/NIM/Redirect"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://integratorsportal.ladok.se/Shibboleth.sso/NIM/POST"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://integratorsportal.ladok.se/Shibboleth.sso/NIM/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SAML2/ECP" index="4"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SAML/POST" index="5"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://integratorsportal.ladok.se/Shibboleth.sso/SAML/Artifact" index="6"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">Ladok integrator's portal</md:ServiceName>
<md:ServiceName xml:lang="sv">Ladok integratörsportal</md:ServiceName>
<md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Ladok Consortium</md:OrganizationName>
<md:OrganizationName xml:lang="sv">Ladokkonsortiet</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Ladok Consortium</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">Ladokkonsortiet</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://ladok.se/</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://ladok.se/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="administrative">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladoksupport@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:Company>ITS, Umeå universitet</md:Company>
<md:GivenName>Ladok-supporten</md:GivenName>
<md:EmailAddress>mailto:ladokincident@its.umu.se</md:EmailAddress>
<md:TelephoneNumber>+46907866600</md:TelephoneNumber>
</md:ContactPerson>
</md:EntityDescriptor>
|
