blob: 670de49d8d4b21c7273783e8cce319dfb7b64956 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
|
<?xml version="1.0" encoding="UTF-8"?>
<!--
This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
This metadata is not dynamic - it will not change as your configuration changes.
-->
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://ladok3-00.ladok.umu.se/idp/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
<mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</md:Extensions>
<IDPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<Extensions>
<shibmd:Scope regexp="false">ladok3.ladok.umu.se</shibmd:Scope>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="en">A Name for the IdP at ladok3-00.ladok.umu.se</mdui:DisplayName>
<mdui:Description xml:lang="en">Enter a description of your IdP at ladok3-00.ladok.umu.se</mdui:Description>
<mdui:Logo height="80" width="80">https://ladok3-00.ladok.umu.se/Path/To/Logo.png</mdui:Logo>
</mdui:UIInfo>
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ladok3-00.ladok.umu.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ladok3-00.ladok.umu.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<!--
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ladok3-00.ladok.umu.se/idp/profile/SAML2/Redirect/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ladok3-00.ladok.umu.se/idp/profile/SAML2/POST/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ladok3-00.ladok.umu.se:8443/idp/profile/SAML2/SOAP/SLO"/>
-->
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://ladok3-00.ladok.umu.se/idp/profile/Shibboleth/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ladok3-00.ladok.umu.se/idp/profile/SAML2/POST/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ladok3-00.ladok.umu.se/idp/profile/SAML2/Redirect/SSO"/>
</IDPSSODescriptor>
<AttributeAuthorityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<Extensions>
<shibmd:Scope regexp="false">ladok3.ladok.umu.se</shibmd:Scope>
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>
MIIDRDCCAiygAwIBAgIVAKacUXSmz2+B3M6H5WqQH90cx5vhMA0GCSqGSIb3DQEB
CwUAMCExHzAdBgNVBAMMFmxhZG9rMy0wMC5sYWRvay51bXUuc2UwHhcNMTYwMzE0
MTMzNDQ3WhcNMzYwMzE0MTMzNDQ3WjAhMR8wHQYDVQQDDBZsYWRvazMtMDAubGFk
b2sudW11LnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0hyT+CZ
NOD35y+5G3zimUw5zlb6TjVN6sorY0THK6ozKq1jz3Ahra6+6KlO8Pel+ATYBSxT
uvA3tyiS3tPvVn1jkNzRlsl66KSrvKoG2/IrQX6pQKjkxYxtGPo9SzEByoD5NfY4
rG97n5v0q8pdBGEcWFDDOTIpN482Kw+X9aH4QVOlwnbTsUXwOFNaAwRVZ++0bqnr
EGlxgTqc9lI2X3Yt/BdCaiPhXeY4XutUwhRVf/nk4s8woa51cBoOClbCBXSy41KB
DbaYP5UMcUgvg/Wg0Sp4UVdNaeS7ICDP29/dJqU4UfXYmT2084hvUdpEYt4dDcaX
nHkHLJSfvgmRwQIDAQABo3MwcTAdBgNVHQ4EFgQUF7U504UY+P9jy+Ux2BeeTAUC
AeAwUAYDVR0RBEkwR4IWbGFkb2szLTAwLmxhZG9rLnVtdS5zZYYtaHR0cHM6Ly9s
YWRvazMtMDAubGFkb2sudW11LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB
CwUAA4IBAQABVbIk9m49Pxxdr/+KQgKiZQ8k2UnLV/BS0M4jtwoJm4m56NDOdn2G
PeapWMBx6FMtT762Mk6pzgSwgXfpQFuTGqmzpBwcA2RgoCuA9CO7ZHCU0vVNK79X
Cc6qAnJ/Hisazm5YHNptzc6P67wC/ZaxzdkNpw+GnKQTT254aS2rj4emnA0Bwiqv
Pvg72wNw6Ys7sYXjugeAcV0S+Q4yU57ufklNghaKd5TEx0IRZPgc3QAH2nnw6w7m
+K+tK5yxYFUCo9GrKa9gLL9V+Umve3fhMbrFdHD+xJPAfUjmwClv6wldpUKNUDCT
/VxfVtWUykmKXy4WbVFdu0rlnxflTabY
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ladok3-00.ladok.umu.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
<!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ladok3-00.ladok.umu.se:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
<!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->
</AttributeAuthorityDescriptor>
<ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
<Company>ITS, Umea universitet</Company>
<SurName>Fredrik Domeij</SurName>
<EmailAddress>mailto:fredrik.domeij@umu.se</EmailAddress>
</ContactPerson><ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
<Company>ITS, Umea universitet</Company>
<SurName>Fredrik Domeij</SurName>
<EmailAddress>mailto:fredrik.domeij@umu.se</EmailAddress>
</ContactPerson><ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
<Company>ITS, Umea universitet</Company>
<SurName>Fredrik Domeij</SurName>
<EmailAddress>mailto:fredrik.domeij@umu.se</EmailAddress>
</ContactPerson></md:EntityDescriptor>
|
