blob: c88b0d01f2a1714746ee7984a1aa13f6d78312aa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://misp-saas-idp-proxy.sunet.se/sp">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2022-07-11T10:53:54Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<mdattr:EntityAttributes>
<samla:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://misp-saas-idp-proxy.sunet.se/Saml2SP/disco" index="1"/>
<mdui:UIInfo>
<mdui:Description xml:lang="en">MISP service run by SUNET</mdui:Description>
<mdui:Description xml:lang="sv">MISP tjänst hos SUNET</mdui:Description>
<mdui:DisplayName xml:lang="en">SUNET MISP</mdui:DisplayName>
<mdui:DisplayName xml:lang="sv">SUNET MISP</mdui:DisplayName>
<mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/SUNETCERT/MISP</mdui:InformationURL>
<mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/SUNETCERT/MISP</mdui:InformationURL>
<mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/SUNETCERT/Data+Protection+Code+of+Conduct</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/SUNETCERT/Data+Protection+Code+of+Conduct</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIFEzCCAvugAwIBAgIUa8PI17rQC6uuFWCoQMRAHyyxSWAwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>MIIFEzCCAvugAwIBAgIUa8PI17rQC6uuFWCoQMRAHyyxSWAwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://misp-saas-idp-proxy.sunet.se/Saml2SP/acs/post" index="1"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">CIRCL MISP</md:ServiceName>
<md:ServiceName xml:lang="sv">CIRCL MISP</md:ServiceName>
<md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">SUNET</md:OrganizationName>
<md:OrganizationName xml:lang="sv">SUNET</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">SUNET</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">SUNET</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://sunet.se</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://www.sunet.se</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:Company>SUNET</md:Company>
<md:GivenName>Noc</md:GivenName>
<md:EmailAddress>mailto:noc@sunet.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:Company>SUNET</md:Company>
<md:GivenName>Noc</md:GivenName>
<md:SurName>Operations</md:SurName>
<md:EmailAddress>mailto:noc@sunet.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="administrative">
<md:Company>SUNET</md:Company>
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:cert@sunet.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:Company>SUNET</md:Company>
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
