swamid-2.0/sri-test.sunet.se-api-saml2-metadata.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://sri-test.sunet.se/api/saml2/metadata/">
  <md:Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5"/>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160"/>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    <ns1:DigestMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    <ns1:SigningMethod xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
  </md:Extensions>
  <ns0:SPSSODescriptor xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="false" WantAssertionsSigned="true">
    <ns0:Extensions>
      <ns2:UIInfo xmlns:ns2="urn:oasis:names:tc:SAML:metadata:ui">
        <ns2:DisplayName xml:lang="en">SUNET Relationship Inventory</ns2:DisplayName>
        <ns2:DisplayName xml:lang="sv">SUNET Relationship Inventory</ns2:DisplayName>
        <ns2:Description xml:lang="en">Service used for documenting the SUNET relationship</ns2:Description>
        <ns2:Description xml:lang="sv">T&amp;auml;nst f&amp;ouml;r att dokumentera SUNET relationship</ns2:Description>
      </ns2:UIInfo>
    </ns0:Extensions>
    <ns0:KeyDescriptor use="signing">
      <ns3:KeyInfo xmlns:ns3="http://www.w3.org/2000/09/xmldsig#">
        <ns3:X509Data>
          <ns3:X509Certificate>MIIFBTCCAu2gAwIBAgIUQ37cS8NLmguFmpvCoPGh9H7qHncwDQYJKoZIhvcNAQEL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</ns3:X509Certificate>
        </ns3:X509Data>
      </ns3:KeyInfo>
    </ns0:KeyDescriptor>
    <ns0:KeyDescriptor use="encryption">
      <ns3:KeyInfo xmlns:ns3="http://www.w3.org/2000/09/xmldsig#">
        <ns3:X509Data>
          <ns3:X509Certificate>MIIFBTCCAu2gAwIBAgIUQ37cS8NLmguFmpvCoPGh9H7qHncwDQYJKoZIhvcNAQEL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</ns3:X509Certificate>
        </ns3:X509Data>
      </ns3:KeyInfo>
    </ns0:KeyDescriptor>
    <ns0:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sri-test.sunet.se/api/saml2/ls/"/>
    <ns0:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sri-test.sunet.se/api/saml2/acs/" index="1"/>
    <ns0:AttributeConsumingService index="1">
      <ns0:ServiceName xml:lang="en">SUNET Relationship Inventory</ns0:ServiceName>
      <ns0:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonPrincipalName" isRequired="true"/>
      <ns0:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="displayName" isRequired="true"/>
    </ns0:AttributeConsumingService>
  </ns0:SPSSODescriptor>
  <ns0:ContactPerson xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
    <ns0:Company>SUNET</ns0:Company>
    <ns0:GivenName>Maria</ns0:GivenName>
    <ns0:SurName>Haider</ns0:SurName>
    <ns0:EmailAddress>mailto:mariah@sunet.se</ns0:EmailAddress>
  </ns0:ContactPerson>
</md:EntityDescriptor>