blob: 58424a5f9589697a977a3f07bf50386089da21b1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://testidpv3.lu.se/idp/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
<mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<attr:EntityAttributes xmlns:attr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://www.swamid.se/policy/assurance/al1</saml:AttributeValue>
<saml:AttributeValue>http://www.swamid.se/policy/assurance/al2</saml:AttributeValue>
<saml:AttributeValue>http://www.swamid.se/policy/authentication/swamid-al2-mfa</saml:AttributeValue>
<saml:AttributeValue>http://www.swamid.se/policy/authentication/swamid-al2-mfa-hi</saml:AttributeValue>
<saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
</saml:Attribute>
<samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
<samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
</samla:Attribute>
</attr:EntityAttributes>
</md:Extensions>
<IDPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<Extensions>
<shibmd:Scope regexp="false">lu.se</shibmd:Scope>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="sv">Lunds universitet (Test UWDEV)</mdui:DisplayName>
<mdui:DisplayName xml:lang="en">Lund University (Test UWDEV)</mdui:DisplayName>
<mdui:Description xml:lang="sv">Testidentitetstjänst för anställda och studenter vid Lunds universitet</mdui:Description>
<mdui:Description xml:lang="en">Test identity Provider for employees and students at Lund University</mdui:Description>
<mdui:InformationURL xml:lang="sv">https://www.lu.se/</mdui:InformationURL>
<mdui:InformationURL xml:lang="en">https://www.lunduniversity.lu.se/</mdui:InformationURL>
<mdui:Logo xml:lang="sv" height="80" width="95">https://www.medarbetarwebben.lu.se/profiles/factory/themes/lu_theme/img/logos/logo-square.png</mdui:Logo>
<mdui:Logo xml:lang="en" height="80" width="95">https://www.staff.lu.se/profiles/factory/themes/lu_theme/img/logos/logo-square-en.png</mdui:Logo>
<mdui:Keywords xml:lang="sv">lu lth</mdui:Keywords>
<mdui:Keywords xml:lang="en">lu lth</mdui:Keywords>
</mdui:UIInfo>
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidpv3.lu.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://testidpv3.lu.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://testidpv3.lu.se/idp/profile/SAML2/Redirect/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testidpv3.lu.se/idp/profile/SAML2/POST/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://testidpv3.lu.se:8443/idp/profile/SAML2/SOAP/SLO"/>
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://testidpv3.lu.se/idp/profile/Shibboleth/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testidpv3.lu.se/idp/profile/SAML2/POST/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://testidpv3.lu.se/idp/profile/SAML2/Redirect/SSO"/>
</IDPSSODescriptor>
<Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
<OrganizationName xml:lang="en">LU</OrganizationName>
<OrganizationDisplayName xml:lang="sv">Lunds universitet (Test UWDEV)</OrganizationDisplayName>
<OrganizationDisplayName xml:lang="en">Lund University (Test UWDEV)</OrganizationDisplayName>
<OrganizationURL xml:lang="en">https://www.lu.se/</OrganizationURL>
</Organization>
<ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
<GivenName>Eskil</GivenName>
<SurName>Swahn</SurName>
<EmailAddress>mailto:eskil.swahn@ldc.lu.se</EmailAddress>
</ContactPerson>
<ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
<SurName>LU Servicedesk</SurName>
<EmailAddress>mailto:servicedesk@lu.se</EmailAddress>
</ContactPerson>
<ContactPerson xmlns:remd="http://refeds.org/metadata" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<GivenName>IRT Lund University</GivenName>
<EmailAddress>mailto:abuse@lu.se</EmailAddress>
<TelephoneNumber>+46462229000</TelephoneNumber>
</ContactPerson>
</md:EntityDescriptor>
|
