swamid-2.0/weblogin-test.kau.se-idp-shibboleth.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://weblogin-test.kau.se/idp/shibboleth">
  <md:Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2016-01-18T15:30:16Z">
      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://www.swamid.se/policy/assurance/al1</saml:AttributeValue>
        <saml:AttributeValue>http://www.swamid.se/policy/assurance/al2</saml:AttributeValue>
        <saml:AttributeValue>http://www.swamid.se/policy/authentication/swamid-al2-mfa</saml:AttributeValue>
        <saml:AttributeValue>http://www.swamid.se/policy/authentication/swamid-al2-mfa-hi</saml:AttributeValue>
        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
      </saml:Attribute>
      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
        <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
      </samla:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <IDPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0" errorURL="https://weblogin-test.kau.se/error/?errorurl_code=ERRORURL_CODE&amp;errorurl_ts=ERRORURL_TS&amp;errorurl_rp=ERRORURL_RP&amp;errorurl_tid=ERRORURL_TID&amp;errorurl_ctx=ERRORURL_CTX">
    <Extensions>
      <shibmd:Scope regexp="false">kau.se</shibmd:Scope>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="sv">Karlstads universitet test</mdui:DisplayName>
        <mdui:DisplayName xml:lang="en">Karlstad University test</mdui:DisplayName>
        <mdui:Description xml:lang="sv">Test Identity Provider för Karlstads universitet</mdui:Description>
        <mdui:Description xml:lang="en">Test Identity Provider for Karlstad University</mdui:Description>
        <mdui:InformationURL xml:lang="sv">http://www.kau.se</mdui:InformationURL>
        <mdui:InformationURL xml:lang="en">http://www.kau.se/en</mdui:InformationURL>
        <mdui:Logo xml:lang="sv" height="112" width="112">https://www.kau.se/themes/custom/kau16/images/logotype.png</mdui:Logo>
        <mdui:Logo xml:lang="en" height="112" width="112">https://www.kau.se/themes/custom/kau16/images/logotype.png</mdui:Logo>
        <mdui:PrivacyStatementURL xml:lang="sv">https://weblogin-test.kau.se/information.html</mdui:PrivacyStatementURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://weblogin-test.kau.se/information.html</mdui:PrivacyStatementURL>
        <mdui:Keywords xml:lang="sv">kau karlstads+universitet karlstad+universitet karlstad+university</mdui:Keywords>
        <mdui:Keywords xml:lang="en">kau karlstads+universitet karlstad+universitet karlstad+university</mdui:Keywords>
      </mdui:UIInfo>
      <mdui:DiscoHints>
        <mdui:DomainHint>kau.se</mdui:DomainHint>
        <mdui:IPHint>130.243.16.0/20</mdui:IPHint>
        <mdui:IPHint>193.10.162.0/24</mdui:IPHint>
        <mdui:IPHint>193.10.220.0/22</mdui:IPHint>
        <mdui:IPHint>193.10.224.0/21</mdui:IPHint>
        <mdui:IPHint>193.10.238.0/24</mdui:IPHint>
        <mdui:IPHint>193.11.148.0/22</mdui:IPHint>
        <mdui:IPHint>193.11.152.0/21</mdui:IPHint>
        <mdui:IPHint>2001:6b0:34::0/48</mdui:IPHint>
        <mdui:GeolocationHint>geo:59.4059,13.5816</mdui:GeolocationHint>
      </mdui:DiscoHints>
    </Extensions>
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://weblogin-test.kau.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://weblogin-test.kau.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://weblogin-test.kau.se/idp/profile/Shibboleth/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://weblogin-test.kau.se/idp/profile/SAML2/POST/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://weblogin-test.kau.se/idp/profile/SAML2/Redirect/SSO"/>
  </IDPSSODescriptor>
  <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
    <OrganizationName xml:lang="sv">KAU</OrganizationName>
    <OrganizationName xml:lang="en">KAU</OrganizationName>
    <OrganizationDisplayName xml:lang="sv">Karlstads universitet</OrganizationDisplayName>
    <OrganizationDisplayName xml:lang="en">Karlstad University</OrganizationDisplayName>
    <OrganizationURL xml:lang="sv">http://www.kau.se</OrganizationURL>
    <OrganizationURL xml:lang="en">http://www.kau.se/en</OrganizationURL>
  </Organization>
  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
    <Company>Karlstad University</Company>
    <SurName>IT-avdelningen</SurName>
    <EmailAddress>mailto:webbteknik@kau.se</EmailAddress>
  </ContactPerson>
  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
    <Company>Karlstad University</Company>
    <SurName>IT-avdelningen</SurName>
    <EmailAddress>mailto:webbteknik@kau.se</EmailAddress>
  </ContactPerson>
  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
    <Company>Karlstad University</Company>
    <SurName>IT-avdelningen</SurName>
    <EmailAddress>mailto:2525@kau.se</EmailAddress>
    <TelephoneNumber>+46 54 700 2525</TelephoneNumber>
  </ContactPerson>
  <ContactPerson xmlns:remd="http://refeds.org/metadata" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
    <GivenName>Incident Response Team</GivenName>
    <EmailAddress>mailto:irt@kau.se</EmailAddress>
  </ContactPerson>
</md:EntityDescriptor>