blob: 78a16c74e4104d8d7ac0dab50ef7bd7f2a2b10a1 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
|
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://gryf.mlp.cz/idp/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/" registrationInstant="2016-05-12T09:25:05Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
<mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://eduid.cz/uri/idp-group/library</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">mlp.cz</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Municipal Library of Prague</mdui:DisplayName>
<mdui:DisplayName xml:lang="cs">Městská knihovna v Praze</mdui:DisplayName>
<mdui:Description xml:lang="en">Identity Provider for Municipal Library of Prague registered users.</mdui:Description>
<mdui:Description xml:lang="cs">Identity Provider pro registrované uživatele Městské knihovny v Praze.</mdui:Description>
<mdui:InformationURL xml:lang="en">http://www.mlp.cz/en/</mdui:InformationURL>
<mdui:InformationURL xml:lang="cs">http://www.mlp.cz/</mdui:InformationURL>
<mdui:Logo height="300" width="200">https://web2.mlp.cz/logo/200.png</mdui:Logo>
<mdui:Logo height="600" width="400">https://web2.mlp.cz/logo/400.png</mdui:Logo>
<mdui:Logo height="1200" width="800">https://web2.mlp.cz/logo/800.png</mdui:Logo>
</mdui:UIInfo>
<eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
<eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
</eduidmd:RepublishRequest>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDFzCCAf+gAwIBAgIUaAb2SqEwW/Y/eN503hQxIslbDG8wDQYJKoZIhvcNAQEL
BQAwFjEUMBIGA1UEAwwLZ3J5Zi5tbHAuY3owHhcNMTUxMDA4MDk1NzE5WhcNMzUx
MDA4MDk1NzE5WjAWMRQwEgYDVQQDDAtncnlmLm1scC5jejCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANzXzawpuUBshaRS7Cq0kMhCLmFn+IB3qc+TUCIq
kYSI7zVg/gHVAWDksCc8XYK3gPCsIsCGJdte3gj39wb1wVP83EFVXsnpcNpi0dsF
QzDP78+U6pn/7gq4DzW1z7CIA1fCXxfFdmUaW8D67Mfc3dtrdc7EAovOyoCOGtAP
28kLjUkhZ1hNpVpVlO26HWQBSvZHMcTWS4hySWcy3PSxcptiVloRa2lWSX2OciFG
llFsf5yahOdHJZYzMdMHwltKInMJGhC5ygERnwLxuiiRgmdKQa61E0YrQ5yKiRXN
PWZtpdvapayrXf8zqdfxnkLepf71Q2lc37wNWibCFVck4eUCAwEAAaNdMFswHQYD
VR0OBBYEFG1izoDQ0uOhi0/tDEYdqtzK4CVZMDoGA1UdEQQzMDGCC2dyeWYubWxw
LmN6hiJodHRwczovL2dyeWYubWxwLmN6L2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3
DQEBCwUAA4IBAQBxLMizMsn6oDImorAHTEwBgE+eFlaRiF0nZvV4oXDXJ2X8bqOF
w93gVEmMZUDzeBqOlradfii4RhHuE6yKqmV+qBwJ8u853UXRipm3uWqAIVrMkQ3N
84lJjXOUqwAZDbYIbCQa8hqvJX+EVThTD1bd/u4eHOAaGoHCV4i8mn/XEa3NQldP
MyiD99jV3UaujsiD8s/1rfMzhB1oJicLD6YvuwtJ8G+m8Jaq1E3ZEd6ITvUw0SCk
bziSz8fz4BqTH4WJrHUQcJ0YR5P6gBLYM/74QXNjIQfsJ/eLHIZca+hv/XvBbJwW
NA4hwb+zDImzHcZWYUWQXwjkaoAgTKr0HxKr
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://gryf.mlp.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://gryf.mlp.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://gryf.mlp.cz/idp/profile/Shibboleth/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://gryf.mlp.cz/idp/profile/SAML2/POST/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://gryf.mlp.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://gryf.mlp.cz/idp/profile/SAML2/Redirect/SSO"/>
</md:IDPSSODescriptor>
<md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">mlp.cz</shibmd:Scope>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://gryf.mlp.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
</md:AttributeAuthorityDescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Municipal Library of Prague</md:OrganizationName>
<md:OrganizationName xml:lang="cs">Městská knihovna v Praze</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Municipal Library of Prague</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="cs">Městská knihovna v Praze</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.mlp.cz/en/</md:OrganizationURL>
<md:OrganizationURL xml:lang="cs">http://www.mlp.cz/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Vojtěch</md:GivenName>
<md:SurName>Vojtíšek</md:SurName>
<md:EmailAddress>vojtech.vojtisek@mlp.cz</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
