blob: e494a99540fa707a0bf02af19d87bdc70d22ed7a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.fzu.cas.cz/idp/shibboleth">
<md:Extensions>
<eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
<eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
</eduidmd:RepublishRequest>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/" registrationInstant="2014-03-18T10:07:35Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
<mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://eduid.cz/uri/idp-group/avcr</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">fzu.cas.cz</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Institute of Physics AS CR</mdui:DisplayName>
<mdui:DisplayName xml:lang="cs">Fyzikální ústav Akademie věd ČR</mdui:DisplayName>
<mdui:Description xml:lang="en">Identity Provider FZU AV CR employees.</mdui:Description>
<mdui:Description xml:lang="cs">Identity Provider pro zaměstnance FZÚ AV ČR</mdui:Description>
<mdui:InformationURL xml:lang="en">http://www.fzu.cz/en</mdui:InformationURL>
<mdui:InformationURL xml:lang="cs">http://www.fzu.cz/</mdui:InformationURL>
<mdui:Logo height="40" width="40">https://jiftach.cas.cz/loga/logo-fzu-40.png</mdui:Logo>
<mdui:Logo height="100" width="100">https://jiftach.cas.cz/loga/logo-fzu-100.png</mdui:Logo>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVAKTCptM8I8hwyciH6caOktVJ2lymMA0GCSqGSIb3DQEB
CwUAMBkxFzAVBgNVBAMMDmlkcC5menUuY2FzLmN6MB4XDTE2MDgwNTA3NDQwMVoX
DTM2MDgwNTA3NDQwMVowGTEXMBUGA1UEAwwOaWRwLmZ6dS5jYXMuY3owggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpKLcXwoNQj2RWBc2Y/HB1oRBH84O
ypTV9Nj1XvxlnvmB19mzT5RshPOvwbgIfnNGR4T3VzXtbi8VwE2zr4iot/eEcHtJ
M/g8nxNX/zbDhJs9azCkan1lmbEWJFus8magO8w+SVlXLjmt11WACc900rx3AHMC
ogxOd23SMZv/lzJbd9UG+g9UMepDYWQyCFAkGsJg/Ymdv9sfKjz702hfiMngzsBT
L8pBJyMgS/hgYaE/qlzu5IAaY8/2EYwT5QyuPGUcYaVJAH16W5dYoQVF+ZfGEYQz
ZttZYA7PxH3mN3TeRR3LQhJSZA9M+1VP2N4y+HOeUJGzSeoCr2vmBpphAgMBAAGj
YzBhMB0GA1UdDgQWBBQv86ZALA7j4AzrJNHw3yXLtMsqLzBABgNVHREEOTA3gg5p
ZHAuZnp1LmNhcy5jeoYlaHR0cHM6Ly9pZHAuZnp1LmNhcy5jei9pZHAvc2hpYmJv
bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAJpVALC/JEwLY0hEGZSihCoUfPX/BuSqn
LNlK+Yw+ukgttSs0nEBpQqVvshWZkEho+0NyUwg2u8RIqVz6nPAgj8mSGZikHTip
0EkP+Sba6nzQPZA0qJJDXD3HRzH1IUx7suO8JO/2WGu+iGSc+w3dLZMtLUuQ3m6g
8qVEHm6ih6ooK5ZwVTb3FTpZzDEuA0iy/qJKp1VjZpForKUGJXOdJPsC0e9eX+fA
3fLDYhcn3X55FJ6KdKD+BOyPS/cfXYb+IPaO6qaB3UeV+H6RIEEvZiRIk9pRDJ7U
nMcK8M8Xbg0VmYp30GVkd0sD2ps+X9OAXJu5Uk5d2SIAvHdktl6sew==
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.fzu.cas.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.fzu.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.fzu.cas.cz/idp/profile/Shibboleth/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.fzu.cas.cz/idp/profile/SAML2/POST/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.fzu.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.fzu.cas.cz/idp/profile/SAML2/Redirect/SSO"/>
</md:IDPSSODescriptor>
<md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">fzu.cas.cz</shibmd:Scope>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.fzu.cas.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
</md:AttributeAuthorityDescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Institute of Physics AS CR</md:OrganizationName>
<md:OrganizationName xml:lang="cs">Fyzikální ústav Akademie věd ČR, v.v.i.</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Institute of Physics AS CR</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="cs">Fyzikální ústav Akademie věd ČR, v.v.i.</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.fzu.cz/en</md:OrganizationURL>
<md:OrganizationURL xml:lang="cs">http://www.fzu.cz/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Petr</md:GivenName>
<md:SurName>Vaníček</md:SurName>
<md:EmailAddress>vanicekp@utia.cas.cz</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
