blob: 45512e1e8df655a115233de8984de7550f928f74 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.gli.cas.cz/idp/shibboleth">
<md:Extensions>
<eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
<eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
</eduidmd:RepublishRequest>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/" registrationInstant="2014-04-09T14:17:34Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
<mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://eduid.cz/uri/idp-group/avcr</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">gli.cas.cz</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Institute of Geology AS CR</mdui:DisplayName>
<mdui:DisplayName xml:lang="cs">Geologický ústav AV ČR</mdui:DisplayName>
<mdui:Description xml:lang="en">Identity Provider GLI AV CR employees.</mdui:Description>
<mdui:Description xml:lang="cs">Identity Provider pro zaměstnance GLÚ AV ČR</mdui:Description>
<mdui:InformationURL xml:lang="en">http://www.gli.cas.cz/en</mdui:InformationURL>
<mdui:InformationURL xml:lang="cs">http://www.gli.cas.cz/cs</mdui:InformationURL>
<mdui:Logo height="44" width="74">https://gedeon.cas.cz/loga/logo-gli-44.png</mdui:Logo>
<mdui:Logo height="411" width="960">https://gedeon.cas.cz/loga/logo-gli-633.png</mdui:Logo>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.gli.cas.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.gli.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.gli.cas.cz/idp/profile/Shibboleth/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.gli.cas.cz/idp/profile/SAML2/POST/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.gli.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.gli.cas.cz/idp/profile/SAML2/Redirect/SSO"/>
</md:IDPSSODescriptor>
<md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">gli.cas.cz</shibmd:Scope>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUO+/Rivnvdgnk9HcM7hoPisnlJ08wDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOaWRwLmdsaS5jYXMuY3owHhcNMTYxMDEwMTQxNDE0WhcN
MzYxMDEwMTQxNDE0WjAZMRcwFQYDVQQDDA5pZHAuZ2xpLmNhcy5jejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALfmXxgRqnyDcOic1779AuL/UXEK6vdo
W5gnqUrqxGLvQ/B1qquPx4gRfJy0mKGZDOK5nOMqdAc06uttJsuVo4A9bfM4z2FG
VOVHX5+YoSgpLkrfSVtnmGohyt+k2xvJCCj5oK03owT7j6jPL9KXcqT7EwvomFVY
2qYG489zVxv0W4RQNkGVCZ+8SjjOHLNBbAPG/XCtg8g7k9keN9pk5xSVevrExOZP
t7WFxbntGxUr0mbbh0q62eOwxOblw7bxeyCdVAyuyWu8M8gcfUcqrGYaFrCATwFi
kn7DxNTo6LhDsOCCYzMd4kJqFVJ8U+6k3fBnEEygwDw+f8ZD+HN8CQECAwEAAaNj
MGEwHQYDVR0OBBYEFGi5basBSBDCaCVMrNBz6UUIms9sMEAGA1UdEQQ5MDeCDmlk
cC5nbGkuY2FzLmN6hiVodHRwczovL2lkcC5nbGkuY2FzLmN6L2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQAHOfxFlx8Mg7qFdXQH0/VAexX/6soEeZs/
w1tYfs2a0x1WwSN/LH3cE9l7TalHhS1c9qxKUH6rHNdqN+WiLhNCpKC8p7fLOF4j
XXKHNZOVl/sDLUKHfMl3ebCT9KK2lhVsV7YHd0agqW+Z6Xy64zXyGIW8Ay0Ya/lN
WhxysqjGefHrunWIHHUF9rGMTA8dcE06GO3AUUpfTRWRL0uBPzSjOYK/Qn959jb/
qbLpm6ere0O4LUXF8qscLTq5IufqJxAoH8djCfLAwpnCExheJZeDCdVg0NPoWJlK
J0ZL586Bq8hjp1DaZfCJ34Wn4CzGPwm9fVn8XB9zLJe5Bh4xkaVM
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUHyFSxi2HQ2DazjmSyso9AUTcmCwwDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOaWRwLmdsaS5jYXMuY3owHhcNMTYxMDEwMTQxNDE0WhcN
MzYxMDEwMTQxNDE0WjAZMRcwFQYDVQQDDA5pZHAuZ2xpLmNhcy5jejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALDrOV2yiok4x/AlkZg3PX4LRkCPD26o
xGmmqQeIJq7nY3OKnhs0XdjHJsVPz5DdZwA5waDnVh7rVgGK49cHqM6b16F1r/4r
EE0VEfxstAfK/h/MF/kqp4eyxnuJaD5f1hXnuT4s8GiLZCg2e1swpHYahFkdc3oL
n0h1/qUW4wVNBX2+ikzERCedb640lq3mFfjmSUlL89FYWsqFyjWWAiryQkNNPIyG
fOW2NEgLjoedaGsJp0mxNCmkDDpTww1ZRTNJvox77uBhrqC+m70M3qL05QypnPhT
xRXQCH8bsU3IvgBly6J1W3ol+rcejoqS14iZqFc3ZPQfE6EB5hSwKY8CAwEAAaNj
MGEwHQYDVR0OBBYEFOyCPS5iHdVjP4AwWOXZCM+f5MtnMEAGA1UdEQQ5MDeCDmlk
cC5nbGkuY2FzLmN6hiVodHRwczovL2lkcC5nbGkuY2FzLmN6L2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQBfgIbJra4XT7idRQL3lRy/0NM/ExVngxLj
yDt0P73erYSkXByjHsf5wednvqchy+yXBKXZ2kmc3wOfRuvubYLv7d5CPl3Wa/zv
wBJHJXFfN91r0jPqN/TmuqoURLwUX4k+q0juAk+oA6ClnpHZwB4U7g6kHNFC3p5N
zHngayFMHnYbY5a+TqdpsInumsbr5dfXG5eRqoHM7hyS1P9A4dw4reFWqWRH7XPh
fBxQGqOQ3Xfuwta1AuGuIp0TWAJTIec2y9XB5X2M2JAuXzRN9wiTfryvG/H5w5Y4
psX3Vty+MvqqNQyIsItFnL4IaNLiM9CR6jY7RIZzJi9VVmbj0bNn
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.gli.cas.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
</md:AttributeAuthorityDescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Institute of Geology AS CR</md:OrganizationName>
<md:OrganizationName xml:lang="cs">Geologický ústav AV ČR</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Institute of Geology AS CR, v. v. i.</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="cs">Geologický ústav AV ČR, v. v. i.</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.gli.cas.cz/en</md:OrganizationURL>
<md:OrganizationURL xml:lang="cs">http://www.gli.cas.cz/cs</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Petr</md:GivenName>
<md:SurName>Vaníček</md:SurName>
<md:EmailAddress>vanicekp@utia.cas.cz</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
