blob: 531f3f90e2508ec2d741ce8245320f45042afad9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.ig.cas.cz/idp/shibboleth">
<md:Extensions>
<eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
<eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
</eduidmd:RepublishRequest>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/" registrationInstant="2016-10-18T10:22:02Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
<mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://eduid.cz/uri/idp-group/avcr</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ig.cas.cz</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Institute of Geophysics of the CAS, v.v.i.</mdui:DisplayName>
<mdui:DisplayName xml:lang="cs">Geofyzikální ústav AV ČR, v.v.i.</mdui:DisplayName>
<mdui:Description xml:lang="en">Identity Provider IG AV CR employees.</mdui:Description>
<mdui:Description xml:lang="cs">Identity Provider pro zaměstnance GFÚ AV ČR</mdui:Description>
<mdui:InformationURL xml:lang="en">http://www.ig.cas.cz/en</mdui:InformationURL>
<mdui:InformationURL xml:lang="cs">http://www.ig.cas.cz</mdui:InformationURL>
<mdui:Logo height="44" width="30">https://gedeon.cas.cz/loga/logo-gfu-44.png</mdui:Logo>
<mdui:Logo height="146" width="100">https://gedeon.cas.cz/loga/logo-gfu-146.png</mdui:Logo>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDIDCCAgigAwIBAgIVANr1F5WWKu6MkZD2HYaqAH0Woc4kMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDWlkcC5pZy5jYXMuY3owHhcNMTYxMDE0MTE0NjIzWhcN
MzYxMDE0MTE0NjIzWjAYMRYwFAYDVQQDDA1pZHAuaWcuY2FzLmN6MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/fsO+2xCpjciHSB5eXYev0CGnBmlzW/
F7RWjkxmKxHhQMFU5CFOkSM7bGoda9B3iZWJL7ZJ0PxYidyLMSM4icOf8qft1IqK
PFFruedybX7ZD82fNou4kbg9C9yxcKJqTlExUnK7NnWjXtJ7VGOmg/dlx32bcVYl
TsllGEmYc4KQrCCkacsDFoOCIZvVqDFbUspjpksTKcWWeGxx6HNJUgmT7zkkVEiI
l9mjJLqVsincKjpx6BvrqyKknX2uu0kXDsAI2T006VxrXyQ9zPiGzAEI39EoOrQX
ToVlTsdXNkeRY986XrIZLXUMrzXqBQf4ZttI+uZpNlB6L6aGk3VO4wIDAQABo2Ew
XzAdBgNVHQ4EFgQUW2ZAy/BoCQBpUxeQdj2ZZaBRilcwPgYDVR0RBDcwNYINaWRw
LmlnLmNhcy5jeoYkaHR0cHM6Ly9pZHAuaWcuY2FzLmN6L2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQALN/lutN4DxjtoxJ+K3B3enanxnNgPVXPqCgY0
66gKuG9VQkdRF1sm566u26FH6Mdekm6UwqU0mTrkhdouRL0x2jjJeeuC3Fc8lAjL
JggEGEDWFvOM/xzg2thn1gCpatimmG8Peb+/aqNcfBxL6UBBfo2g+PIGHq7WE2ja
9lcOFmSN/pfSYFDW8wuTWTqNxD/NQ9yQ4QfMKq6y0HyUoBUI5f1T6CExgjmK/jHv
ApIGmhsBUD5VmosSC4p5LZEMS3mvdk2BRKE24ToZgob4acimFm5JnjiGoWZkDosk
lRNRbZhfzdlzlBTtWOW+n7H0y3tpznxXsqxZHCfknIl6mg+N
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ig.cas.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ig.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.ig.cas.cz/idp/profile/Shibboleth/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ig.cas.cz/idp/profile/SAML2/POST/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ig.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ig.cas.cz/idp/profile/SAML2/Redirect/SSO"/>
</md:IDPSSODescriptor>
<md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ig.cas.cz</shibmd:Scope>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDIDCCAgigAwIBAgIVAJZkyt0MKDcZqHkS3a2i37IhmkodMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDWlkcC5pZy5jYXMuY3owHhcNMTYxMDE0MTE0NjIzWhcN
MzYxMDE0MTE0NjIzWjAYMRYwFAYDVQQDDA1pZHAuaWcuY2FzLmN6MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw031VGst65tCnSAvdfDclIIylzeJoAMf
DO8F3GDo2GzoMjMYuKPWpOyuI2A5LBaze3bop4oJVIATYy9Xvkv42KWRShrpkM2F
Ze6wO8wRrgkB2degEOxpmn4+8E93YE5OhC8IlFPDwRFyd+BFGjSnwUqIZEnEKk0b
tJEKkma1XVpZlhzcnOuagP0olMF8KdcWJ/0qXVI6CQnXjb6RGD57Qb5+YCkiYOat
3bARKDgIZpI9g3aekJ1uBHoVNoum23Fdd/56EF+l+atheNyr+fQ4QIrfsI+bIsQ/
4kfagyM32dqG3QClvb3kvmKHdN44SMIR9a34Ru6X5LNFT8ZRRTF9IwIDAQABo2Ew
XzAdBgNVHQ4EFgQUuuOinOrqhJN1xpsCk8epj5KxaOAwPgYDVR0RBDcwNYINaWRw
LmlnLmNhcy5jeoYkaHR0cHM6Ly9pZHAuaWcuY2FzLmN6L2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQBQEb87SuEW96mgwx+CczMBZUUJOF934+46Ptkj
65LdX/HLg+0HN4OKDwO05ptR2hUHe4EyrSARzeyRjFvvXwpXtTmanDl6NJdWW7Cj
0Pux2/KU6G36BHmNb83uLNRhuqsczYO5rWm3w+ttr2FjIiihWna0aItZHm25CPgA
uhCrQkI8TpJUPtFCHRfKuOHBNmbqPHF5laEbtMCsbx6ouOF53CPewMKj7Lr6Bj9M
t9kzm9s4u1wfLVJFCvL0QG91oo0UAJ0xJRbE1J/zRHlnZ5M8hw6BJNMNnMky9x2d
fJt4zNYTWwMgxeTPxJ5cHhrg4a4A5T7+E1cyY2AMZ+6CfFf2
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ig.cas.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
</md:AttributeAuthorityDescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Institute of Geophysics of the CAS</md:OrganizationName>
<md:OrganizationName xml:lang="cs">Geofyzikální ústav AV ČR</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Institute of Geophysics of the CAS, v.v.i.</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="cs">Geofyzikální ústav AV ČR, v.v.i.</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.ig.cas.cz/en</md:OrganizationURL>
<md:OrganizationURL xml:lang="cs">http://www.ig.cas.cz/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Petr</md:GivenName>
<md:SurName>Vaníček</md:SurName>
<md:EmailAddress>vanicekp@utia.cas.cz</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
