blob: 9ce61f5ff8252f316bab761239e7fd0e2f2ce8c3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.ueb.cas.cz/idp/shibboleth">
<md:Extensions>
<eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
<eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
</eduidmd:RepublishRequest>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/" registrationInstant="2014-04-07T09:50:19Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
<mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://eduid.cz/uri/idp-group/avcr</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ueb.cas.cz</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Institute of Experimental Botany AS CR</mdui:DisplayName>
<mdui:DisplayName xml:lang="cs">Ústav experimentální botaniky AV ČR</mdui:DisplayName>
<mdui:Description xml:lang="en">Identity Provider UEB AV CR employees.</mdui:Description>
<mdui:Description xml:lang="cs">Identity Provider pro zaměstnance UEB AV ČR</mdui:Description>
<mdui:InformationURL xml:lang="en">http://www.ueb.cas.cz/</mdui:InformationURL>
<mdui:InformationURL xml:lang="cs">http://www.ueb.cas.cz/</mdui:InformationURL>
<mdui:Logo height="44" width="74">https://gedeon.cas.cz/loga/logo-ueb-44.png</mdui:Logo>
<mdui:Logo height="411" width="960">https://gedeon.cas.cz/loga/logo-ueb-137.png</mdui:Logo>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ueb.cas.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ueb.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.ueb.cas.cz/idp/profile/Shibboleth/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ueb.cas.cz/idp/profile/SAML2/POST/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ueb.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ueb.cas.cz/idp/profile/SAML2/Redirect/SSO"/>
</md:IDPSSODescriptor>
<md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
<md:Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ueb.cas.cz</shibmd:Scope>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ueb.cas.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
</md:AttributeAuthorityDescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Institute of Experimental Botany AS CR</md:OrganizationName>
<md:OrganizationName xml:lang="cs">Ústav experimentální botaniky AV ČR</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Institute of Experimental Botany AS CR, v. v. i.</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="cs">Ústav experimentální botaniky AV ČR, v. v. i.</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.ueb.cas.cz/</md:OrganizationURL>
<md:OrganizationURL xml:lang="cs">http://www.ueb.cas.cz/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:GivenName>Petr</md:GivenName>
<md:SurName>Vaníček</md:SurName>
<md:EmailAddress>vanicekp@utia.cas.cz</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
