blob: 0ef89fed0339956c1f5a4783f23cc246126541af (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
|
<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://services.sheerid.com/Shibboleth/UK">
<!--
This is a "SheerID Verification Services" Shibboleth SP for SheerID, Inc.
-->
<Extensions>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://ukfederation.org.uk" registrationInstant="2016-07-26T13:12:38Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://ukfederation.org.uk/doc/mdrps-20130902</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</Extensions>
<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
<Extensions>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:Description xml:lang="en">Student and Teacher Eligibility Verification Services for Global Brands</mdui:Description>
<mdui:DisplayName xml:lang="en">SheerID Verification Services</mdui:DisplayName>
<mdui:InformationURL xml:lang="en">http://www.sheerid.co.uk/</mdui:InformationURL>
<mdui:Logo height="104" width="350">https://s3.amazonaws.com/com.sheerid.resources/shibboleth/img/SheerID_Logo_350x104px.png</mdui:Logo>
<mdui:PrivacyStatementURL xml:lang="en">http://www.sheerid.co.uk/privacy-policy/</mdui:PrivacyStatementURL>
</mdui:UIInfo>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://services.sheerid.com/Shibboleth.sso/Login"/>
<idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://services.sheerid.com/Shibboleth.sso/Login" index="1"/>
</Extensions>
<KeyDescriptor>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</KeyDescriptor>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://services.sheerid.com/Shibboleth.sso/Artifact/SOAP" index="1"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://services.sheerid.com/Shibboleth.sso/SLO/SOAP"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://services.sheerid.com/Shibboleth.sso/SLO/Redirect"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://services.sheerid.com/Shibboleth.sso/SLO/POST"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://services.sheerid.com/Shibboleth.sso/SLO/Artifact"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://services.sheerid.com/Shibboleth.sso/SAML2/POST" index="1"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://services.sheerid.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://services.sheerid.com/Shibboleth.sso/SAML2/Artifact" index="3"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://services.sheerid.com/Shibboleth.sso/SAML2/ECP" index="4"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://services.sheerid.com/Shibboleth.sso/SAML/POST" index="5"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://services.sheerid.com/Shibboleth.sso/SAML/Artifact" index="6"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp-test.sheerid.com/Shibboleth.sso/SAML2/POST" index="7"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sp-test.sheerid.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="8"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp-test.sheerid.com/Shibboleth.sso/SAML2/Artifact" index="9"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://sp-test.sheerid.com/Shibboleth.sso/SAML2/ECP" index="10"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp-test.sheerid.com/Shibboleth.sso/SAML/POST" index="11"/>
<AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp-test.sheerid.com/Shibboleth.sso/SAML/Artifact" index="12"/>
<AttributeConsumingService index="1">
<ServiceName xml:lang="en">SheerID Verification Services</ServiceName>
<ServiceDescription xml:lang="en">Student and Teacher Eligibility Verification Services for Global Brands</ServiceDescription>
<RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
<RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
</AttributeConsumingService>
</SPSSODescriptor>
<Organization>
<OrganizationName xml:lang="en">SheerID, Inc.</OrganizationName>
<OrganizationDisplayName xml:lang="en">SheerID Verification Services</OrganizationDisplayName>
<OrganizationURL xml:lang="en">http://www.sheerid.com/student-discounts-made-easy/</OrganizationURL>
</Organization>
<ContactPerson contactType="support">
<GivenName>Customer Service</GivenName>
<EmailAddress>mailto:customerservice@sheerid.com</EmailAddress>
</ContactPerson>
<ContactPerson contactType="technical">
<GivenName>Dakota</GivenName>
<SurName>Bailey</SurName>
<EmailAddress>mailto:dakota@sheerid.com</EmailAddress>
</ContactPerson>
</EntityDescriptor>
|
