blob: 22a53b1deacf269c570e32856fea80470129cc86 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://shibboleth.webbased.co.uk/shibboleth">
<md:Extensions>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://ukfederation.org.uk" registrationInstant="2009-09-09T16:45:58Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://ukfederation.org.uk/doc/mdrps-20130902</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
<md:Extensions>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/DS" index="1"/>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SLO/Artifact"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/NIM/SOAP"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/NIM/Redirect"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/NIM/POST"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/NIM/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SAML2/POST" index="5"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SAML2/POST-SimpleSign" index="6"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SAML2/ECP" index="4"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SAML/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://shibboleth.webbased.co.uk/Shibboleth.sso/SAML/Artifact" index="2"/>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">WebBased Limited</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">WebBased Limited: Shibboleth service provider</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">http://www.webbased.co.uk/</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="support">
<md:GivenName>Martine</md:GivenName>
<md:SurName>Davies</md:SurName>
<md:EmailAddress>mailto:martine.davies@webbased.co.uk</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:GivenName>Greg</md:GivenName>
<md:SurName>Hawkins</md:SurName>
<md:EmailAddress>mailto:greg.hawkins@webbased.co.uk</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
