blob: 5d62aa5d27f94e527a12cbbe0ebb30ab9d1e4401 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
|
<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://sp2.cesnet.cz/sp/shibboleth/edugain">
<Extensions xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/">
<mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
<mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
<md:Extensions>
<DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/DS" index="1"/>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">CESNET Test SP</mdui:DisplayName>
<mdui:Description xml:lang="en">A test SP showing released attributes and SAML assertions.</mdui:Description>
<mdui:DisplayName xml:lang="cs">CESNET Test SP</mdui:DisplayName>
<mdui:Description xml:lang="cs">Testovací SP - ukazuje doručené atributy a SAML zprávy.</mdui:Description>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:KeyName>sp2.cesnet.cz</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=sp2.cesnet.cz,O=CESNET,DC=cesnet-ca,DC=cz</ds:X509SubjectName>
<ds:X509Certificate>MIIELzCCAxegAwIBAgIEQrOJWDANBgkqhkiG9w0BAQUFADBDMRIwEAYKCZImiZPy
LGQBGRYCY3oxGTAXBgoJkiaJk/IsZAEZFgljZXNuZXQtY2ExEjAQBgNVBAMTCUNF
U05FVCBDQTAeFw0xMDAyMjIwOTU5MzFaFw0xMTAzMjIxMDI5MzFaMFgxEjAQBgoJ
kiaJk/IsZAEZFgJjejEZMBcGCgmSJomT8ixkARkWCWNlc25ldC1jYTEPMA0GA1UE
ChMGQ0VTTkVUMRYwFAYDVQQDEw1zcDIuY2VzbmV0LmN6MIGfMA0GCSqGSIb3DQEB
AQUAA4GNADCBiQKBgQC+Q9oT1doCHIBxlNtPhsfVhfTUAQ8EcBnbOZeNRpcabQ4v
Xvb65ji2Wgis3LDvr1oin0u1i5kTI35bi8nHjRYIfTtPwv+eXVEjsHbR+kDymmo+
NeRT19ogZlNjslL2CZKtpb9b1cabIgco6rPWOo42CPiMGhp3pmTZD50MwrZS5wID
AQABo4IBmDCCAZQwDgYDVR0PAQH/BAQDAgWgMBkGA1UdIAQSMBAwDgYMKwYBBAG+
eQECAgIAMBgGA1UdEQQRMA+CDXNwMi5jZXNuZXQuY3owggELBgNVHR8EggECMIH/
MFqgWKBWpFQwUjESMBAGCgmSJomT8ixkARkWAmN6MRkwFwYKCZImiZPyLGQBGRYJ
Y2VzbmV0LWNhMRIwEAYDVQQDEwlDRVNORVQgQ0ExDTALBgNVBAMTBENSTDUwgaCg
gZ2ggZqGQmh0dHA6Ly93d3cuY2VzbmV0LmN6L3BraS9jcmwvY249Q0VTTkVUJTIw
Q0EsZGM9Y2VzbmV0LWNhLGRjPWN6LmNybIZUbGRhcDovL2xkYXAuY2VzbmV0LWNh
LmN6L2NuPUNFU05FVCUyMENBLGRjPWNlc25ldC1jYSxkYz1jej9jZXJ0aWZpY2F0
ZVJldm9jYXRpb25MaXN0MB8GA1UdIwQYMBaAFC9sBcNRJqyvOZw+ODXdUikngMX1
MB0GA1UdDgQWBBSo9Hnbvg5HchstLUwj8kkBHA88HDANBgkqhkiG9w0BAQUFAAOC
AQEAgbnrp/sPF76DlC2Ehll9I417XOnOZdW3C1rKcZSh9vm6tonse21pBVC4799H
Ajy4i22AbIg37N9Wh7sfUf0pZbuen4Eo6PEdUTQhIsJTAp/Dpp7WlQwjDRSUCTS7
PyqPHKHCacSogDCwilylgBvD/VokryJKWce4cIr2YT09+uMCCIqHNYcihDEBOdGM
0S1uFcV7bUeHtXqvDfWeSaU0XgraSZvSuDGu1S5BkKvg3GbaYlakjEZce6g1GQsA
035XrYOVM4U3+W/C8SuxS47R31SGE1xsBWbwz6EPhUK1/SFAoAPDZ5P1aeuugcEX
OdbkmjrpK8okfqGw+9V2Sgk08Q==
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:KeyName>sp2.cesnet.cz</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=sp2.cesnet.cz,O=CESNET,DC=cesnet-ca,DC=cz</ds:X509SubjectName>
<ds:X509Certificate>MIIELzCCAxegAwIBAgIEQrOJWDANBgkqhkiG9w0BAQUFADBDMRIwEAYKCZImiZPy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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SLO/Artifact"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SLO/SOAP"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/NIM/Artifact"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/NIM/POST"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/NIM/Redirect"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/NIM/SOAP"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SAML/Artifact" index="6"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SAML/POST" index="7"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SAML2/Artifact" index="8"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SAML2/ECP" index="9"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SAML2/POST" index="10"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sp2.cesnet.cz/edugain/Shibboleth.sso/SAML2/POST-SimpleSign" index="11"/>
<AttributeConsumingService xmlns="urn:oasis:names:tc:SAML:2.0:metadata" index="0">
<ServiceName xml:lang="en">CESNET Test SP</ServiceName>
<ServiceDescription xml:lang="en">Shows available attributes and assertions</ServiceDescription>
<RequestedAttribute FriendlyName="email" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
<RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
<RequestedAttribute FriendlyName="eduPersonEntitlement" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
<RequestedAttribute FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
<RequestedAttribute FriendlyName="email" Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
<RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
<RequestedAttribute FriendlyName="eduPersonEntitlement" Name="urn:mace:dir:attribute-def:eduPersonEntitlement" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
<RequestedAttribute FriendlyName="eduPersonTargetedID" Name="urn:mace:dir:attribute-def:eduPersonTargetedID" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
</AttributeConsumingService>
</md:SPSSODescriptor>
<Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
<OrganizationName xml:lang="en">cesnet.cz</OrganizationName>
<OrganizationName xml:lang="cs">cesnet.cz</OrganizationName>
<OrganizationDisplayName xml:lang="en">CESNET</OrganizationDisplayName>
<OrganizationDisplayName xml:lang="cs">CESNET, z. s. p. o.</OrganizationDisplayName>
<OrganizationURL xml:lang="en">http://www.ces.net/</OrganizationURL>
<OrganizationURL xml:lang="cs">http://www.cesnet.cz/</OrganizationURL>
</Organization>
<ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
<GivenName>eduID.cz</GivenName>
<SurName>Administrator</SurName>
<EmailAddress>eduid-admin@eduid.cz</EmailAddress>
</ContactPerson>
</md:EntityDescriptor>
|
