blob: ca1762e1b7849dbdb21872be718252eaf010e4bb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
|
<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://sp3.kcc.ac.uk/idp/shibboleth">
<!--
This is a "[Test]" Shibboleth IdP for Kensington and Chelsea College.
-->
<Extensions>
<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
<saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
</saml:Attribute>
</mdattr:EntityAttributes>
<mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://ukfederation.org.uk" registrationInstant="2016-09-12T13:36:56Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://ukfederation.org.uk/doc/mdrps-20130902</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
</Extensions>
<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
<Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">kcc.ac.uk</shibmd:Scope>
<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
<mdui:DisplayName xml:lang="en">Kensington and Chelsea College [Test]</mdui:DisplayName>
<mdui:Description xml:lang="en">Test IdP for Kensington and Chelsea College </mdui:Description>
<mdui:Logo height="33" width="80">https://sp3.kcc.ac.uk/images/KCC_log-min.png</mdui:Logo>
<mdui:Logo height="32" width="32">https://sp3.kcc.ac.uk/images/KCC_32x32.png</mdui:Logo>
<mdui:Logo height="16" width="16">https://sp3.kcc.ac.uk/images/KCC_16x16.png</mdui:Logo>
</mdui:UIInfo>
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDHzCCAgegAwIBAgIUK/eqiHHsXGsyEoTqc8Djx8oHlEEwDQYJKoZIhvcNAQEL
BQAwGDEWMBQGA1UEAwwNc3AzLmtjYy5hYy51azAeFw0xNjA5MDYxMDQ0NDdaFw0z
NjA5MDYxMDQ0NDdaMBgxFjAUBgNVBAMMDXNwMy5rY2MuYWMudWswggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+5XIbQrYHjb3fYoi9l9ZJbCt7Detcqn7
x7QwG4P5BuR7lUCQgfbaQfWMxzM+oLRUiZsaAtemc5AwLJb1KJDHfPURC3cJ40ut
0BD+HcMC1YloRohFLeIBO7vylsNaWVvgKYPkUEC34W3mhg5MbX/Puy+R9o+dmLe4
ru+rMcJ/Bqd4BF+UMSttiFAsjXhIPMulHDEtkYU416ni5te6yyuChVcZnpWVvUzW
GvlsANbBrWilO4wJDITZwGHGV9D+NRKSqcQ6rQUjybXnl7uYmKb1kD8jnCsI46ps
KxaigmtbbX4lhSjx0OkwydUa7o8/yOie6+tluP5nYuEOGyt+k5a/AgMBAAGjYTBf
MB0GA1UdDgQWBBQMspUL+szy3Vut2Uc4HQLWdmSfUTA+BgNVHREENzA1gg1zcDMu
a2NjLmFjLnVrhiRodHRwczovL3NwMy5rY2MuYWMudWsvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggEBAFvE+z9+DPkesbWBnTwx8cNYufddP2hw+6tcUuc0
1qPwHYDopzqm8XziGq+Idx2UuDGqTYaleJG/t8n+ndH0RcGPmdFX3Xv+MNGl4i3a
A4vLA0WSYrU5UnZTwj4ZrwmeAiJvrwMn1CO9QesoZRp9NXK+7kTSjXliQJdpXK/w
B1m9CzfEvJexUldx1zzOxICV99rNI1gYoDiJSs5mluLHwwWSLbWFnP3Jt7qqaSEm
dEhCKn+z/QkWZwVYtkh0/yKMLKKGu4u55RXYXtawAvgW8IzDE9gI6IeWiX4fEpIX
AzkFXiOjZ1UueXKwGHUcwbFSLmJazrTWQ3exChD8X2X0Aes=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://sp3.kcc.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp3.kcc.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://sp3.kcc.ac.uk/idp/profile/Shibboleth/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp3.kcc.ac.uk/idp/profile/SAML2/POST/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sp3.kcc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp3.kcc.ac.uk/idp/profile/SAML2/Redirect/SSO"/>
</IDPSSODescriptor>
<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
<Extensions>
<shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">kcc.ac.uk</shibmd:Scope>
</Extensions>
<KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDIDCCAgigAwIBAgIVAIFdZYVYKrLThgZVbIJKiM0RYuEVMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDXNwMy5rY2MuYWMudWswHhcNMTYwOTA2MTA0NDQzWhcN
MzYwOTA2MTA0NDQzWjAYMRYwFAYDVQQDDA1zcDMua2NjLmFjLnVrMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOwSg16D+54TNmKSTXa8eyKp0tX8JVG3
T6kqGHNWy6L6IYNznUY+bmlcxreZ6CR3ciEU/nC90YT1jBYYWofyGG/XUTrijkNG
C6rmOV/yuC2hQ2LpW2c5AIwV6uIx88Wda+UdojzYw3usiIb2lw2nl+bVOzrOaSEU
fb0RjxJLUwhPBaL5NPn3nMNkmrQ8RYFXnaWtaJyeiJGQAaExfBnQrcw/EM84r16/
VvZp4AYi009c6gcRR//252AfSdAo0OlYdLQc7C5CEnpGoQgBOv+7QhtrwXBC1Cb2
aE8kTyoTDA6YI0BAVqMyCr91n559NpLEGDiHftRppJSh0HR8jpUhUQIDAQABo2Ew
XzAdBgNVHQ4EFgQUVS0/Kp0fKY3oxFxe5E6ZayAQS2AwPgYDVR0RBDcwNYINc3Az
LmtjYy5hYy51a4YkaHR0cHM6Ly9zcDMua2NjLmFjLnVrL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQCEaBonpmXeFcVoUKltBYiwuwPPNgk0luVtwc41
PsZzcQtTzcTXItodsf9RMFoPrI+qUdDBWfwn9dPboCvsSj4d1Ylz8LtPoHq/XAbN
9Y1YEqFL5X0M2BGY3mMv6jt76mC5ZxDf3vQMXz4TEm66m5RY3ab1J1i79fZzTcWh
MrjaVF9K7kVQWlbcRG8ISJVHkcj4dkbCo2+FQ0hYF6dcVr0vxmX82zYWsTlaIadf
2oabDIJhnZf13zQjECLDJQpWDX/hIGcwjEHEPf6QpP2YGdvoKsU4P1Y+bGUa/Qo9
eBqXMFf9bp1rFLUyXIXWpB3PWl0bq+WmCRsNSsfl0uuMs16y
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIDHzCCAgegAwIBAgIUCOm3pfT7JIQIwtn6lYxN/zWKI/swDQYJKoZIhvcNAQEL
BQAwGDEWMBQGA1UEAwwNc3AzLmtjYy5hYy51azAeFw0xNjA5MDYxMDQ0NDRaFw0z
NjA5MDYxMDQ0NDRaMBgxFjAUBgNVBAMMDXNwMy5rY2MuYWMudWswggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD5WgtrouFosd4BVf5nNrQJUqv69vNoVZW
2fiYXIltWRfEnBuqdgiGMw/E0LOm6LTT3an0NtLKD21EBo4iJbfbV91UJaRxGrdE
NZc7bZmQ4a5i4onmCAz+CP21dPcIOHQRVliaOHSRLzltYW+sltwb0ybl+zrHDltr
DMeJrnHmo/c1ZmPmqlzM0OzvVJSAIz/vgCpBBrrd/LXDWnDjJ0JTHN851IsMV54I
xWXCp8yFqemqGGN8/N9znUuTn9gTsCnAUyqy0L/pnsISGrbnkdbh2AjWbxXiNndq
g5zHsJNWr7MSabEHmUPhc/ZVTmAHs0EeAV+ra8Sn/wXUIEWmcHFFAgMBAAGjYTBf
MB0GA1UdDgQWBBRFISoY2B+wCM/MPkKmfQDfwCZfiTA+BgNVHREENzA1gg1zcDMu
a2NjLmFjLnVrhiRodHRwczovL3NwMy5rY2MuYWMudWsvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggEBADWHh0q+B7tSuP1gKBJmjKbZactuaSjcNUaFUeTN
FvnR+Evl8wMXt7zdH+JFapVUOfm2kerry/9GIaHzdRMNcNR+NdmDi3d7svAAQ1sA
K6EC9257iqsgBDhe9FdGmufc3TpTuKg9iesYtjfuZqZpqK7mbLLwv3QGExsl5f7J
coaX2SO90l7wL/ms6KTUEBR0REWgBRprGTPPnVX9HeZ1vXbI9uqS0tAkfWanOAPl
VfEHzWpVYlBPe6w4BHoiAFjLHIfDTmYdrq4rt4CAYOFS0+z8U4HqeVVk/1u/rilX
qMsbzOAda4QpL0SKLzpowvHl5ylvu9OUnUZgDOZ8Joy6xB8=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</KeyDescriptor>
<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://sp3.kcc.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp3.kcc.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
</AttributeAuthorityDescriptor>
<Organization>
<OrganizationName xml:lang="en">Kensington and Chelsea College</OrganizationName>
<OrganizationDisplayName xml:lang="en">Kensington and Chelsea College [Test]</OrganizationDisplayName>
<OrganizationURL xml:lang="en">http://www.kcc.ac.uk/</OrganizationURL>
</Organization>
<ContactPerson contactType="support">
<GivenName>Anthony</GivenName>
<SurName>Jack</SurName>
<EmailAddress>mailto:t.jack@kcc.ac.uk</EmailAddress>
</ContactPerson>
<ContactPerson contactType="technical">
<GivenName>Richard</GivenName>
<SurName>Williams</SurName>
<EmailAddress>mailto:r.williams@kcc.ac.uk</EmailAddress>
</ContactPerson>
</EntityDescriptor>
|
