swamid-interfederations-2.0/whoami.cesnet.cz-idp-shibboleth.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://whoami.cesnet.cz/idp/shibboleth">
  <md:Extensions>
    <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
      <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
    </eduidmd:RepublishRequest>
    <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.eduid.cz/" registrationInstant="2010-09-15T11:47:38Z">
      <mdrpi:RegistrationPolicy xml:lang="en">http://www.eduid.cz/wiki/_media/en/eduid/policy/policy_eduid_en-1_1.pdf</mdrpi:RegistrationPolicy>
      <mdrpi:RegistrationPolicy xml:lang="cs">http://www.eduid.cz/wiki/_media/eduid/policy/policy_eduid_cz-1_1-3.pdf</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://eduid.cz/uri/idp-group/other</saml:AttributeValue>
        <saml:AttributeValue>http://eduid.cz/uri/idp-group/cesnet</saml:AttributeValue>
        <saml:AttributeValue>http://eduid.cz/uri/sp-group/aa.cesnet.cz</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cesnet.cz</shibmd:Scope>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">CESNET</mdui:DisplayName>
        <mdui:DisplayName xml:lang="cs">CESNET</mdui:DisplayName>
        <mdui:Description xml:lang="en">Identity Provider for CESNET employees.</mdui:Description>
        <mdui:Description xml:lang="cs">Identity Provider pro zaměstnance CESNETu.</mdui:Description>
        <mdui:InformationURL xml:lang="en">http://www.ces.net/</mdui:InformationURL>
        <mdui:InformationURL xml:lang="cs">http://www.cesnet.cz/</mdui:InformationURL>
        <mdui:Logo height="88" width="200">https://pki.cesnet.cz/_media/cs/cesnet-logo-200.gif</mdui:Logo>
        <mdui:Logo height="177" width="400">https://pki.cesnet.cz/_media/cs/cesnet-logo-400.gif</mdui:Logo>
        <mdui:Logo height="353" width="800">https://pki.cesnet.cz/_media/cs/cesnet-logo-800.gif</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>
MIIDLDCCAhSgAwIBAgIVAPtcN7LUM3UEz0yqfmOvpr0tZtYOMA0GCSqGSIb3DQEB
CwUAMBsxGTAXBgNVBAMMEHdob2FtaS5jZXNuZXQuY3owHhcNMTUxMjE0MDkyMjU4
WhcNMzUxMjE0MDkyMjU4WjAbMRkwFwYDVQQDDBB3aG9hbWkuY2VzbmV0LmN6MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlyX+ljxEHVNiX4Kt3AMYj6P
UgWAGHkb5t1xZhrijzWspc6wTc6iNQnLzFTafl1KJktWMHBNmFvUQyHGjCVbski4
WWUNS4rCFyY7USNjdjiKb7lHqw4OLwd6GMnI6njbUkY7tQJ/Dq3lGPjs+LJ9jPq3
9l2kSbsMz55WN86aC7J+WwSjCv2BHYs/KEJ+127RUVBtloSmNRZfjJQcdKFsp+mS
OyMP91WtZQwg3b7EXOOqSkm55esBWJiwII565SHfrl4aQe58xA/V2sHeFH4IbtH/
IZsibhM/G0eBr9dvHtyfcWvnlA8cmQaD964nVqnYpFa/eXYfg53V1Ft6KQMvgwID
AQABo2cwZTAdBgNVHQ4EFgQUXaI0YDr1Q2G4mM18pIXB3+nPUHUwRAYDVR0RBD0w
O4IQd2hvYW1pLmNlc25ldC5jeoYnaHR0cHM6Ly93aG9hbWkuY2VzbmV0LmN6L2lk
cC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQBzZ5sJtPabubBWaC5UAbl8
+ZGzSrT72R9vfxW6+NJVK9C5LvCp6a6U3KDrZwMRb5hKvAbkQji1bPHAQ+Bt7qtj
iz4vxBDJueIuZCoHbSSkK9Xb5h9025TGICxNFtty3y4LvroPZ3wYACXdjA/Si3xK
JF6us/yB6hcAf6ML7DyXW+o4q+35HHmAjBUssXHU70iLOiTnIfbEgxl54Af7xKpZ
8Ww45V9t2dJ5YU6wzoa0Aqy0abm0RxkWu6igXjpcS+XaSl5n+J+tFEZBRtJZ5mBv
EQWIvarHy4CabFyOcb1Bl3UHfvQyi3R4RfQsEIYaYBa/5c3LJr3KC8mWCA8vuPx+
                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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=
                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://whoami.cesnet.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://whoami.cesnet.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://whoami.cesnet.cz/idp/profile/SAML2/Redirect/SLO"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://whoami.cesnet.cz/idp/profile/SAML2/POST/SLO"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://whoami.cesnet.cz:8443/idp/profile/SAML2/SOAP/SLO"/>
    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://whoami.cesnet.cz/idp/profile/Shibboleth/SSO"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://whoami.cesnet.cz/idp/profile/SAML2/POST/SSO"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://whoami.cesnet.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://whoami.cesnet.cz/idp/profile/SAML2/Redirect/SSO"/>
  </md:IDPSSODescriptor>
  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cesnet.cz</shibmd:Scope>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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=
                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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                        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://whoami.cesnet.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
    <md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://whoami.cesnet.cz:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
  </md:AttributeAuthorityDescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">CESNET, a. l. e.</md:OrganizationName>
    <md:OrganizationName xml:lang="cs">CESNET, z. s. p. o.</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">CESNET</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="cs">CESNET</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">http://www.ces.net/</md:OrganizationURL>
    <md:OrganizationURL xml:lang="cs">http://www.cesnet.cz/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Oppolzer</md:SurName>
    <md:EmailAddress>jan.oppolzer@cesnet.cz</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:GivenName>Jan</md:GivenName>
    <md:SurName>Tomasek</md:SurName>
    <md:EmailAddress>jan.tomasek@cesnet.cz</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>