Update idp.xml

internet2 · Oct 4, 2018 · c352137 · c352137
1 parent 0772f1a
commit c352137
Showing 1 changed file with 61 additions and 50 deletions.
diff --git a/idp.xml b/idp.xml
@@ -1,22 +1,23 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?><EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="INC20170306T193623" Name="urn:mace:incommon:icmp" validUntil="2020-03-20T19:36:23Z"><ds:Signature>
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><ns0:EntityDescriptor xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ns1="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:ma
+ce:shibboleth:metadata:1.0" entityID="https://login.at.internet2.edu/Saml2IDP/proxy.xml"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 <ds:SignedInfo>
 <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
 <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
-<ds:Reference URI="#INC20170306T193623">
+<ds:Reference URI="">
 <ds:Transforms>
 <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
 <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
 </ds:Transforms>
 <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
-<ds:DigestValue>KFGoVa3yW3VcpskjMYEfcFE68snoapGjMYuesNpzcO4=</ds:DigestValue>
+<ds:DigestValue>C7AjqJo4qK4RbjU9kUImSv0zIfxwqpYcY92fhEoXbLg=</ds:DigestValue>
 </ds:Reference>
 </ds:SignedInfo>
 <ds:SignatureValue>
-Es3REEYMqE+2JLhqo0mpFZvERjT9ihKPK2PMvCWDbL5Yov2YuixS9z+isoCB2cmkjQreCN0f0/mB
-v+wLtq7myFBDDIo+EkfYUMVHHixOfIyXUO7i8xWv32Xgi9aDAQ3MXQ0Uawwb3/iS8Ha5MxKwKeIh
-MlpvH9jhKN0FcprJ2Ynxx54wYSQ32BpsHCK5N9dTDkYk6/qtJyvecudtOilqQVq1W8dS6XPE7OZe
-UVuj057ke3lZbLBnMjNYeYjZ5HGvryMudNwXng0YonLZrruxv6OF6jhcM/Apo9Ya3eQkDI9aS6Bx
-pwSw9nanNcdlloclUOo8JMtpx6Mcag8h/wt9Hw==
+Iq9PL7QpPRs1FUuRrKvhengHnWp9fCNNrMFNw94kJ6Bg9kdfggb+iMGdDRx8gq+NHdxWMbg7QL5f
+jvW0h34jc/gXksm95tU4HLz7PD56ZP4pons70T6PM1eF3+GTUCXf+LwLFfvDFlLlZfQ+966MRz7B
+iAgB3eGv8QV5yvwW77dT6rcfQeHFEEL4VQRL9ka7zPnbxhb9mqnf7UB75lKjN4ODUEGSpansEMD/
+7AT+WR7xYG/UqBySqZoq9crS8FfeCG77p+YSi3occJGFRUf0wk6TWMyUPgOdwKVJZagq2+4B/n0P
+qb+SE/FuLDPCE9pvJu6AL4hUg8UHhQmh3yLYxQ==
 </ds:SignatureValue>
 <ds:KeyInfo>
 <ds:KeyValue>
@@ -54,45 +55,55 @@ nglyKd3iSqrFRL4LhHNUkhy4OnZeLYFXizIu6dgURQ==
 </ds:X509Data>
 </ds:KeyInfo>
 </ds:Signature>
-
-   <!-- Google proxy from Cirrus Identity -->
-   <md:EntityDescriptor entityID="https://google.cirrusidentity.com/gateway">
-      <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
-        <Extensions>
-          <shibmd:Scope regexp="false">google.com</shibmd:Scope>
-          <mdui:UIInfo>
-              <mdui:DisplayName xml:lang="en">Google Gateway</mdui:DisplayName>
-          </mdui:UIInfo>
-        </Extensions>
-        <md:KeyDescriptor use="signing">
-          <ds:KeyInfo>
-            <ds:X509Data>
-              <ds:X509Certificate>MIIECDCCAvACCQDG6tQKXONUEzANBgkqhkiG9w0BAQUFADCBxTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExEDAOBgNVBAcTB09ha2xhbmQxHjAcBgNVBAoTFUNpcnJ1cyBJZGVudGl0eSwgSW5jLjEgMB4GA1UECxMXQ2lycnVzIElkZW50aXR5IEdhdGV3YXkxIjAgBgNVBAMTGWdvb2dsZS5jaXJydXNpZGVudGl0eS5jb20xKTAnBgkqhkiG9w0BCQEWGnN1cHBvcnRAY2lycnVzaWRlbnRpdHkuY29tMB4XDTE0MDEwOTE2MzUzNloXDTM0MDEwODE2MzUzNlowgcUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRAwDgYDVQQHEwdPYWtsYW5kMR4wHAYDVQQKExVDaXJydXMgSWRlbnRpdHksIEluYy4xIDAeBgNVBAsTF0NpcnJ1cyBJZGVudGl0eSBHYXRld2F5MSIwIAYDVQQDExlnb29nbGUuY2lycnVzaWRlbnRpdHkuY29tMSkwJwYJKoZIhvcNAQkBFhpzdXBwb3J0QGNpcnJ1c2lkZW50aXR5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNGjc5vM/ZP5uZLH3merv21m5y3CYOKJ1ZVolBlu/6FL0ssYbORtzHdX8PuUZ6WdVW9w55ORE9A+2edFUB1lRj5BGJwfW0A6TbKfPNtrc3IxkcRFpJHAf4ew6WNXtCL/UdvXP2e3it8GxP6Gl5r6HZXL3GPmYPlkEMsNsWLkmWDKCheYd+tbIZvcKnFcDUH2UGNCpMkQmfzHyFm9D02eCwY2K17Y1UzxQpHonrSQv/afPmF0O5eXFiHXu/27cyzCxTAWI5NjN/5RcYgYLF4tjsv9aBc+Tm9oKH7CfvB/D13GTWj+vwmuVlk/RyWYO7tsd79jMcTk9h8tzoEhjqa7IsCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAJ0Zx87ITJt+Uuks7AzC83uheOKUwH88sSa6XsdRNYtmXplWfxUAQn/eiZ8Fzj/nb+2udhK1oPmAltDmel6qM5BcTaAv7k9D2Gvi3QrTt1czS1m3rOwN7FU3RkIJhG32CVJNMnYkzK+JSMYFOpHoZQy46Fn66onBqwCG7aYTNr5uOzG0hdM7K3RSF5PHeXjY7X63crgL2BNtlHhPR0ZFRPcYuWFzRdYV5+1Gu5qdSLcFMmIX2DlZn5vpcQBEPCEyMe+o0tBFSMeeUFjlOVrmF28hMwdsmwYc68dn7Bw9yjHlp7/nhRtrKRrjj4+/1Zybc/EeVBn9ccka+o2a4ubqRjQ==</ds:X509Certificate>
-            </ds:X509Data>
-          </ds:KeyInfo>
-        </md:KeyDescriptor>
-        <md:KeyDescriptor use="encryption">
-          <ds:KeyInfo>
-            <ds:X509Data>
-              <ds:X509Certificate>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</ds:X509Certificate>
-            </ds:X509Data>
-          </ds:KeyInfo>
-        </md:KeyDescriptor>
-        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://google.cirrusidentity.com/idp/SSOService/HTTP-Redirect"/>
-      </IDPSSODescriptor>
-      <Organization>
-        <OrganizationName xml:lang="en">Google Gateway</OrganizationName>
-        <OrganizationDisplayName xml:lang="en">Google Gateway</OrganizationDisplayName>
-	<OrganizationURL xml:lang="en">https://www.cirrusidentity.com</OrganizationURL>
-      </Organization>
-      <md:ContactPerson contactType="technical">
-        <md:SurName>Support</md:SurName>
-        <md:EmailAddress>support@cirrusidentity.com</md:EmailAddress>
-      </md:ContactPerson>
-    </md:EntityDescriptor>
-
-
-
-
-
-</EntitiesDescriptor>
+        <ns0:Extensions>
+            <shibmd:Scope regexp="true">^.*$</shibmd:Scope>
+        </ns0:Extensions>
+                <ns0:IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+                        <ns0:KeyDescriptor use="signing">
+                                <ns1:KeyInfo>
+                                        <ns1:X509Data>
+                                                <ns1:X509Certificate>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+                                                </ns1:X509Certificate>
+                                        </ns1:X509Data>
+                                </ns1:KeyInfo>
+                        </ns0:KeyDescriptor>
+                        <ns0:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</ns0:NameIDFormat>
+                        <ns0:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</ns0:NameIDFormat>
+                        <ns0:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.at.internet2.edu/Saml2/sso/redirect"/>
+                        <ns0:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.at.internet2.edu/Saml2/sso/post"/>
+                </ns0:IDPSSODescriptor>
+                <ns0:Organization>
+                        <ns0:OrganizationName xml:lang="en">Internet2</ns0:OrganizationName>
+                        <ns0:OrganizationDisplayName xml:lang="en">Internet2</ns0:OrganizationDisplayName>
+                        <ns0:OrganizationURL xml:lang="en">http://internet2.edu</ns0:OrganizationURL>
+                </ns0:Organization>
+                <ns0:ContactPerson contactType="technical">
+                        <ns0:GivenName>InCommon Ops</ns0:GivenName>
+                        <ns0:EmailAddress>admin@incommon.org</ns0:EmailAddress>
+                </ns0:ContactPerson>
+                <ns0:ContactPerson contactType="support">
+                        <ns0:GivenName>InCommon Ops</ns0:GivenName>
+                        <ns0:EmailAddress>admin@incommon.org</ns0:EmailAddress>
+                </ns0:ContactPerson>
+        </ns0:EntityDescriptor>