Skip to content
Snippets Groups Projects
nefed.xml 2.32 MiB
Newer Older
        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">TMA</mdui:DisplayName>
                <mdui:Description xml:lang="en">TMA is the Computerized Maintenance Management System used by University Operations at UNL</mdui:Description>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor ID="_0320ce9e-63f8-4063-b713-ec6a1a606140"
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://tmaweb7-dev.unl.edu/webtma7/SAML/ACS?c=unldev" index="0" isDefault="true" />
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en">TMA</OrganizationName>
            <OrganizationDisplayName xml:lang="en">TMA</OrganizationDisplayName>
            <OrganizationURL xml:lang="en">https://tmaweb7-dev.unl.edu/webtma7/SAML/ACS?c=unldev</OrganizationURL>
        </Organization>
    </EntityDescriptor>
    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="unl-preprod-20231113" entityID="https://cocurricular.unl.edu">
        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" />
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Orbis</mdui:DisplayName>
                <mdui:Description xml:lang="en">Orbis</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://orbiscommunications.com/about/</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://orbiscommunications.com/privacy-policy/</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
            <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
            Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
            Location="https://cocurricular.unl.edu/Shibboleth.sso/Login" />
        </Extensions>
        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>vmoutcomeproxyp</ds:KeyName>
                <ds:X509Data>
                <ds:X509SubjectName>CN=vmoutcomeproxyp</ds:X509SubjectName>
                <ds:X509Certificate>MIID/zCCAmegAwIBAgIUcOL5xWWo+Q1gPlkTRrf/nUyJOBswDQYJKoZIhvcNAQEL
                    BQAwGjEYMBYGA1UEAxMPdm1vdXRjb21lcHJveHlwMB4XDTIzMTAyNzE2NDUyOVoX
                    DTMzMTAyNDE2NDUyOVowGjEYMBYGA1UEAxMPdm1vdXRjb21lcHJveHlwMIIBojAN
                    BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAgI8jZFOfPdwxxuoAxE9mdJKSoHTN
                    kH+nqAThASSkSTEKeJZwai/shP9vGnn9FpvX/CbiUwWhCUnDbkXWcm4W6+FnIDWN
                    2SiiGiz972TH3t36QflnpQNz1w2X4JxVunG3F3HacRkZeFEbu4iebxx750+EEAwY
                    Ljmlm6fly3aw5b3yQftgQfIHtI2NqVewBlvnSB/1DexerplfBPzBlgjCNpieUL2z
                    k0ef+B8UAGO98gVXzt5QmWbJ1JKeHmFTtdtqemy4rze4CvKS5ZgzoIxm+F2z26jX
                    42xey+x6UGnrhuuymPG24e5ox0x+dfZFXXqubxi85hl2JkkOtAvN67ln7jWsZfg1
                    55ZwZv0aIoS0YT9u5E1B3dIzCDQfrQhZ+j2qYsUiQQpc20oUXvytQ+MRuzJg86Be
                    XyPzIyLklDRH8gTcRMT4PCxAZdyT1sFiFyIllBEPYYL9pfNqURRJ0xtHBEBZINh2
                    pd6k+yRY2XrS2/84wUGbTTeIH9ggKxA+YwHZAgMBAAGjPTA7MBoGA1UdEQQTMBGC
                    D3Ztb3V0Y29tZXByb3h5cDAdBgNVHQ4EFgQUFCPFADaLLd7AJCR+8PhedTFSYmow
                    DQYJKoZIhvcNAQELBQADggGBACNR0fvhjroP7zsmNn3rNtPmMiIKl8SgOgJcs9EO
                    V3hbj+rDAXExW1nyl2pHin7ggSxtzSFMMKCVcMH+54KXjZAOm0eThPhtUyX7EdFX
                    FMWEJqV2QS3PqsPtVs153zSOpH7dKiR5xcpT0Jz6byjMrkmP4Vyt/Pkzsc6JKhxs
                    62vCXCduVxTs8mDlK/qvrXXvom8XvYmo3jQWbZc7CLlNlU/1okc9anREcW6e48dH
                    n8dbE4lIzhiUA6ytcBO9pebpOI33B3Kj+jEH+iq5hdJSgCOtHDVeupPwEi+22b37
                    aankm2n+xQBy4tSs7gqeKQEVijsb8eWoiV2U7+fwhdvOP1s5gIX6qH3bk02v1RNW
                    U7h3B+XM5Cqkpninprs5cMg1AmB2Dh6mscau6DYRTMK7PCUhQcSzmgi7MQTayU50
                    mRQ1BBCFoCFCvjF9KoO65rRaM17dj1L2tZYz+1Wpy5PRCsnssQ4DWGdC8XiTFULN
                    gtOEAqJcm1/lZ8I/2GyZ8WyNYg==
                </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            </KeyDescriptor>
            <KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>vmoutcomeproxyp</ds:KeyName>
                <ds:X509Data>
                <ds:X509SubjectName>CN=vmoutcomeproxyp</ds:X509SubjectName>
                <ds:X509Certificate>MIID/zCCAmegAwIBAgIUIJceoHi2bDvGb4i4cFWNQOvEbkYwDQYJKoZIhvcNAQEL
                    BQAwGjEYMBYGA1UEAxMPdm1vdXRjb21lcHJveHlwMB4XDTIzMTAyNzE2NDUyNVoX
                    DTMzMTAyNDE2NDUyNVowGjEYMBYGA1UEAxMPdm1vdXRjb21lcHJveHlwMIIBojAN
                    BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEApIWegQpwX50hPgxo0avyOqmC0Syj
                    6QocR3ULV8tLdo6zZGf8WQpNJ0iwYFW5B/XJg91HH8SQKVIKDVz9QTAPn48+3tlA
                    Guzw4Qt0uwjgtyeSSf86BHkuSZEb6BBQlwWlKhHe3PafDGpS0fhd3yu/lrbRP+5K
                    mJOnfjoHXAmc4Ch8Rqle/LiJLV+xyYA6TOUE1gLXTmVF4IfD0aHR7aAqaFESxfB/
                    wPdDENGoRAXrYiUFuDM/qZXtPzQQy3eHVms3iinSGHAWF5V8AFAOHRYpw9wWSnfC
                    bQP5Jn9TnbOk8ZuGCgE6BROmABKCM6NotiFnyh9rNHHLGWo8pSg1FtCW1G3PX63p
                    n9Lb8EcTCxWYnmdbS4Hha6A+kHWzmYmRo+ljev8JWitJqD2DXmeGxk2viR4PpvOg
                    Uespjqm2NoKmAqjqivqQIGI/ZxC2vhTu+BGi9160K1xsiP1MJTusdkr6MVWGSZ8g
                    34olddJRr482be6kcudHhXrht98912h8yexbAgMBAAGjPTA7MBoGA1UdEQQTMBGC
                    D3Ztb3V0Y29tZXByb3h5cDAdBgNVHQ4EFgQUrWl+WivP/dibVi6mi0DrsF/Orwgw
                    DQYJKoZIhvcNAQELBQADggGBAIR1nJPpI9+Qj06/1uDXghAGYchdPXkcTcEQm6Km
                    MNKovEyhbRV1yG7vXhqTqUOMqZiP1GZeutRpGByF4ee4JS0YWNZm/bkMNjyCWV5m
                    nGtectH5LtqmlhZaUC8xG0fYVv9n2P7hXOI62NRkJ4lM3bFRyGY0oR/F3JeziSKD
                    bFSVDx4/JQOKESmL8YosR32ZUfNybtyv/S6YoicOTYfbPPLzGZaopfmFvT/sgAFs
                    0jt23b0zkhyPSS96wQWdCYI4ar+M1hg1dFzQXkaVlenB32FtsqFWX9IOQwZjjwsU
                    PY2bOVA9FcBp9NBAsJqY2ihgYi1nYyvTWWC9jzzZ19HZzjIBMWQMMvUDtjYW0inS
                    +HBNr7zsfouA6clxN7COCmaHFQ7IvBeIScNr3wWRzEQHyqaA0FNG+TNdbHGt0f/u
                    mRGpCgtkNuMjoc/l60HpYsUoArqyyJ9lmArMdkYD0jhip9jMV3AVZrEcSieTKyVH
                    jiEV9W3BrbQQn6YaMSez45m9hA==
                </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" />
        </KeyDescriptor>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/Artifact/SOAP" index="1" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SLO/SOAP" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SLO/Redirect" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SLO/POST" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SLO/Artifact" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SAML2/POST" index="1" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SAML2/POST-SimpleSign" index="2" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SAML2/Artifact" index="3" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
        Location="https://cocurricular.unl.edu/Shibboleth.sso/SAML2/ECP" index="4" />
    </SPSSODescriptor>
    <Organization>
        <OrganizationName xml:lang="en">Orbis Communications</OrganizationName>
        <OrganizationDisplayName xml:lang="en">Orbis</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">https://orbiscommunications.com</OrganizationURL>
    </Organization>
</EntityDescriptor>
<EntityDescriptor
        entityID="https://nebraska.delinea.app/identity-federation/sp/4f382e65-436d-48a3-923f-591680a531da"
        xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
                <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>unNUID</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Delinea</mdui:DisplayName>
                <mdui:Description xml:lang="en">Delinea</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://delinea.com/about</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://delinea.com/privacy-policy</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true"
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                Location="https://nebraska.delinea.app/identity-federation/saml/logout-consumer" />
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:entity</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
            <AttributeConsumingService>
                <ServiceName xml:lang="en-US">Delinea Attribute Service</ServiceName>
                <RequestedAttribute isRequired="false" Name="Description" FriendlyName="Description" />
                <RequestedAttribute isRequired="false" Name="DisplayName" FriendlyName="DisplayName" />
                <RequestedAttribute isRequired="false" Name="EmailAddress"
                    FriendlyName="EmailAddress" />
                <RequestedAttribute isRequired="false" Name="Group" FriendlyName="Group" />
                <RequestedAttribute isRequired="false" Name="HomeNumber" FriendlyName="HomeNumber" />
                <RequestedAttribute isRequired="false" Name="LoginName" FriendlyName="LoginName" />
                <RequestedAttribute isRequired="false" Name="MobileNumber"
                    FriendlyName="MobileNumber" />
                <RequestedAttribute isRequired="false" Name="Name" FriendlyName="Name" />
                <RequestedAttribute isRequired="false" Name="OfficeNumber"
                    FriendlyName="OfficeNumber" />
                <RequestedAttribute isRequired="false" Name="Photo" FriendlyName="Photo"><!--Warning:
                    Photos should only be sent when using the
                    urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST binding because of URL length
                    restrictions.-->
                </RequestedAttribute>
                <RequestedAttribute isRequired="true" Name="UserPrincipalName"
                    FriendlyName="UserPrincipalName" />
            </AttributeConsumingService>
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://nebraska.delinea.app/identity-federation/saml/assertion-consumer"
                index="0" isDefault="true" />
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                Location="https://nebraska.delinea.app/identity-federation/saml/assertion-consumer"
                index="1" isDefault="false" />
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en-US">Delinea</OrganizationName>
            <OrganizationDisplayName xml:lang="en-US">Delinea</OrganizationDisplayName>
            <OrganizationURL xml:lang="en-US">https://delinea.com</OrganizationURL>
        </Organization>
    </EntityDescriptor>
    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
        xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
        xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
        entityID="https://sso.glean.co/auth/realms/glean" ID="ID_09582261-f4aa-4105-a7ce-b6caf0187646">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Glean</mdui:DisplayName>
                <mdui:Description xml:lang="en">Glean</mdui:Description>
                <mdui:InformationURL xml:lang="en">
                    https://glean.co</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">
                    https://glean.co/privacy-notice</mdui:PrivacyStatementURL>
                <mdui:Logo height="85" width="141" xml:lang="en">
                    https://d33v4339jhl8k0.cloudfront.net/docs/assets/5d0b46150428637fd7c53265/images/653108d3234cd75251327aab/Unknown-3.jpeg</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
            AuthnRequestsSigned="false" WantAssertionsSigned="false">
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://sso.glean.co/auth/realms/glean/broker/saml.shibboleth.nebraska-lincoln/endpoint"></SingleLogoutService>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://sso.glean.co/auth/realms/glean/broker/saml.shibboleth.nebraska-lincoln/endpoint"
                isDefault="true" index="1"></AssertionConsumerService>
            <AttributeConsumingService isDefault="true" index="1">
                <ServiceName xml:lang=""></ServiceName>
                <RequestedAttribute FriendlyName="displayName"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></RequestedAttribute>
            </AttributeConsumingService>
        </SPSSODescriptor>
    </EntityDescriptor>