Merge branch '329-onboard-amazon-store' into 'master'

Resolve "Onboard Amazon Store"

Closes #329

See merge request !449

nefed.xml

@@ -31086,4 +31086,63 @@ Gk3Mp05d1eUmuSx+la30QAXkFgNXDP3Cp3JSKyG5A6EWjhXTyuNZcI/ffo6tjNWg
             <EmailAddress>security@nebraska.edu</EmailAddress>
         </ContactPerson>
     </EntityDescriptor>
+    <EntityDescriptor entityID="https://www.amazon.com" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
+        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
+            <mdattr:EntityAttributes>
+                <saml:Attribute Name="http://macedir.org/entity-category"
+                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
+                </saml:Attribute>
+                <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
+                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+                    <saml:AttributeValue>unNUID</saml:AttributeValue>
+                </saml:Attribute>
+            </mdattr:EntityAttributes>
+            <mdui:UIInfo>
+                <mdui:DisplayName xml:lang="en">Amazon Business</mdui:DisplayName>
+                <mdui:Description xml:lang="en">Amazon Business</mdui:Description>
+                <mdui:InformationURL xml:lang="en">https://amazon.com</mdui:InformationURL>
+                <mdui:PrivacyStatementURL xml:lang="en">https://www.amazon.com/b?node=20907011011</mdui:PrivacyStatementURL>
+            </mdui:UIInfo>
+        </Extensions>
+        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
+            WantAssertionsSigned="true" AuthnRequestsSigned="false">
+            <KeyDescriptor use="encryption">
+                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+                    <ds:X509Data>
+                        <ds:X509Certificate>
+                            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
+                        </ds:X509Certificate>
+                    </ds:X509Data>
+                </ds:KeyInfo>
+            </KeyDescriptor>
+            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
+            <AssertionConsumerService index="1"
+                Location="https://www.amazon.com/bb/feature/sso/action/3p_redirect"
+                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" />
+        </SPSSODescriptor>
+        <Organization>
+            <OrganizationName xml:lang="en-US">Amazon Business</OrganizationName>
+            <OrganizationDisplayName xml:lang="en-US">Amazon Business</OrganizationDisplayName>
+            <OrganizationURL xml:lang="en-US">https://amazon.com</OrganizationURL>
+        </Organization>
+        <ContactPerson contactType="technical">
+            <GivenName>Roger Korth</GivenName>
+            <EmailAddress>rdkorth@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="support">
+            <GivenName>Roger Korth</GivenName>
+            <EmailAddress>rdkorth@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="administrative">
+            <GivenName>Tony Gano</GivenName>
+            <EmailAddress>agano@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="other"
+            remd:contactType="http://refeds.org/metadata/contactType/security">
+            <GivenName>ITS Security</GivenName>
+            <EmailAddress>security@nebraska.edu</EmailAddress>
+        </ContactPerson>
+    </EntityDescriptor> 
 </EntitiesDescriptor>