diff --git a/nefed.xml b/nefed.xml index 3117b088adf4a73297fb804307d2ab4fe2af6f63..b580aa889144421086f4c16e0875d1b5e356ec9a 100644 --- a/nefed.xml +++ b/nefed.xml @@ -29997,4 +29997,169 @@ and do *NOT* provide it in real time to your partners. <EmailAddress>security@nebraska.edu</EmailAddress> </ContactPerson> </EntityDescriptor> + <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_2da05d7ce12a0d76d91d299b8c6c5c8c3c0d1345" + entityID="https://its-hsapd.nebraska.edu"> + <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" /> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" /> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /> + <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" /> + <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> + <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> + + <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" /> + <mdattr:EntityAttributes> + <saml:Attribute Name="http://macedir.org/entity-category" + NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> + <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue> + </saml:Attribute> + <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> + <saml:AttributeValue> + unNUID + </saml:AttributeValue> + </saml:Attribute> + </mdattr:EntityAttributes> + <mdui:UIInfo> + <mdui:DisplayName xml:lang="en">University of Nebraska High School Development</mdui:DisplayName> + <mdui:Description xml:lang="en">Development environment for University of Nebraska High School applications.</mdui:Description> + <mdui:InformationURL xml:lang="en"></mdui:InformationURL> + <mdui:PrivacyStatementURL xml:lang="en"></mdui:PrivacyStatementURL> + <mdui:Logo height="85" width="141" xml:lang="en"> + </mdui:Logo> + </mdui:UIInfo> + </Extensions> + <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"> + <Extensions> + <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" + Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/Login" /> + <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" + Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/Login" index="1" /> + </Extensions> + <KeyDescriptor use="signing"> + <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> + <ds:KeyName>its-hsapd.uncsdom.uneb.edu</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=its-hsapd.uncsdom.uneb.edu</ds:X509SubjectName> + <ds:X509Certificate>MIIEIDCCAoigAwIBAgIUdRhGb9D5RZEWsVLALgnyyf6gtjAwDQYJKoZIhvcNAQEL + BQAwJTEjMCEGA1UEAxMaaXRzLWhzYXBkLnVuY3Nkb20udW5lYi5lZHUwHhcNMjMw + NzMxMTIwMTE5WhcNMzMwNzI4MTIwMTE5WjAlMSMwIQYDVQQDExppdHMtaHNhcGQu + dW5jc2RvbS51bmViLmVkdTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGB + AJ3N8LFydO/u5e77f/Qs9cpAS3a/Z0TdK7KjKIq/J2H1tQM5pskR+Tayf2I7WR7V + QQDBO8L2Wa5BBualIOeZW7zLbM/kRfKABmbACVBgkD7ZwMFEtI8skOfW+CXW7W9c + HRMiGkMsNu4P2rFphvepPc/73abntNDVhxIG+DDWmGBSJb7I2U7easbZ4NvL2e3I + 8LCydZgUjaOuHGhhhwVCHqxlIi/9dhq4MPran8QhtSTBLCjD3VZ5vbvM8Ro0bbYC + SvHK7UZYXxAF6OxI5U88S5BsO/DDjCH4u4kXywbR2CRCfKzsqycoNOzNuPpgasUF + OSj6GjwKm0VnktvQxIcWyDwjc97SHE40OdLkNm7UZBVzplmIYGQ+o1ees5NnEFqr + POZcw1Q4BlxLkrRx4rsh896DDflYRcf2/jj/YwodYtjImZVtYcaP1QT8oXB4P/ox + OmNldy7/tkj6KCdx5FGH/eqTTSaPu1j7et0gK+Y5HJq9FW8xM1n/y1O/rrvw5udL + WwIDAQABo0gwRjAlBgNVHREEHjAcghppdHMtaHNhcGQudW5jc2RvbS51bmViLmVk + dTAdBgNVHQ4EFgQUL1ap5Mhcw9bLO2mDjvVGC6l+2KEwDQYJKoZIhvcNAQELBQAD + ggGBAI3XlgO+vYpkprLn+a5llxvE87xVdwJwIbyibWcLhIzs7S2ka/iY6uh3rXso + Qw7jig4aXQfhPFNNzSwRngm17+BofXY9fcAL8wn0wa1eLy15j6quynOwdCflM9se + jOVUpC3aVG4pDRHQTJO2qdmovD5UnxacnnkqKu8ITIY0dvnrvroDMyCxBaUvLEFp + UpuaJ2ijV0ozf/ZgNuNioMBpxkgvLr5WXdUT3EbXpjOPQM475XKFl1jWb+/rqvj4 + Fe1oONGil7vXjhFR4SWSsZ++dn9VHuA6UV4mzB+0tetAVXMdXM2sZ2NrddRTOucD + z/p16X56k57fUyea574Mmysscxdr2VMF+dG65tPD68S63ONjm9Rbn6zat7BYz6xp + ItGUhfS8HeGF8EcGi8y1ningg3hI+eo2GeUxfypdqkvH7BkrStkwJAPjYZSdo6Fa + JYPutF0PHCAw4jz3zxsQfdDQU7CprRQ1qoIksZZCVWfzepEdeYzLVeNXdBZS1KUF + zP0X6g== + </ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + </KeyDescriptor> + <KeyDescriptor use="encryption"> + <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> + <ds:KeyName>its-hsapd.uncsdom.uneb.edu</ds:KeyName> + <ds:X509Data> + <ds:X509SubjectName>CN=its-hsapd.uncsdom.uneb.edu</ds:X509SubjectName> + <ds:X509Certificate>MIIEIDCCAoigAwIBAgIUDWzEEm/sCVqEyMHZSkeNUxTkE+IwDQYJKoZIhvcNAQEL + BQAwJTEjMCEGA1UEAxMaaXRzLWhzYXBkLnVuY3Nkb20udW5lYi5lZHUwHhcNMjMw + NzMxMTIwMTEzWhcNMzMwNzI4MTIwMTEzWjAlMSMwIQYDVQQDExppdHMtaHNhcGQu + dW5jc2RvbS51bmViLmVkdTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGB + AMSx8L+gY1+tviY/hif2fKqwlLEG2OkqrNeiJTy19Q2UXYyxjJdbmUjrbdJwVMe8 + X5YIp/yGUK5w8fZHKmRpe19oDB2QR0uPP9c+FPtywpPoa5UWK8k4/gbxIPXpREqn + DAGlMjw7N+iw52fc/SK8zp/+HHghSyVMoPynigJnDacAzKOnSBti8uV1xzGXTP67 + t/fr6sYZbl/AiPqozjSY7UFOpnIS5Eu3W9YMMvArUNqKCWOKBUe1XacjZ+47prrs + KukrSSM+N5INSUs03X+hOM0igrmtebrZlxLbPkWgIGHsG6rpSH9qGyfedfsYkLQA + oWPo4Wq7sLUMw6PT58c/BiKJ1sQxNuCTDQ23XS+ANN+7rKsxPEQOrpzrMe6DJ1tk + Yi+f0/5S1a7xQOUADEaOUt24nqMndL1ftZctUE/NLZS43/0a8/MPHg29DQJGXLOi + TokeIEMQ/xi4IqABV4pOpR+8Akk5H7zUpqu6bqQQNedVcCdMizCVeyF3xaCnxa/P + OQIDAQABo0gwRjAlBgNVHREEHjAcghppdHMtaHNhcGQudW5jc2RvbS51bmViLmVk + dTAdBgNVHQ4EFgQUGmTiDe3ST2KVEm30IYLi1cq8XR4wDQYJKoZIhvcNAQELBQAD + ggGBAHof66xXDUQeZwClmlJK7W3zTrNhC2VAIe0ywVpf5nHzKw73z1jnNyXKeVOC + KZCRTsgwxZrR4N36Qs4IgVej4vfEmPK6woZqzDTLq6n5I36RDhx1JwUYt29ebBIP + KZfHBNZwkzVA+jvl3yWePUu6kc1R2+8lEAf7obiizzHqkM8p4HwP1zxH/SxHQqoX + Knwyd4t5w+7nPc6YpnbBfkOURx2Wzek4BJhVdPbeaP8h9IK9qN3XjkQcsmbBFZ9L + EoZuCDem7T2m1QrT4rxOOLGlDQ7rlpILJVoXgtuoMUK2JQOZmSrFwM77EZIA90NL + zkbeivV/mmom45/uyNM8Dxhxwp6oAW5XIZfSQj1XTIl7l0cD8tQXlv1+MsPKJGIT + OBuZixnfd9zJ3SdVBnxdvycFAosmmHvL1WpJOF7Rg4l/ZkYhNAlGzSXdKCRHAZtc + MsPDeWya6EpBbBmAsQlRAqAn5A0UvG+scl09ClliCXxlTNSd4MZPsQjBxGk1gjmk + Ag1lVw== + </ds:X509Certificate> + </ds:X509Data> + </ds:KeyInfo> + <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" /> + <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm" /> + <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm" /> + <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" /> + <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" /> + <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" /> + <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" /> + <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" /> + <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" /> + </KeyDescriptor> + <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/Artifact/SOAP" index="1" /> + <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SLO/SOAP" /> + <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SLO/Redirect" /> + <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SLO/POST" /> + <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SLO/Artifact" /> + <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SAML2/POST" index="1" /> + <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SAML2/POST-SimpleSign" index="2" /> + <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SAML2/Artifact" index="3" /> + <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" + Location="https://devfrontoffice.nebraska.edu/Shibboleth.sso/SAML2/ECP" index="4" /> + </SPSSODescriptor> + <Organization> + <OrganizationName xml:lang="en-US">University of Nebraska High School Development</OrganizationName> + <OrganizationDisplayName xml:lang="en-US">University of Nebraska High School Development</OrganizationDisplayName> + <OrganizationURL xml:lang="en-US">https://its-hsapd.nebraska.edu</OrganizationURL> + </Organization> + <ContactPerson contactType="technical"> + <GivenName>Web Application and Accessibility Team</GivenName> + <EmailAddress>webmaster@nebraska.edu</EmailAddress> + </ContactPerson> + <ContactPerson contactType="administrative"> + <GivenName>Web Application and Accessibility Team</GivenName> + <EmailAddress>webmaster@nebraska.edu</EmailAddress> + </ContactPerson> + <ContactPerson contactType="support"> + <GivenName>Web Application and Accessibility Team</GivenName> + <EmailAddress>webmaster@nebraska.edu</EmailAddress> + </ContactPerson> + <ContactPerson contactType="other" + remd:contactType="http://refeds.org/metadata/contactType/security"> + <GivenName>ITS Security</GivenName> + <EmailAddress>security@nebraska.edu</EmailAddress> + </ContactPerson> +</EntityDescriptor> </EntitiesDescriptor>