Onboard its-sitecoreqcd

Name of Requester Eric Zoz

NUID 90349459

Email Address ezoz@nebraska.edu

Phone Number 4024727661

Campus this service will serve NU Wide

When do you need this ready for your project GoLive 13 August, 2021

Service Single Sign On Authentication

Service Name https://its-sitecoreqcd.nebraska.edu

Service Display Name NEDDS Sitecore QA Content Delivery

Is service an InCommon member? Yes

What attributes are required for release to the service (if known) eduPersonEntitlement

What Identifier is required for the service (if known) Does the product support encrypted assertions/certificates Yes

What Identity Provider(s) does the service need for Authentication TrueYou

Administrative Contact Name Eric Zoz

Administrative Contact Email Address ezoz@nebraska.edu

Technical Contact Name Eric Zoz

Technical Contact Email Address ezoz@nebraska.edu

Support Contact Name Eric Zoz

Support Contact Email Address ezoz@nebraska.edu

How is Service authorization managed Other (please note in description)

If your Service is a third party vendor, please provide their privacy policy URL here If you would like to display a custom logo image during the sign on process, please provide the URL here Description, including what, where, how, and when this service is utilized

Authenticated area of NSRI Sitecore website that requires authorization to access certain pages/documents. Will use a grouper group ('nsri users') to control who has access.

Paste your service provider metadata below (SAML only)

<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_58a4d17e9de8a754ce5ee836a03cd6735e308ff9" entityID="https://its-sitecoreqcd.nebraska.edu">

<md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
</md:Extensions>

<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://qansri.nebraska.edu/Shibboleth.sso/Login"/>
<idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://qansri.nebraska.edu/Shibboleth.sso/Login" index="1"/>
</md:Extensions>
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:KeyName>its-sitecoreqcd.uncsdom.uneb.edu</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=its-sitecoreqcd.uncsdom.uneb.edu</ds:X509SubjectName>
<ds:X509Certificate>MIIEMjCCApqgAwIBAgIUVN7VDxVUJFKtDCHou5liDtpDU2UwDQYJKoZIhvcNAQEL
BQAwKzEpMCcGA1UEAxMgaXRzLXNpdGVjb3JlcWNkLnVuY3Nkb20udW5lYi5lZHUw
HhcNMjEwNzE5MTIwNjI5WhcNMzEwNzE3MTIwNjI5WjArMSkwJwYDVQQDEyBpdHMt
c2l0ZWNvcmVxY2QudW5jc2RvbS51bmViLmVkdTCCAaIwDQYJKoZIhvcNAQEBBQAD
ggGPADCCAYoCggGBAOsi3cVwGfmRhZ2NukZrsuJQuNZgsS5rWkW9c/Q5TcKIttQD
iUf1hcx6h6zw7LtYFuGLgkdJXsC016WzucIHjEkmTMkohOfvxN0wqcmvaBCDNCps
YlopTzvwGLY1ZMbU0At0PIANOkIddFMVAIta8LtoP3RmiYgeF9cvtYiZDwpJGhyP
GH8qemHhoLwxastF4xqiuOd7LB7kj7VCxEuGOGFHcZkgNknbsfMLfYfRn71233vK
XXFsuvddwCJPq9qbEQbFhbhHM8nKZowcBAkOAmGJeuWxOgXR/mSsj2+F9EeMrA/x
hSy2hDd2T9Q8+iaQ9BuNGEJpgSViMtylqg0e/xanShg3xi/EIGLxLMVt1ym5kZII
6Mc8xU7FAVwDX+h4FRAyIRBL8yj5RdOVOBHJT2+EHIKqYbrK3uIMhfVqyfVFWCIt
30hIsEFNUDmZPdDBYWx7BHHXdMjM0SbLXglP3vNh6fTUjXpijoc6IlJ6tbfozZc1
bFrob0YPPpp+6iDmsQIDAQABo04wTDArBgNVHREEJDAigiBpdHMtc2l0ZWNvcmVx
Y2QudW5jc2RvbS51bmViLmVkdTAdBgNVHQ4EFgQUvHPbvbonB6lFUlAvdIeVAayt
8qswDQYJKoZIhvcNAQELBQADggGBAJMya3+1v5a3AQxw6YCuPZ+qPe0PNRyqp48z
0emywWjcLmAS5tUCE5vR6WS+eRw+9XDcIyWxeISk3tYzVs5CioH2VHcGYERTCqAx
r8tiED54RATchO5JwSCMtBR7oSrMSiuG0z3Fr2RQtK2TIgyQYWTBUHUxWlulfDHj
SdmZrFQLO/oKBbl4YySRUV9ykGJFk+UXBIPN4erg2ZmD/sYoIXWc1k91VPUWaYmF
/RM3hg5KeksGgqvDN7jV9aiPNou9NEGXE4Hz+pMSqMCsBJFx0XliNFR1NErchFQe
G2bD+8sL5pdxG5Y6chnJVU/YnzMYfcnZE35qEAstQFHIDDiXMVWqQSl6ewF8dIz5
6gjU5rwtjF9fgyBhuvWY5d771FD/2i3kVurL2Kt8ej5adnADDTaQl590Mcw4gu77
kR53UGclMpM4XTiwWnUTnUt4IUZqU7YgdP6qmc/0x6FsSuG/N7ZwgfszqYRT6Ybv
CDD67xzV7r1L5jBVACoTRWTIN+/qkg==
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:KeyName>its-sitecoreqcd.uncsdom.uneb.edu</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=its-sitecoreqcd.uncsdom.uneb.edu</ds:X509SubjectName>
<ds:X509Certificate>MIIEMjCCApqgAwIBAgIUFJodl4oIVwqr0L97hliOJyruTqIwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://qansri.nebraska.edu/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://qansri.nebraska.edu/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://qansri.nebraska.edu/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://qansri.nebraska.edu/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://qansri.nebraska.edu/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://qansri.nebraska.edu/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://qansri.nebraska.edu/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://qansri.nebraska.edu/Shibboleth.sso/SAML2/Artifact" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://qansri.nebraska.edu/Shibboleth.sso/SAML2/ECP" index="4"/>
</md:SPSSODescriptor>

</md:EntityDescriptor>

Service Documentation