Resolve "Centraleyes Onboarding"

Closes #465 (closed)

nefed.xml

@@ -36127,4 +36127,49 @@ PRD49iI+tL/VkGo=
             <EmailAddress>basis@nebraska.edu</EmailAddress>
         </ContactPerson>
     </EntityDescriptor>
+    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+        entityID="urn:amazon:cognito:sp:us-east-1_kqYWxmXjz">
+        <Extensions>
+            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
+            <mdattr:EntityAttributes>
+                <saml:Attribute Name="http://macedir.org/entity-category"
+                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
+                </saml:Attribute>
+            </mdattr:EntityAttributes>
+            <mdui:UIInfo>
+                <mdui:DisplayName xml:lang="en">Centraleyes</mdui:DisplayName>
+                <mdui:Description xml:lang="en">Centraleyes</mdui:Description>
+                <mdui:InformationURL xml:lang="en">https://www.centraleyes.com/about-us/</mdui:InformationURL>
+                <mdui:PrivacyStatementURL xml:lang="en">
+                    https://www.proofpoint.com/us/legal/privacy-policy</mdui:PrivacyStatementURL>
+                <mdui:Logo height="85" width="141" xml:lang="en">
+                </mdui:Logo>
+            </mdui:UIInfo>
+        </Extensions>
+        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false"
+            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
+                Location="https://centraleyes-prod.auth.us-east-1.amazoncognito.com/saml2/idpresponse"
+                index="1" />
+        </SPSSODescriptor>
+        <ContactPerson contactType="technical">
+            <GivenName>Christopher Cashmere</GivenName>
+            <EmailAddress>ccashmere@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="administrative">
+            <GivenName>Christopher Cashmere</GivenName>
+            <EmailAddress>ccashmere@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="support">
+            <GivenName>Marwa Elnaem</GivenName>
+            <EmailAddress>marwaelnaem@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="other"
+            remd:contactType="http://refeds.org/metadata/contactType/security">
+            <GivenName>ITS Security</GivenName>
+            <EmailAddress>security@nebraska.edu</EmailAddress>
+        </ContactPerson>
+    </EntityDescriptor>
 </EntitiesDescriptor>

[Ryan Rumbaugh]

Please remove the empty mdui:Logo tag (throws a warning in Shib)

[Ryan Rumbaugh]

Nowadays I would always recommend using the email address nameID because unspecified is ignored by Shib which causes it to send "transient" nameID instead, which no service will ever use. Email is a nice compromise if we don't know exactly what the service provider needs.

<NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>