Resolve "Apogee onboarding"

Closes #77 (closed)

nefed.xml

@@ -13262,4 +13262,100 @@ KNGked4df0r1o5CozJ35FjKx1fiYucuvGXU+UZd5Yg6sF6MRhQqud32X3eOFJXS/ndm/jGit7B6A
             <EmailAddress>security@nebraska.edu</EmailAddress>
         </ContactPerson>
     </EntityDescriptor>
+    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_sbmcc4zqcvqs3yllwsowy2xoi9zcp9bosskbqll" entityID="https://login.apogeenet.net/sp" validUntil="2039-10-23T19:35:25.909Z">
+        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+            <mdattr:EntityAttributes>
+                <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nebraska</saml:AttributeValue>
+                </saml:Attribute>
+            </mdattr:EntityAttributes>
+            <mdui:UIInfo>
+                <mdui:DisplayName xml:lang="en">Stream2-IPTV</mdui:DisplayName>
+                <mdui:Description xml:lang="en">Stream2-IPTV</mdui:Description>
+                <mdui:InformationURL xml:lang="en">https://help.mystream2.com/</mdui:InformationURL>
+                <mdui:PrivacyStatementURL xml:lang="en">https://help.mystream2.com/search?query=privacy</mdui:PrivacyStatementURL>
+                <mdui:Logo height="85" width="141" xml:lang="en">https://d33v4339jhl8k0.cloudfront.net/docs/assets/56d71f579033601bde8bb523/images/57311e20c697915bcd92cff9/apogee-300x75-logos.png</mdui:Logo>
+            </mdui:UIInfo>
+        </Extensions>
+        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
+            <Extensions xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init">
+                <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://login.apogeenet.net/cas/login?client_name=SAML2Client0"/>
+            </Extensions>
+            <KeyDescriptor use="signing">
+                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+                    <ds:X509Data>
+                        <ds:X509Certificate>MIICpzCCAY+gAwIBAgIBATANBgkqhkiG9w0BAQUFADAXMRUwEwYDVQQDDAw3MzY1YTNhZDdhZWYw
+    HhcNMTgwNDAzMTQ1NDMyWhcNMTkwNDAzMTQ1NDMzWjAXMRUwEwYDVQQDDAw3MzY1YTNhZDdhZWYw
+    ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHeyc5Kx6zWLPSIt6UQd26uOWIgLMtPmy
+    3aPsRaS7nHZgQuMqx0zrXG6936iooSXSwaVZHj+OQEHftEGTvbAVlemdAjLZdSyrpSM5DGSrGn4E
+    X9tsBR3cXWHtYOBHb84RkJkfnlIcXDjr54tE4XZDjhaqGvx5gwzzWJhY9dhMzr9ep7T2Wx+4FuWI
+    lu5i10R9GlO86+8ujXgApC5xfNpXxuqBiRIEsl5sSdf5dfypgOUeCq3nQ5dfeJI99I9tybpLxDPw
+    gZMPhgs/2rbLzZ+oorv6ULs9B9UJSnXF8YQzTkaDptgvkP4AMKtNKuiTZP3zdkLsDnDkd5toLWKd
+    0OXZAgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAKL/l82wKTW8sdT5cE51hAwYEjM2WZI+dDVG+ViA
+    N8thIWha6Rqj9Wg9mr5flpVHpi55YA685hfGpcSiWFRepw/FkudO0fT7z0XxGztdWiIXVtxbJShq
+    iroCwCjb0o56nyNCtaTG+E4jI3HUP4mAqb8yUqh7zmiA6LVAK2CBFAAXyRWwbbU9j2yXycmlvfXO
+    rxUOvRbmcV7EHziXm0lo3klnE3ih32ZqX6B+J50si0eq4waQmipZA7lsgs5/JXVIsseHZCgXMpzr
+    K6iarMM3yPE/bya5kl4l2qQhXMyq2Go9pCgifBjQ2k3qDBCunTC4BJ42OFrEcZhzqml3uvXCtf8=</ds:X509Certificate>
+                    </ds:X509Data>
+                </ds:KeyInfo>
+            </KeyDescriptor>
+            <KeyDescriptor use="encryption">
+                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+                    <ds:X509Data>
+                        <ds:X509Certificate>MIICpzCCAY+gAwIBAgIBATANBgkqhkiG9w0BAQUFADAXMRUwEwYDVQQDDAw3MzY1YTNhZDdhZWYw
+    HhcNMTgwNDAzMTQ1NDMyWhcNMTkwNDAzMTQ1NDMzWjAXMRUwEwYDVQQDDAw3MzY1YTNhZDdhZWYw
+    ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHeyc5Kx6zWLPSIt6UQd26uOWIgLMtPmy
+    3aPsRaS7nHZgQuMqx0zrXG6936iooSXSwaVZHj+OQEHftEGTvbAVlemdAjLZdSyrpSM5DGSrGn4E
+    X9tsBR3cXWHtYOBHb84RkJkfnlIcXDjr54tE4XZDjhaqGvx5gwzzWJhY9dhMzr9ep7T2Wx+4FuWI
+    lu5i10R9GlO86+8ujXgApC5xfNpXxuqBiRIEsl5sSdf5dfypgOUeCq3nQ5dfeJI99I9tybpLxDPw
+    gZMPhgs/2rbLzZ+oorv6ULs9B9UJSnXF8YQzTkaDptgvkP4AMKtNKuiTZP3zdkLsDnDkd5toLWKd
+    0OXZAgMBAAEwDQYJKoZIhvcNAQEFBQADggEBAKL/l82wKTW8sdT5cE51hAwYEjM2WZI+dDVG+ViA
+    N8thIWha6Rqj9Wg9mr5flpVHpi55YA685hfGpcSiWFRepw/FkudO0fT7z0XxGztdWiIXVtxbJShq
+    iroCwCjb0o56nyNCtaTG+E4jI3HUP4mAqb8yUqh7zmiA6LVAK2CBFAAXyRWwbbU9j2yXycmlvfXO
+    rxUOvRbmcV7EHziXm0lo3klnE3ih32ZqX6B+J50si0eq4waQmipZA7lsgs5/JXVIsseHZCgXMpzr
+    K6iarMM3yPE/bya5kl4l2qQhXMyq2Go9pCgifBjQ2k3qDBCunTC4BJ42OFrEcZhzqml3uvXCtf8=</ds:X509Certificate>
+                    </ds:X509Data>
+                </ds:KeyInfo>
+            </KeyDescriptor>
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.apogeenet.net/cas/login?client_name=SAML2Client0&amp;logoutendpoint=true"/>
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.apogeenet.net/cas/login?client_name=SAML2Client0&amp;logoutendpoint=true"/>
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.apogeenet.net/cas/login?client_name=SAML2Client0&amp;logoutendpoint=true"/>
+            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
+            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.apogeenet.net/cas/login?client_name=SAML2Client0" index="0"/>
+        </SPSSODescriptor>
+        <Organization>
+            <OrganizationName xml:lang="en-US">Stream2-IPTV</OrganizationName>
+            <OrganizationDisplayName xml:lang="en-US">Stream2-IPTV</OrganizationDisplayName>
+            <OrganizationURL xml:lang="en-US">https://login.mystream2.com</OrganizationURL>
+        </Organization>
+        <ContactPerson contactType="technical">
+            <GivenName>Brian Cox</GivenName>
+            <EmailAddress>bcox@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="support">
+            <GivenName>Eric Haffey</GivenName>
+            <EmailAddress>eric.haffey@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="administrative">
+            <GivenName>Eric Haffey</GivenName>
+            <EmailAddress>eric.haffey@nebraska.edu</EmailAddress>
+        </ContactPerson>
+        <ContactPerson contactType="other" recontactType="http://refeds.org/metadata/contactType/security">
+            <GivenName>ITS Security Team</GivenName>
+            <EmailAddress>security@nebraska.edu</EmailAddress>
+        </ContactPerson>
+    </EntityDescriptor>
 </EntitiesDescriptor>