InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the          
  
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1459452164-validUntil.2016-04-14T18.56.40Z.diff

--- /opt/incommon/backup_metadata/InCommon-metadata.xml 2016/03/30 19:11:22   
  1.2091
+++ /opt/incommon/backup_metadata/InCommon-metadata.xml 2016/03/31 19:22:11
@@ -1,22 +1,22 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20160330T184434" 
Name="urn:mace:incommon" validUntil="2016-04-13T18:44:34Z"><ds:Signature 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20160331T185640" 
Name="urn:mace:incommon" validUntil="2016-04-14T18:56:40Z"><ds:Signature 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
 <ds:SignedInfo>
 <ds:CanonicalizationMethod 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
 <ds:SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
-<ds:Reference URI="#INC20160330T184434">
+<ds:Reference URI="#INC20160331T185640">
 <ds:Transforms>
 <ds:Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
 <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
 </ds:Transforms>
 <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
-<ds:DigestValue>IQ1Z+mkkUb0oHDW8cIXee1NShxsC6iAROMWCm3GecGg=</ds:DigestValue>
+<ds:DigestValue>YsT6JoAAmk0NLnBPaT1bFXTqRsu/wByu9B9s1DS1GgQ=</ds:DigestValue>
 </ds:Reference>
 </ds:SignedInfo>
 <ds:SignatureValue>
-F3R5YAqOE8q5N5OYcNVks1zRK9Tr31kRZGaBMAsCwxPr2uMRbw7ZUqSSuAVKnMaO0VVXuT8Qkkqy
-TZLxPCiZ8y3s0dv+s37G8dEd5OxbW1RuQTpfkWHY3M7p0uUFPhUkkTe4JLIrK1kINHDbHn8wMy1O
-yQryZ1HYJnf0k48eQcOPPeN0Ov0Z0rOCK/126AX9LWNvD6zLZDbhBUEUg2Dcx9FpWKnk12riC/oA
-vk2iB6A9DlFU0j8L7ZyYd1lcOskoQMxRSDm93t/FZpEqaZaYATDypLsos+zTOFiKNuE9SQ5/qHN1
-Spqv7FHVsxw6XTXyS+1Nc24Q+Gj0kcMxeMv8kA==
+oGKzI5hPJrL7rHZW+GIBOlObymsz4D8UNWPiZ5P2MqllGAGnt/UxsPF9d1sDbo+pzzvHk0NPuarM
+jXRetCZKjZ3SwGJeWqA677+VAm6bHGudUtp0WTw8Ufw2JN43ySZtkK2AwkEXbM/o8pPurBVwEK1Z
+jrFAPANbRvvW/UkIYX9rTDlQoPLkcUJ//ljBxnPpcBSNc7Y3TAnARGPeyBvJCpd9a6IQZ54QlOUv
+V3NZReRvOoCA7WeCz4+EswXR4RvwZilwcWIWfNq6sPuqZfCaacQljbZ2jCbyDcOhpubrIb0Z49FJ
+OmYBwD+uE2DvIORwwl1P0AaqGEz2Zb0FAv5Asg==
 </ds:SignatureValue>
 <ds:KeyInfo>
 <ds:KeyValue>
@@ -54,7 +54,7 @@
 </ds:KeyInfo>
 </ds:Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2016-03-30T18:44:34Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2016-03-31T18:56:40Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://carmenwiki.osu.edu/shibboleth";>
   <Extensions>
@@ -59286,6 +59286,8 @@
     <Extensions>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">Microsoft Academic Verification 
Engine</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Microsoft uses the Academic 
Verification Engine (AVE) to determine client academic eligibility in its 
global business. Academic eligibility is defined as:
+“Individual must be a full or part time enrolled university or college 
student or faculty or staff at an eligible accredited educational institution 
and must be able to provide proof of enrollment to Microsoft or its appointed 
vendor upon request. Alumni of these institutions are ineligible.” AVE uses 
federated data as one of many verification methods to determine academic 
eligibility.</mdui:Description>
       </mdui:UIInfo>
     </Extensions>
     <KeyDescriptor>
@@ -59315,6 +59317,33 @@
         </ds:X509Data>
       </ds:KeyInfo>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+<!-- Serial No. 11153140320414058804, expires on Wed Mar 10 19:42:33 2021 
GMT -->
+          <ds:X509Certificate>
+MIIDPTCCAiWgAwIBAgIJAJrH6geQXck0MA0GCSqGSIb3DQEBBQUAMCgxJjAkBgNV
+BAMTHXRlc3RzaGliLm1zYWNhZGVtaWN2ZXJpZnkuY29tMB4XDTE2MDMxMTE5NDIz
+M1oXDTIxMDMxMDE5NDIzM1owKDEmMCQGA1UEAxMddGVzdHNoaWIubXNhY2FkZW1p
+Y3ZlcmlmeS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0+lw1
+ZhFsxvxo4CQJkmp+fBbSuLYrK/kTaXGrI8Ih6kGpWLJHDIiIVa1IQ4ZekHV0uaLx
+3VuI9G47ldGsM22trPEAeFJkevQEaHrEbBKx4smf0VCK7l77cod+V3n+ZcIGraV/
+PdsyFQcxl6ou9iOpy6iuHPDHPmWD+UbK+7jXqjdwTl05Z15/qjFdd0X1GQLtoNCb
+gpC6MmA5kh4qq17LCjxcBvcMOoOyy74EIKC1V3+ARYPI+ZlR+5B3dKHdFm1t3e3W
+HuKMd3kF/aYBT0bT7PkQ5milbNn7wyEqDvFHknp6tMgMScjuNSA/ubR0HOmokIC0
+5nIsC5ZHyfScCI75AgMBAAGjajBoMEcGA1UdEQRAMD6CHXRlc3RzaGliLm1zYWNh
+ZGVtaWN2ZXJpZnkuY29thh10ZXN0c2hpYi5tc2FjYWRlbWljdmVyaWZ5LmNvbTAd
+BgNVHQ4EFgQULkp8EX6IrZIgFg/tkmQkbCNAHIowDQYJKoZIhvcNAQEFBQADggEB
+AGtNVbxzvCmDP1TEjQ3t5eCmtu8Pfu20+m7IeE/hFFQkA5Tq7pkTdSFold0goMag
+OTZLot6LYFDFdu6UHy+RUOs+J86RskGyxGy1YlcYUWs0MiCMZvdDxQtoXDVAirP9
+zqNZ/+ijoxFcTbCFZJH0MMIansOr4mn2voduOg6JIKh4jKUF36X9KbJSkzRx0mu5
+N040M5wlbwo4OiPAltFmhPbIF2ipcPaOK5Zpz+jyA5x33QFSmDILykP9e7q08j0F
+gn8j5J+iK6w5feOilz/dDL66zitxLhOm2IKF5tw7Z7dHShic3JR9qZ9rj3oBfn5j
+7ioqQaver65PjgkNAMUtvRM=
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://testshib.msacademicverify.com/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://testshib.msacademicverify.com/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://testshib.msacademicverify.com/Shibboleth.sso/SAML2/Artifact";
 index="3"/>
@@ -59323,9 +59352,9 @@
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" 
Location="https://testshib.msacademicverify.com/Shibboleth.sso/SAML/Artifact"; 
index="6"/>
     <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">Microsoft Academic Verification 
Engine</ServiceName>
-      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" 
NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
+      <ServiceDescription xml:lang="en">Microsoft uses the Academic 
Verification Engine (AVE) to determine client academic eligibility in its 
global business. Academic eligibility is defined as:
+“Individual must be a full or part time enrolled university or college 
student or faculty or staff at an eligible accredited educational institution 
and must be able to provide proof of enrollment to Microsoft or its appointed 
vendor upon request. Alumni of these institutions are ineligible.” AVE uses 
federated data as one of many verification methods to determine academic 
eligibility.</ServiceDescription>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
-      <RequestedAttribute FriendlyName="eduPersonTargetedID" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" 
NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
       <RequestedAttribute FriendlyName="eduPersonTargetedID" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
@@ -59334,10 +59363,6 @@
     <OrganizationDisplayName 
xml:lang="en">Microsoft</OrganizationDisplayName>
     <OrganizationURL 
xml:lang="en">http://www.microsoft.com/en/us/default.aspx</OrganizationURL>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1459452164-validUntil.2016-04-14T18.56.40Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D        

This is a one-way, notification only email list. If you have questions,
please email 
.
 You can also discuss
related issues with the community on
.

- InCommon Federation Operations