InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1604606025-validUntil.2020-11-19T19.44.31Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 9451892..0940529 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20201104T195134" 
Name="urn:mace:incommon" validUntil="2020-11-18T19:51:34Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20201104T195134"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>KSMpI9JGuKu+t0pA/bOXMIzxkT2dTlJ+GAL/ydB5UMA=</DigestValue></Reference></SignedInfo><SignatureValue>WFkVLuO9tpnaHiBXjwIhegJ6bY7IdqRMq2nIos3eoJBev0qcysFjpmVzrwgVXcvqJf4cFe0cuiV/
-VU60gVuGLYiNp+tYyLrDOp7E1CiWWtnhETPTLD8+rHIUytN5M3XmlLN9xGJvjTjrECtS0/Kgi8Rs
-9QD2OBkPTS//6PShJEewQYplohsz7ps3vYIix2kvm1B8egQAbwAo8mPJw7zJV+be1LFNyE/OiBO7
-LMnGicfMDSDijrZbS7qOAmNCOphZTM8SfwdKhv1aCRX6s2t5yFsSa6RyzQRpXbC0d11hPHxM/vXi
-6lxYTqXB1dHLTimSPy7iNozWPRDa8bfmELHmWQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20201105T194431" 
Name="urn:mace:incommon" validUntil="2020-11-19T19:44:31Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20201105T194431"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>1ofwfBxLfCsbVxaA/OOo4+4WMYbbG8BhLeAoLU6Yd2A=</DigestValue></Reference></SignedInfo><SignatureValue>xlNmA3OPIBLxiluUnPGECj+Ldm2PUHPxyevvqvlNHO9GEgJoVTPECEEVCruok5ZUkn4o1gga3UiL
+T2E1RH2Qd3vp2Uhu+YAzCAwRKStFjzLnG3Zf+DQ3VJ5xTqZ2ejdPdKRHnhJzO64TZGZO7X/gmU0/
+zQfUH/7f0PfHgJhhJvliBlVxL/xXyKYaEKR1mEjb5Svj8HqiLT2Qi1yOZDVo+n+egLo6uPUAxaQg
+UT1eDOIvgn/sexVSAnlY1gZ4q1470RpctfshR5inGhexxdOG5IAutTbyB3Qz5ZzKT5OY6dUduIeC
+5GlUXxzd18O72rZS+TCmm/0vgu0SFS8+9pMrHQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2020-11-04T19:51:34Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2020-11-05T19:44:31Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -1590,6 +1590,7 @@ 
etXQ98XBAxe34E+xL1iYcqodJpbi0pXqLRMktM1DKzqneR87+gvQFVp6YnPLdmI=
       </ds:KeyInfo>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://wwwx.sce.cornell.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://wwwx.sce.cornell.edu/sce/services/Shibboleth.sso/SAML2/POST";
 index="2"/>
   </SPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">Cornell University</OrganizationName>
@@ -19299,6 +19300,7 @@ j6Y=
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://login.dev.at.internet2.edu/Saml2/acs/post"; index="1"/>
     <AttributeConsumingService index="1">
@@ -19383,6 +19385,7 @@ TLfiUQkFwF5ddg==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://login.staging.at.internet2.edu/Saml2/acs/post"; index="1"/>
     <AttributeConsumingService index="1">
@@ -19544,6 +19547,7 @@ KFxglBbOpepugJvWFQ7VsBWCAg==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://service5.internet2.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
   </SPSSODescriptor>
@@ -20116,6 +20120,7 @@ tuEyjjpQPRUZ/A==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://dev.perfsonar.net/Shibboleth.sso/SAML2/POST"; index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://webdev8.internet2.edu/Shibboleth.sso/SAML2/POST"; index="2"/>
@@ -148917,166 +148922,6 @@ b9Vro1b7MedOrIwTO166VVpzHDLNO+cF5g==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
-<EntityDescriptor entityID="https://search-dev.trln.org/sp/shibboleth";>
-  <Extensions>
-    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
-    <mdattr:EntityAttributes>
-      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
-        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
-      </saml:Attribute>
-    </mdattr:EntityAttributes>
-  </Extensions>
-  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol 
urn:oasis:names:tc:SAML:2.0:protocol">
-    <Extensions>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://search-dev.trln.org/Shibboleth.sso/DS"; index="1"/>
-      <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="en">Triangle Research Libraries Network 
Development Site</mdui:DisplayName>
-        <mdui:PrivacyStatementURL 
xml:lang="en">https://library.unc.edu/privacy-policy</mdui:PrivacyStatementURL>
-        <mdui:Logo height="238" width="532" 
xml:lang="en">https://www.trln.org/files/2018/06/TRLN-logo-1.png</mdui:Logo>
-      </mdui:UIInfo>
-    </Extensions>
-    <KeyDescriptor>
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <!-- Serial No. 81, expires on Fri Oct 30 20:21:15 2020 GMT -->
-          <ds:X509Certificate>
-MIIFEDCCA/igAwIBAgIBUTANBgkqhkiG9w0BAQQFADCBrzELMAkGA1UEBhMCVVMx
-FzAVBgNVBAgTDk5vcnRoIENhcm9saW5hMRQwEgYDVQQHEwtDaGFwZWwgSGlsbDEj
-MCEGA1UEChMaVU5DIEdlbmVyYWwgQWRtaW5pc3RyYXRpb24xJTAjBgNVBAMTHGZl
-ZGVyYXRpb24ubm9ydGhjYXJvbGluYS5lZHUxJTAjBgkqhkiG9w0BCQEWFnJvb3RA
-bm9ydGhjYXJvbGluYS5lZHUwHhcNMTAxMTAyMjAyMTE1WhcNMjAxMDMwMjAyMTE1
-WjCBpzELMAkGA1UEBhMCVVMxFzAVBgNVBAgTDk5vcnRoIENhcm9saW5hMRQwEgYD
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1604606025-validUntil.2020-11-19T19.44.31Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations