InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1605212516-validUntil.2020-11-26T20.06.39Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 8b938c7..e876dd5 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20201111T195731" 
Name="urn:mace:incommon" validUntil="2020-11-25T19:57:31Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20201111T195731"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>2p+12sQoUOpGYgHfDkf5Uk77YDOprEPIQg+nqzQE3gk=</DigestValue></Reference></SignedInfo><SignatureValue>lPXw29uq9S2e7WhmiYrym0ySMWcA/QRIl7tJUMazd5RT7m/Bpjt19Qv8yuD4ZBurnTIhkqWlYzFO
-0JlMRzbhVSFl+67YYZV9NSCytlFpcDlBZwZ4fbV3f4qUoQiEiFgQ7Mz9zbSWpNAzwFCtQsc+LP9s
-X8v4DGlVurxFXcs91CQsZL/Qhrjm762rCNin5IyTHXRpAM2RSsRALta7ZW3EIDvelpfK4KLmAPSI
-r7L2P/YdqultSpAQi+PCuEBQ1sgOJq+yTQXLCjbTXcFLcDhhfiA2vwjBeyFiaLqCwatWsQ9zz1U1
-PyX6Y0K4sZhuYUxE6gFZiv0v0XvGOpzlYCxMJg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20201112T200639" 
Name="urn:mace:incommon" validUntil="2020-11-26T20:06:39Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20201112T200639"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>sPpt+D/KzcRlB3wu4Nnlz/MmnoCG/syYP3jzK35mEok=</DigestValue></Reference></SignedInfo><SignatureValue>geRm/VH4WP3eaiamBeEEIF9bGnVuKKGUrizlZb04kdNXBg+jlGt6Wc7dannquvf+a1NRZz97Duqd
+tMBD1rfM4x1ncydIToB8wHSZDPtvporbe4GaSjE/sSxr8+4j/Bm80cxgGpMxH+6Pbyi3xkQ0xMIE
+kX95OLsD6PxjZGhcZsQD5+WwLTSiCAm9+sWfWhiVp7a7/yILUEP95cXNGf3ew88r89xVbrSt459V
+WlSppWEJHyMJv0TMKv5DM6XrW1yPOFQaPkgDqF97+IXbeNtpOm8fyNX3qrGyslFaPced7v2nTK6q
+1WgvcCVJKxEb+4G+ju6eYAU69ns54Up5ctAwsA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2020-11-11T19:57:31Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2020-11-12T20:06:39Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -1591,6 +1591,14 @@ 
etXQ98XBAxe34E+xL1iYcqodJpbi0pXqLRMktM1DKzqneR87+gvQFVp6YnPLdmI=
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://wwwx.sce.cornell.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://wwwx.sce.cornell.edu/sce/services/Shibboleth.sso/SAML2/POST";
 index="2"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://www.sce.cornell.edu/Shibboleth.sso/SAML2/POST"; index="3"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sce.cornell.edu/Shibboleth.sso/SAML2/POST"; index="4"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://www.ciw.cornell.edu/Shibboleth.sso/SAML2/POST"; index="5"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://www.sce.cornell.edu:444/Shibboleth.sso/SAML2/POST"; 
index="6"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sce.cornell.edu:444/Shibboleth.sso/SAML2/POST"; index="7"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://www.ciw.cornell.edu:444/Shibboleth.sso/SAML2/POST"; 
index="8"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://www.sce.cornell.edu/sce/services/Shibboleth.sso/SAML2/POST"; 
index="9"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sce.cornell.edu/sce/services/Shibboleth.sso/SAML2/POST"; 
index="10"/>
   </SPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">Cornell University</OrganizationName>
@@ -19301,6 +19309,7 @@ j6Y=
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://login.dev.at.internet2.edu/Saml2/acs/post"; index="1"/>
@@ -19386,6 +19395,7 @@ TLfiUQkFwF5ddg==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://login.staging.at.internet2.edu/Saml2/acs/post"; index="1"/>
@@ -19548,6 +19558,7 @@ KFxglBbOpepugJvWFQ7VsBWCAg==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://service5.internet2.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
@@ -20121,6 +20132,7 @@ tuEyjjpQPRUZ/A==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://dev.perfsonar.net/Shibboleth.sso/SAML2/POST"; index="1"/>
@@ -132692,8 +132704,8 @@ bI/uWiWiOJ5fH7JxJ6lBW7lfB4YGLDpRsA==
     <Extensions>
       <shibmd:Scope regexp="false">vanderbilt.edu</shibmd:Scope>
       <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="en">Vanderbilt 
University</mdui:DisplayName>
-        <mdui:Description xml:lang="en">This entry is for new for Vanderbilt 
University.  Currently it will accept both VU and VUMC users.  The IdP reside 
under the control of VU</mdui:Description>
+        <mdui:DisplayName xml:lang="en">ZZZ-  DO NOT USE  Vanderbilt 
University</mdui:DisplayName>
+        <mdui:Description xml:lang="en">This IdP is deprecated.  Please do 
not use. The current production entry is listed as Vanderbilt University 
(VU)</mdui:Description>
         <mdui:PrivacyStatementURL 
xml:lang="en">https://www.vanderbilt.edu/about/privacy.php</mdui:PrivacyStatementURL>
         <mdui:Logo height="200" width="200" 
xml:lang="en">https://news.vanderbilt.edu/files/vu06b.jpg</mdui:Logo>
       </mdui:UIInfo>
@@ -132744,6 +132756,74 @@ 
dirFVdORFYJvY5OEIVJQMtPzhYGiQ0ixqXkCoHWDzPBTSYr1jjRTN49dqPNog9ykTqnz6U0=
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://sso-login.vanderbilt.edu";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute Name="http://macedir.org/entity-category-support"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1605212516-validUntil.2020-11-26T20.06.39Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations