InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1605299306-validUntil.2020-11-27T20.17.00Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index c6d4723..8987c7d 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20201113T183555" 
Name="urn:mace:incommon" validUntil="2020-11-27T18:35:55Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20201113T183555"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>lrPcfzlT7V5J2jjjHAmsJctXk5of99tR5GR2Lx9zziY=</DigestValue></Reference></SignedInfo><SignatureValue>g5rnUdbA4RmmLQKB4Yu6rkJMjq66mHMK4O5hvEebmx29ymPPTMJGhjVoeU4OKF84a/Q5Iygzurl9
-e+4HYQkoqcXUtXimsTna//XOv/kxGC8JYQfsw/cDOGeQ5d40GOFQ7hWqRL7kIpadELfg58pV4Dha
-iQX83pIP3q/9hIg0352+1xz+AwGT3hJoob2eslP5IMoA19rk+cQELluABxNYfZgPb1RysQCj7XCS
-QxaA6piXJ2qj3r2PoSKhLEfHMxUMq/LN6ojtOReldg81G6BG4FpoALHFAJ36KSWKd/RkNW9b1CUf
-TJ2vaFRkzJEr7C5MSEhrhCZHFX8LNrOs5pJOuQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20201113T201700" 
Name="urn:mace:incommon" validUntil="2020-11-27T20:17:00Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20201113T201700"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>hwbSCUrA3m3y48MYCJq6ir2lnyoTWfEnMNDT+lpPO7w=</DigestValue></Reference></SignedInfo><SignatureValue>BHVoLH7Ya0hWp7TAAAtIpKng1HQe1WF7ryZb+I8TZpHumBQqtn2E6d6U1HF3N2Ref82EUXPhzGUM
+0vFdvnU7BzXob/aTFQ9sHnv1ka6By1w2tHkEakXVxZvMAlVqQSXt2WeCd2o4zTZXxVY00sAooHTR
+zp1pKwGqA8yXFsvAxfk5ASjK0Us2gj/NIWFRG9TFhXVchm/kEZbDi92v0LRtO5yzvSOMID9S1v8s
+ptA++QcdeZNmyvXuI2fqgAfzTY4SNNAxiV3Q9m0NeXCF9pVfW1S7FRGp1V9C4d/G3X7n4ZZ4c2vV
+3sPgABF4L4IGqqhPGaKJionQ9g7x6mSEPIFpow==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2020-11-13T18:35:55Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2020-11-13T20:17:00Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -85945,6 +85945,7 @@ AFzlbwDEQtKt7B5fKmuBCmAwDhP5Mv4AJQ==
       <ServiceName xml:lang="en">NIH Dev SP</ServiceName>
       <ServiceDescription xml:lang="en">The NIH Service Provider (SP) 
controls access by scientists, researchers, and collaborators worldwide to 
protected NIH systems and sites across all NIH Institutes, Centers, and 
Offices. To access resources protected by the NIH SP, external requestors are 
required to authenticate (often using multifactor authentication) and grant 
the release of a limited set of information such as name, email, and 
affiliation.  (About NIH: The National Institutes of Health (NIH), an agency 
in the U.S. Department of Health and Human Services (HHS), is the medical 
research agency of the United States — making important discoveries that 
improve health and save lives.)</ServiceDescription>
       <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonAssurance" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
@@ -86144,6 +86145,7 @@ wRSfMoNRIuKT4pg16x8=
       <ServiceName xml:lang="en">NIH SP</ServiceName>
       <ServiceDescription xml:lang="en">The NIH Service Provider (SP) 
controls access by scientists, researchers, and collaborators worldwide to 
protected NIH systems and sites across all NIH Institutes, Centers, and 
Offices. To access resources protected by the NIH SP, external requestors are 
required to authenticate (often using multifactor authentication) and grant 
the release of a limited set of information such as name, email, and 
affiliation.  (About NIH: The National Institutes of Health (NIH), an agency 
in the U.S. Department of Health and Human Services (HHS), is the medical 
research agency of the United States — making important discoveries that 
improve health and save lives.)</ServiceDescription>
       <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonAssurance" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
@@ -86247,6 +86249,7 @@ AFzlbwDEQtKt7B5fKmuBCmAwDhP5Mv4AJQ==
       <ServiceName xml:lang="en">NIH STAGE SP</ServiceName>
       <ServiceDescription xml:lang="en">The NIH Service Provider (SP) 
controls access by scientists, researchers, and collaborators worldwide to 
protected NIH systems and sites across all NIH Institutes, Centers, and 
Offices. To access resources protected by the NIH SP, external requestors are 
required to authenticate (often using multifactor authentication) and grant 
the release of a limited set of information such as name, email, and 
affiliation.  (About NIH: The National Institutes of Health (NIH), an agency 
in the U.S. Department of Health and Human Services (HHS), is the medical 
research agency of the United States — making important discoveries that 
improve health and save lives.)</ServiceDescription>
       <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonAssurance" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
       <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
@@ -163185,6 +163188,77 @@ wbM31uS10rxsPsSVCcL6sd9LlKF5c+fxlw9nrCSXSGU=
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://sao-dev.andrew.cmu.edu/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Student Financial Services 
Development</mdui:DisplayName>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.cmu.edu/policies/information-technology/computing.html</mdui:PrivacyStatementURL>
+        <mdui:Logo height="125" width="181" 
xml:lang="en">https://login.cmu.edu/images/cmu-181x125.gif</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 12040198350499421317, expires on Sun Oct 27 
18:39:00 2030 GMT -->
+          <ds:X509Certificate>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.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1605299306-validUntil.2020-11-27T20.17.00Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations