InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1610135520-validUntil.2021-01-22T19.41.34Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 21a6f67..65edb28 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210107T193945" 
Name="urn:mace:incommon" validUntil="2021-01-21T19:39:45Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210107T193945"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>Wnq07qDZY9hslm+aibZZKem3NPdEW4u3cf32oaagrOM=</DigestValue></Reference></SignedInfo><SignatureValue>CaquHXfHmsr2bNbOta6XII/3L95mxtjx+6eSMm7qi1riLUhr6R1XcxrXg+4w6ujAPWAyui0ZXQrW
-rRzPYLzXeKqnTpfi0SDVRCoY3eVw+hkStiV+uLzrqf2rHYbCMDK75AwlHvTQfB89+KTDoyE2C7Mh
-SBQGuPMFxCm6+WkoWw4afRmgNS8AmVEu0zX9tM2XsEq3072zJ7l2rZw3I7W1vll2zBu7yrkrBk+5
-UN5ua/+GlYV4HE8YIgavGSpin/6V00W8zJs7BeV2cnfPBFxUVWFeOBFb/IteJeaL8UmFQ/0UaJdd
-wpGrH9xixAxVjEYpAVN9v3XfOpmuIvS3/ClZjQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210108T194134" 
Name="urn:mace:incommon" validUntil="2021-01-22T19:41:34Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210108T194134"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>c7wZzas9jnhRI7WRUQ4bNKxG/7P6F+LCXsLI25oldU8=</DigestValue></Reference></SignedInfo><SignatureValue>ObH60waDlZabEhsiOS8HCiSikMXydPGiUQ6wq2Oml/QW/GzksdG6Tv9JkA9SM4tTLFTI/ctq8DTL
+c2sAZ6RK2d5o2pJySSriSEt7azQoqb9ts3cnXl8qFvg5kNmBFEgj0t5rqwG7Q/H9vn22BU/8jHk0
+obcfdnGrEnNOXfZuu74PddrXWqOr6W1Xy+l3EORLrCZBJufGEMkGlWQ1aaAqF97FMRooaRhCXBDH
++Mp3Y1/Jq17qDeGJfC+Sy3ysHtZJogCEEwZO4ygC3xhdxJLgAEVIcCsXFB6Z2GfB5nyH2VGfE5Lp
+wAxW2P0g/wYpeJbyNAOKPp1Qmxo0Xu9yMZ3aJQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-01-07T19:39:45Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-01-08T19:41:34Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -221296,6 +221296,7 @@ SEnHPV7S7g6dzQ==
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://blogs.cornell.edu/Shibboleth.sso/Login"; index="1"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://sites.coecis.cornell.edu/Shibboleth.sso/Login"; index="2"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://sites.as.cornell.edu/Shibboleth.sso/Login"; index="3"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://sites-dev.coecis.cornell.edu/Shibboleth.sso/Login"; 
index="4"/>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">Cornell University Blog 
Service</mdui:DisplayName>
         <mdui:PrivacyStatementURL 
xml:lang="en">https://incsub.com/privacy-policy/</mdui:PrivacyStatementURL>
@@ -221328,10 +221329,12 @@ SEnHPV7S7g6dzQ==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://blogs.cornell.edu/Shibboleth.sso/SLO/POST"/>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sites.coecis.cornell.edu/Shibboleth.sso/SLO/POST"/>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sites.as.cornell.edu/Shibboleth.sso/SLO/POST"/>
+    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sites-dev.coecis.cornell.edu/Shibboleth.sso/SLO/POST"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://blogs.cornell.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://blogs.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign"; 
index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://blogs.cornell.edu/Shibboleth.sso/SAML2/Artifact"; index="3"/>
@@ -221344,6 +221347,10 @@ SEnHPV7S7g6dzQ==
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://sites.as.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign"; 
index="10"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://sites.as.cornell.edu/Shibboleth.sso/SAML2/Artifact"; 
index="11"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" 
Location="https://sites.as.cornell.edu/Shibboleth.sso/SAML2/ECP"; index="12"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://sites-dev.coecis.cornell.edu/Shibboleth.sso/SAML2/POST"; 
index="13"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://sites-dev.coecis.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="14"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://sites-dev.coecis.cornell.edu/Shibboleth.sso/SAML2/Artifact"; 
index="15"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" 
Location="https://sites-dev.coecis.cornell.edu/Shibboleth.sso/SAML2/ECP"; 
index="16"/>
     <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">Cornell University Blog 
Service</ServiceName>
       <RequestedAttribute FriendlyName="cn" Name="urn:oid:2.5.4.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
@@ -324737,78 +324744,6 @@ 
yad8RYURZIr4uG84QNPQf1JV+TKdWS0lLH9UG+s8jqo6mblBzhFFAKAxzLlkKMtO/7c/fIuuBHj6
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
-<EntityDescriptor entityID="https://shib.unf.edu/idp/shibboleth";>
-  <Extensions>
-    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
-    <mdattr:EntityAttributes>
-      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
-        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
-      </saml:Attribute>
-    </mdattr:EntityAttributes>
-  </Extensions>
-  <IDPSSODescriptor errorURL="https://www.unf.edu/its/help/"; 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol 
urn:oasis:names:tc:SAML:2.0:protocol">
-    <Extensions>
-      <shibmd:Scope regexp="false">unf.edu</shibmd:Scope>
-      <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="en">University of North 
Florida</mdui:DisplayName>
-        <mdui:Description xml:lang="en">University of North Florida 
Shibboleth</mdui:Description>
-        <mdui:InformationURL 
xml:lang="en">https://shib.unf.edu/idp/shibboleth</mdui:InformationURL>
-        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.unf.edu/privacy/</mdui:PrivacyStatementURL>
-        <mdui:Logo height="128" width="125" 
xml:lang="en">https://shib.unf.edu/UNFLogo.jpg</mdui:Logo>
-      </mdui:UIInfo>
-    </Extensions>
-    <KeyDescriptor use="signing">
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <!-- Serial No. 1372897716567547582987024014049706177298431253879, 
expires on Tue Apr  1 19:05:36 2036 GMT -->
-          <ds:X509Certificate>
-MIIDHDCCAgSgAwIBAgIVAPB63N80dgAu4QhrU5IH+i00VJ13MA0GCSqGSIb3DQEB
-CwUAMBcxFTATBgNVBAMMDHNoaWIudW5mLmVkdTAeFw0xNjA0MDExOTA1MzZaFw0z
-NjA0MDExOTA1MzZaMBcxFTATBgNVBAMMDHNoaWIudW5mLmVkdTCCASIwDQYJKoZI
-hvcNAQEBBQADggEPADCCAQoCggEBAIcv13B7wX2jGfSR5UZVwtkhFM5pyg0I1bro
-FIXfERmP3UJpmO2tWZl+fqwwbT2bordc6bE7uVu0S+M28Zn3/IvBcIo81U7TYcM4
-2splqEL9F8+Sy03Wx16KUsX2jqkIeFGEfXkQtyfba3xJIkTKkQkPqz7K0rgeyGI8
-Ql2atAWWipzRAdIHC4I7yWdGVth3WJ55e6tRHQX5tSUqOCE77ThuPCR6U8Ie3Rym
-Iq7JXW5P6y0Z+CSBGGkhrz73OGu3gtsyiZ4xQk8lHxYVUXPjEy0hBC5zv9jQwucH
-mlq82p+UfeIZKv9M4jzd/SP18+D6isJPPkoVCsTaMA7qoAtH+tsCAwEAAaNfMF0w
-HQYDVR0OBBYEFLUET4d4Tg7lVjhXE+rP4Vt9Bwx0MDwGA1UdEQQ1MDOCDHNoaWIu
-dW5mLmVkdYYjaHR0cHM6Ly9zaGliLnVuZi5lZHUvaWRwL3NoaWJib2xldGgwDQYJ
-KoZIhvcNAQELBQADggEBAE8vvGeLB7mDNnoSXPtb5n1EkOhYE5KtFQIPWwuxmHhX
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1610135520-validUntil.2021-01-22T19.41.34Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations