InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1618428990-validUntil.2021-04-28T19.27.00Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index dff93f6..cc86414 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210413T191253" 
Name="urn:mace:incommon" validUntil="2021-04-27T19:12:53Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210413T191253"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>KyZzoEh1j4kNrTyc6e6kmdf7+5+yVbje2wndrY/UKtk=</DigestValue></Reference></SignedInfo><SignatureValue>L/F9hqmZoEsx/lRomafAULdV07s1UvuCtktTVoJTPXXGE8PFNI8ygrPTJZ9m1E5cYMwaP5rPSdmY
-0bic9aOHro09NpU8uNJl0bZFuclQOM1XrlpoqJB8HFlACaXQ0rsPez8NnGF2S8wbbbhxyrmh5/Yh
-bJz3tYWvmuA9Gz3QMmbj0+GXwrWTMXjMP+ie3j0cZ7EW91Okhek6mASquPHY0vZ+vwl/YnkPt42s
-gUlXMN1dsrO2C+WnmwVn/eA2+UJsF13IlZTMM090USORlj8Gfee8dzQrH8lXHoBQKw0ddFHJE1qv
-DtW4WNIztCONACcnOm+Uk/Wwzdn0jEBkCT5kKQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210414T192700" 
Name="urn:mace:incommon" validUntil="2021-04-28T19:27:00Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210414T192700"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>UVAnw3p4QXMTcm2F6fZjwLbqmOwZwpmDABhBiu26m88=</DigestValue></Reference></SignedInfo><SignatureValue>qSacODxwXkVSI8K1Mzk8mz9TWEAcaDbcDDpSKs+sM4QsP1iqWRrRJl2fQXOBRGEJOduMQSs1BJKo
+n3TD4OGpW4fY2D3pMxFU+T3uQnfcrNiLWJE0Ix/2ilOAJ8euVjJOgjj2qbI9ULXWFAP7PKdHXngZ
+yWe8nMh2lU1nbDnqwN4HAOfu/r7hctOIhIm5DhuW0iyJiFocHmjayLFH1+UN5C4Yqz8kgJCLOWMn
+7c2EmXjP1d4CV5XFmfTyyZl7TSvCLY4eABnK6kUfClJKoVOTio3AvvANx9vatbr5Aw9YiRWRmk5T
+vNrHOQ6+3Loak/G//bFOTf/f1lIf1ZI06uktFg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-04-13T19:12:53Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-04-14T19:27:00Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -218680,6 +218680,8 @@ 
NjsZ6SZA+xXaouWB3BRKGZr+LHssNPAeQgJGB2ucyOdsRBNFrLamqPtfHHnMgeQM
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://25live-test.collegenet.com/collegeofthedesertt/Shibboleth.sso/SAML2/POST";
 index="770"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://25live.collegenet.com/middlebury/Shibboleth.sso/SAML2/POST"; 
index="771"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://25live-test.collegenet.com/middleburyt/Shibboleth.sso/SAML2/POST";
 index="772"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://25live.collegenet.com/lesley/Shibboleth.sso/SAML2/POST"; 
index="773"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://25live-test.collegenet.com/lesleyt/Shibboleth.sso/SAML2/POST";
 index="774"/>
     <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">CollegeNET, Inc.</ServiceName>
       <ServiceDescription xml:lang="en">CollegeNET, Inc. is a leading 
developer of web-based systems for higher education and non-profit 
organizations, serving more than 1,300 clients worldwide. CollegeNET products 
include course and event scheduling, space and resource management, web 
calendar publishing, e-commerce and contributions, accounting, online 
admission application processing, online course evaluation, and commencement 
services.</ServiceDescription>
@@ -232203,12 +232205,15 @@ ROHaOps80cANvtY=
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
     </mdattr:EntityAttributes>
   </Extensions>
-  <IDPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+  <IDPSSODescriptor errorURL="https://extiamweb.ornl.gov"; 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
       <shibmd:Scope regexp="false">ornl.gov</shibmd:Scope>
       <mdui:UIInfo>
@@ -232252,8 +232257,8 @@ 
Wt4s6GTJ5smI4nyvzvh9AnVxwrpLydpCOS5x/dC7EXu6GQWh2d9B9u4+EA19B77JPnaRcAEIjUE=
         </ds:X509Data>
       </ds:KeyInfo>
     </KeyDescriptor>
-    <SingleSignOnService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://extidp.ornl.gov:9031/idp/SSO.saml2"/>
-    <SingleSignOnService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://extidp.ornl.gov:9031/idp/SSO.saml2"/>
+    <SingleSignOnService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://extidp.ornl.gov/idp/SSO.saml2"/>
+    <SingleSignOnService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://extidp.ornl.gov/idp/SSO.saml2"/>
   </IDPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">Oak Ridge National 
Laboratory</OrganizationName>
@@ -232269,12 +232274,12 @@ 
Wt4s6GTJ5smI4nyvzvh9AnVxwrpLydpCOS5x/dC7EXu6GQWh2d9B9u4+EA19B77JPnaRcAEIjUE=
     <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="technical">
-    <GivenName>David Cashion</GivenName>
+    <GivenName>Scott Milliken</GivenName>
     <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="administrative">
-    <GivenName>Jim Rhyne</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Dionne Harper</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
 <EntityDescriptor entityID="https://auth.creighton.edu/idp/shibboleth";>
@@ -257340,7 +257345,7 @@ jQ4gfSgV/CoLsBGQXa5h90D/OHoa7g==
   </Extensions>
   <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol 
urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://my.globaled.duke.edu/Shibboleth.sso/Login"; index="1"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://my.experientialed.duke.edu/Shibboleth.sso/Login"; index="1"/>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">Terra Dotta Software SP for 
Duke-SA</mdui:DisplayName>
         <mdui:Description xml:lang="en">Terra Dotta Software SP for Duke 
University - Study Abroad</mdui:Description>
@@ -257374,13 +257379,14 @@ jQ4gfSgV/CoLsBGQXa5h90D/OHoa7g==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://my.globaled.duke.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://my.globaled.duke.edu/Shibboleth.sso/SAML2/POST-SimpleSign"; 
index="2"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://my.globaled.duke.edu/Shibboleth.sso/SAML2/Artifact"; 
index="3"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" 
Location="https://my.globaled.duke.edu/Shibboleth.sso/SAML2/ECP"; index="4"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://my.globaled.duke.edu/Shibboleth.sso/SAML/POST"; index="5"/>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1618428990-validUntil.2021-04-28T19.27.00Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations