InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1620326908-validUntil.2021-05-20T18.38.38Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index da856a8..b5071f6 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210505T183708" 
Name="urn:mace:incommon" validUntil="2021-05-19T18:37:08Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210505T183708"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>NbEk+Hs0wlZgvSdVvKBqsxu+DrVrRU+PJnAfsAneZOM=</DigestValue></Reference></SignedInfo><SignatureValue>ohyO2IKfkU7bFBHzdODIHm8A+PlU2aYaPcndbFZz0y4qDrMqZi1N57QdIfFekR2cu5xW7TQVVpup
-RvrUtpolJPTLAI5vTKTIQJQpA93b45ZFmxf4GeSgHYLxYY6GmwU5dHGBxiB71II15FGlM98rliO+
-1VzEKK3YSMmQs5LBW8NBx+dmEhwyvm3kVI7V5CjvxMzKhQTjrKvrXbcoNdkjETpiiuX0KD09FZe0
-FA3I4znmdZpv/ILSSgjRznpazHRuwI9M88uBomDe2P+rtGbRDVoAtlZYeKD2H8dwksgs1+w2o4ys
-pHS7bGkhXD0USZgBfkWmF0ONHZFqAs68fPy0PQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210506T183838" 
Name="urn:mace:incommon" validUntil="2021-05-20T18:38:38Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210506T183838"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>bOj2eDjFgQeb2vfnU9PbbkOF8aIbsVU9EQCAScQAf7o=</DigestValue></Reference></SignedInfo><SignatureValue>iskyihNYB6htrVO/lzh7fppAIi/Ki43fb4H4UkKdgLpP5TinEtJfrBLvwwrc76Y6EWxqjsP5QzD3
+NkWXFuJwMhcdCA9KJWPTGnZGiRmcaDvdQ40t7WeOsZQQ92wICHuYjM3Jtej7KBzQwa4DIQi2Hdku
+9XIXPCEuu5yU+cD8dWu5rU6OQhSw/6PYdoF9e4YJrIxQC/Kqjwvfrvc7/jKMLUHvu7FLOr76+OfZ
+E+75pLPdHVjuxQixdB6Q822bxM6YkMReCdDz+OmvBP7OAVd+hmGysUUPULzC62s4hmlBPdGNg6oj
+czEwsSSu2CloH0BcQJoq8GNGpGJRH8SCPw5BhQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-05-05T18:37:08Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-05-06T18:38:38Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -19258,6 +19258,11 @@ Mr4RtoUwJw89eXxu6Q==
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" 
Location="https://grouperdemo.internet2.edu/Shibboleth.sso/SAML2/ECP"; 
index="4"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://grouperdemo.internet2.edu/Shibboleth.sso/SAML/POST"; 
index="5"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" 
Location="https://grouperdemo.internet2.edu/Shibboleth.sso/SAML/Artifact"; 
index="6"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">Grouper Demo</ServiceName>
+      <ServiceDescription xml:lang="en">The Grouper Demo server is for 
showing the capabilities of various versions of Grouper. It is not for any 
real or production use.</ServiceDescription>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+    </AttributeConsumingService>
   </SPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">Internet2</OrganizationName>
@@ -21312,6 +21317,9 @@ QN6kfDHIlXFhLmKYCtzxMjBf7TziEOIt2ZYrKM6CRI8=
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -21388,10 +21396,6 @@ taPIELMBDIuc2CdNbDGFA+WeuuOj8+CIv9iTEO8ZNw==
     <OrganizationDisplayName 
xml:lang="en">WebAssign</OrganizationDisplayName>
     <OrganizationURL 
xml:lang="en">http://www.webassign.net/</OrganizationURL>
   </Organization>
-  <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
-    <GivenName>Jonathan Newell</GivenName>
-    <EmailAddress></EmailAddress>
-  </ContactPerson>
   <ContactPerson contactType="support">
     <GivenName>Jonathan Newell</GivenName>
     <EmailAddress></EmailAddress>
@@ -21404,6 +21408,10 @@ taPIELMBDIuc2CdNbDGFA+WeuuOj8+CIv9iTEO8ZNw==
     <GivenName>Vishal Kadam</GivenName>
     <EmailAddress></EmailAddress>
   </ContactPerson>
+  <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
+    <GivenName>Peter Sams</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
 </EntityDescriptor>
 <EntityDescriptor entityID="https://dev-authproxy.cengage.com/incommon/sp";>
   <Extensions>
@@ -21497,8 +21505,8 @@ eyV/7h+bca1d3lQRHRIQSkMtg8CGJraW0Dgd91080N8z3u8=
     <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
-    <GivenName>Vishal Kadam</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Peter Sams</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="administrative">
     <GivenName>Jonathan Newell</GivenName>
@@ -21509,6 +21517,9 @@ eyV/7h+bca1d3lQRHRIQSkMtg8CGJraW0Dgd91080N8z3u8=
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -21561,6 +21572,7 @@ p6YEVIUypKSk/56YutTFmRWoyo1hc2QZs8qertAOGgUxj/0Fvj8o
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://nonprod-authproxy.cengage.com/incommon/acs/post"; index="1"/>
     <AttributeConsumingService index="1">
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1620326908-validUntil.2021-05-20T18.38.38Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations