InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1623439134-validUntil.2021-06-25T19.09.16Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 99280ef..ed2001b 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210610T184927" 
Name="urn:mace:incommon" validUntil="2021-06-24T18:49:27Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210610T184927"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>7zTbJFpZnvZIokWH+tnmg3wOn9jCGuUSrM7UL01P+QM=</DigestValue></Reference></SignedInfo><SignatureValue>SjkTJUJqXliKYr+mX2yChHtbd/IgyYZS1odXAGV2E/iLtyot+T8yoj0UZLQ1YRn2UtcPHGa6INJh
-9yVcjl59X9VyQptiIp3j+lzBr1480I5AUsUDN/Lp/WIz7w0dOfOPd7y0Au+jI9Gdx+DlJX8hCo/v
-THtHjbCnIFOyC0BxfCupygm3fhMs/5mjdAbmyKA4NfvTObYRNO98H9enTiNXEWYa+/Z8VnW9u0nL
-RE4Pa0kpnh5yc8eEIuQDpXLbAze8r+qPxizpq3IqPVhKikNwiBQKdjyLYjECuXQNnY1g3CQNmABg
-J6jtpL0WI7EtnuQ5bR/gI2oAZjrIq9GvXInktw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210611T190916" 
Name="urn:mace:incommon" validUntil="2021-06-25T19:09:16Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210611T190916"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>RBeMeNfp6UUkJmwEzL9vLXwIVsM1LcKdzlMq2tYj+Hg=</DigestValue></Reference></SignedInfo><SignatureValue>qH0YiXyshb4h0hq9/9bggFzH80Qn/pXEkBILqV1haodfJyE2HH2iSz4RXxvvlVm/VJbYU5J7RGgX
+cYayiXFKPPqlzUdV5DlnbKDOllpmks4/mLeNJ7OXZk8DSlJ5QrBKLZyMJjgYn1+be7rrOghDPagu
+wpVplMsFT3eaqBgJDXN8+YxM1tAk+sSJAO5ahDEPPiTep6OAo08NnLCS642Lpx5FDzQG2chw/lLY
+f486NwGXPR0IGlSvwq19VhlhqRnrbWhwfxn4nBU+l4qEflOR6ode0FKVJyVaHifUAeMJiPsyvNG1
+/2XgJx97gt2vuSVukrcFMUrqbJrJqSofePkhKQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-06-10T18:49:27Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-06-11T19:09:16Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -4779,6 +4779,7 @@ ZEgjx13ARQRYpPzmNusmAAnGAq1UapiE/60wq+zIPuojnbDP
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://dmp.cdlib.org/Shibboleth.sso/Login"; index="1"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://dmptool.org/Shibboleth.sso/Login"; index="2"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://www.dmptool.org/Shibboleth.sso/Login"; index="3"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://uc3-dmp-tool-prd.cdlib.org/Shibboleth.sso/Login"; index="4"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://uc3-dmp2-prd.cdlib.org/Shibboleth.sso/Login"; index="7"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://uc3-dmp-prd.cdlib.org/Shibboleth.sso/Login"; index="9"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://dmptool-prd.cdlib.org/Shibboleth.sso/Login"; index="10"/>
@@ -209476,7 +209477,7 @@ zaSlyhw6JsSB9BNAjScXmtSxUEZPmEmocxbfadzWAw==
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://common.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 9779084696084478060, expires on Fri May  6 
11:20:49 2022 GMT -->
@@ -209521,6 +209522,54 @@ VlQwapzN4phLU5U1eg==
       </ds:KeyInfo>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 5818879835323199685, expires on Fri May  6 
11:20:49 2022 GMT -->
+          <ds:X509Certificate>
+MIIG4jCCBcqgAwIBAgIIUMDQYWcfcMUwDQYJKoZIhvcNAQELBQAwgbQxCzAJBgNV
+BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMRow
+GAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UECxMkaHR0cDovL2NlcnRz
+LmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQDEypHbyBEYWRkeSBTZWN1
+cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwHhcNMjEwNjExMDI0OTU0WhcN
+MjIwNTA2MTEyMDQ5WjBKMSEwHwYDVQQLExhEb21haW4gQ29udHJvbCBWYWxpZGF0
+ZWQxJTAjBgNVBAMTHGFuZGVzLmFjY2Vzc2libGVsZWFybmluZy5jb20wggEiMA0G
+CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGHfm4sUT9nrQDc1dbEVcIp7gwcd/
+f5aAwf329Co0WD7+JPoqJZK/wBxN72J2cNOw49cEQfFnc23rSrdKZhp4ivfsY6An
+kUfVC6fpB7k5u/bJL/21TWXdNNkNIL7jntDSsfbNWwhp1W7qaS7C2EtThc7QKee5
+TDzI7MkG9D6t1gllwrcn/YCgXLoldWbl8QkCiTCIcIc7adj/BzebJn4NixzzIjxO
+ONUOsXsoejx9sQdTAIf7DJkNFRZsHHCI3h1Ijav0OfMbokBVl7+uA0GpdSYc31Tm
+E2hRSHUpb9PyEV9DR58gg3qX31utPxK09EK/AV11DSJ1KnWFQSEVwtWFAgMBAAGj
+ggNfMIIDWzAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
+BQcDAjAOBgNVHQ8BAf8EBAMCBaAwOAYDVR0fBDEwLzAtoCugKYYnaHR0cDovL2Ny
+bC5nb2RhZGR5LmNvbS9nZGlnMnMxLTMwMzQuY3JsMF0GA1UdIARWMFQwSAYLYIZI
+AYb9bQEHFwEwOTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2Rh
+ZGR5LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQG
+CCsGAQUFBzABhhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKG
+NGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGln
+Mi5jcnQwHwYDVR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4wSQYDVR0RBEIw
+QIIcYW5kZXMuYWNjZXNzaWJsZWxlYXJuaW5nLmNvbYIgd3d3LmFuZGVzLmFjY2Vz
+c2libGVsZWFybmluZy5jb20wHQYDVR0OBBYEFL59PNHGNahrKFg1KwSvYp/bXLo6
+MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgApeb7wnjk5IfBWc59jpXflvld9
+nGAK+PlNXSZcJV3HhAAAAXn4+dskAAAEAwBHMEUCIEbxIzrxPqSsyHFD6XmdnyBP
+tb0ecm94a7rqSr+R9GJ/AiEAvYjfwAihJJ96opJHfBcmyfCZJNVLY2U5wtj+Dn5J
+6esAdwAiRUUHWVUkVpY/oS/x922G4CMmY63AS39dxoNcbuIPAgAAAXn4+dxWAAAE
+AwBIMEYCIQDKDpfoNJQUSKUD9KbBrbtiD0+EGTPQD677n3A8CzF2dgIhAIvR9GFY
+SM+PahnZliRK4yXNrj9VaQj9YeOLyGBX4YryAHUA36Veq2iCTx9sre64X04+WurN
+ohKkal6OOxLAIERcKnMAAAF5+PndvQAABAMARjBEAiA+z8x+9wrOizXpnwZNZgNm
+Se2b+IXHgedKlSfg2DdoAwIgVrbmZSO4Y2bFmEUJcn+c/Irma3f8F6YFuC7h2ngW
+2WYwDQYJKoZIhvcNAQELBQADggEBAFRPSwaT3D3raoKgV7sDxygpBkW9H8uc2dVi
+8JXYKjABPNEyu8mC7pV7yA2v6TQG5n/0vZfGch5/Yp9MWoHlFJxXqMF5tX6xttcK
+jfgg2znm9l2zbVxK08g+Wjs8sNj70pBI4abQEQ//G8xIO9g7YG4XritvcDmjc018
+Xw1KJGh6lD+lWL8d8V1+N+MhBRSAYtT0vmsVPDWbizmqqi8kGAgBiXHm+zPy7ftH
+RxRg9Phz/eoPaeUNuYBZmAkvdtFL+H9DBSvwH75z2aZ0G1ultDHr+a9aVCaiSs77
+S090zfmwsGWhwzRAuj3yfk255KNOB8JiyJDb7iYdeRVqGvAcw1s=
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://andes.accessiblelearning.com/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://andes.accessiblelearning.com/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://andes.accessiblelearning.com/Shibboleth.sso/SAML2/Artifact"; 
index="3"/>
@@ -209620,6 +209669,7 @@ hpaXgXCSx9knprbLR+fnZPGb2sI=
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1623439134-validUntil.2021-06-25T19.09.16Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations