InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1624646987-validUntil.2021-07-09T18.40.01Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index d3c008c..dee228d 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210624T184519" 
Name="urn:mace:incommon" validUntil="2021-07-08T18:45:19Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210624T184519"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>jU0JqNDLQn1pQA62rsYIIrf0R/FXCfg0JcbbupS0mCM=</DigestValue></Reference></SignedInfo><SignatureValue>NrGf6rQBaRVoXzjwtaxmLIlH94HrWuHQv1m/mIuvT3rWLMU3wty3/BklAAfUTcnPAdj8CFFrqznD
-jha8sC/HbbjkZzdLQc52Ig72ODOI4SKGaVcKAY2RvSRr34c2VBvbjH5bQxP1BubL7obiXCBtbbis
-R86xKTaupIL5Hhg0skvkG6tn7c18yJKmBlTX2IkxCqwcNvWGlfUiv8TEZuJZb3gCnOz6w9iG1fdz
-daP2XdGCI9nN2jPgXHYylLjA9WDMndyDOZ2JbS1Ra2qMRdtVza7i1SIw2FWR1KNfP1AfNw9IoYMU
-6QZ2rDzgH5ut6S4Zi0cA2pNY26tSMTICD+KvKw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210625T184001" 
Name="urn:mace:incommon" validUntil="2021-07-09T18:40:01Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210625T184001"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>8d/1026xcrbZenaF7mkAEhx2HWVLXZWFA/luIiA//kw=</DigestValue></Reference></SignedInfo><SignatureValue>wTjUrwvRjlZZh4GaxrWVhaVSazB/yGi0wM1FX6GRww3I5wmMkPefYiksj+OzQFZ7aYjyHbyEyUlW
+MutdzcL28QcVEMHGCFBDedB2PWOGLteZ8sn+xILamqoo/KZuQQRDp7dqTJnThc7nx8n467xHGhj9
+nD559Jm336dv7b9+cqwriYImQzao8XfzMCt63waDH8BTmCYqqkhr2DycvuucTGN/mJzEzQUUK1ih
+yAKWib+RbhQjne6ip44NNGr0lJBiKCSCeMNXPqYJL0vnPscBFlCgf54RZKEL3QReXsNCAy1E2asG
+RZZkAKH/G4OyrSqwmJbQDLwyWR6BTv+LuMsXqA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-06-24T18:45:19Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-06-25T18:40:01Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -1786,6 +1786,131 @@ 
MIIDUDCCAjigAwIBAgIQsuRx0XYkR/CJY7etWiblzTANBgkqhkiG9w0BAQsFADBkMRowGAYDVQQDDBFw
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://request.canvas.cornell.edu/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Cornell Canvas 
Request</mdui:DisplayName>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.cornell.edu/privacy-notice.cfm</mdui:PrivacyStatementURL>
+        <mdui:Logo height="100" width="383" 
xml:lang="en">https://shibidp.cit.cornell.edu/cornell-logo.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 16451413686858158610, expires on Sun Jun 22 
14:29:21 2031 GMT -->
+          <ds:X509Certificate>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=
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 17189305185414500042, expires on Sun Jun 22 
14:29:21 2031 GMT -->
+          <ds:X509Certificate>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.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1624646987-validUntil.2021-07-09T18.40.01Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations