InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1631300087-validUntil.2021-09-24T18.45.04Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index f3ae008..82e7e0b 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210909T184124" 
Name="urn:mace:incommon" validUntil="2021-09-23T18:41:24Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210909T184124"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>toUzsX4czWw3qs/dRzucK6RU7m7g/jwbujJlMvSfuDk=</DigestValue></Reference></SignedInfo><SignatureValue>Y9DB7pI98M+zqHi2v86UcNHhKTOYIBAAZeSqH+jrDRMajx22vETF82eVwxwaJz4RQ9gvOSrC5/ca
-tMI21JsUw7LMEj1Yj/LQURdA6i4K1Hs9KgTQe+i7Ojii23ruiKOk/lQL2UzWWKuJZQ1MIqOvmwnI
-ElNsY6+a0SpRSRYa5MpuXmApSLqufcqAPCFIldOtew2EK/ABs++KI3AY0cmtIINlRmZFoAsdLMp7
-LWGUrV231IpQeIsezWloG2b1MJIMiJqykGhEAb9AC5x8L9gHs9WoHFTatvCF7uPermxaBZvz3h8F
-Isg/i56n/l5pnnsMLucPsPrJzLfU25Fn4CDRuA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210910T184504" 
Name="urn:mace:incommon" validUntil="2021-09-24T18:45:04Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210910T184504"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>EifEW2RURZbxwThpFPjZh78M7J+JPpACOVmJueuLf9w=</DigestValue></Reference></SignedInfo><SignatureValue>EOs+5zWFrjbvEj3x0dAthG7HUaF/trKgFnV0p4Yn0v9EIG+JGdswdnY47FT6Mo2lweyTEYHdlKnT
+hjR+CpdOEgQxdYRJqww5MFfL7st4OGpo+oJ1PVw0ftI1GjXRv3psMrhQ7vQOkthSxzYQkEeoeCga
+FLa+wbaiehEzCu0fgOrmf3W81tAMqU/A+JdAnfD+tUgPdh3rBy+nbgQXGIE+rTHgFFzBwl/3FmR9
+73sjnQriJxLeo2D46wqUNYcQ35YfMPd93zl1UswLFSMOcrbaZ4V7DTr8LrYYkJvkraCMDUE+snKs
+h5HjfmLTitjeWj7MwRgsM0kt4YB+WMJniQfafg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-09-09T18:41:24Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-09-10T18:45:04Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -1048,7 +1048,7 @@ O8tLIQ==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
-<EntityDescriptor 
entityID="https://apps.universityrelations.cornell.edu/shibboleth";>
+<EntityDescriptor 
entityID="https://apps.universityrelations.cornell.edu/Shibboleth";>
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
@@ -1062,13 +1062,6 @@ O8tLIQ==
   </Extensions>
   <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://apps.universityrelations.cornell.edu/Shibboleth.sso/Login"; 
index="1"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://careers.universityrelations.cornell.edu/Shibboleth.sso/Login";
 index="2"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://earthsourceheat.cornell.edu/Shibboleth.sso/Login"; 
index="3"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://leadership.cornell.edu/Shibboleth.sso/Login"; index="4"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://president.cornell.edu/Shibboleth.sso/Login"; index="5"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://provost.cornell.edu/Shibboleth.sso/Login"; index="6"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://playbook.univcomm.cornell.edu/Shibboleth.sso/Login"; 
index="7"/>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">University 
Relations</mdui:DisplayName>
         <mdui:PrivacyStatementURL 
xml:lang="en">https://www.dfa.cornell.edu/policy/policies/access-information-technology-data-and-monitoring-network-transmissions</mdui:PrivacyStatementURL>
@@ -1143,20 +1136,6 @@ uHaBEGnQl4VACp97Mj6tDACUhPPH7dVkNSCDVQmnAh5L/A==
         </ds:X509Data>
       </ds:KeyInfo>
     </KeyDescriptor>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://apps.universityrelations.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://careers.universityrelations.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://earthsourceheat.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://leadership.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://president.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://provost.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://playbook.univcomm.cornell.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://apps.universityrelations.cornell.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://careers.universityrelations.cornell.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://earthsourceheat.cornell.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://leadership.cornell.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://president.cornell.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://provost.cornell.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://playbook.univcomm.cornell.edu/Shibboleth.sso/SLO/POST"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://apps.universityrelations.cornell.edu/Shibboleth.sso/SAML2/POST";
 index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://careers.universityrelations.cornell.edu/Shibboleth.sso/SAML2/POST";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://earthsourceheat.cornell.edu/Shibboleth.sso/SAML2/POST"; 
index="3"/>
@@ -1164,13 +1143,6 @@ uHaBEGnQl4VACp97Mj6tDACUhPPH7dVkNSCDVQmnAh5L/A==
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://president.cornell.edu/Shibboleth.sso/SAML2/POST"; index="5"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://provost.cornell.edu/Shibboleth.sso/SAML2/POST"; index="6"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://playbook.univcomm.cornell.edu/Shibboleth.sso/SAML2/POST"; 
index="7"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://apps.universityrelations.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="8"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://careers.universityrelations.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="9"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://earthsourceheat.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="10"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://leadership.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="11"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://president.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign"; 
index="12"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://provost.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign"; 
index="13"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://playbook.univcomm.cornell.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="14"/>
   </SPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">Cornell University</OrganizationName>
@@ -1186,7 +1158,7 @@ uHaBEGnQl4VACp97Mj6tDACUhPPH7dVkNSCDVQmnAh5L/A==
     <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
-    <GivenName>University Security Office</GivenName>
+    <GivenName>Cornell University Security Office</GivenName>
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
@@ -9862,6 +9834,66 @@ 
eXoKuJhDmBZ7guw2keo/i72mAdG8CYXwgX8LjZ7k1+JHDP/bEOWACU8bQA==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://nhb.ucop.edu";>
+  <Extensions>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1631300087-validUntil.2021-09-24T18.45.04Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations