InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1631731829-validUntil.2021-09-29T18.40.38Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index cec2b33..5e24072 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210914T183745" 
Name="urn:mace:incommon" validUntil="2021-09-28T18:37:45Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210914T183745"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>R/fZ/3czg4ukZgE6Z/LxFT3mJ8LxdKG6W3keV1NIaBs=</DigestValue></Reference></SignedInfo><SignatureValue>vmcBDHgDNGjbZEb5e1/3x1ZW6G/bERS3LdigWcFKAr3lvfus47mnnrAUe5aauZIEievqbKEdMue3
-5C35iU0CR0U/ZA6XVgMPVjD6MjF3nIQkf1ZupuySvzbwy86Lt3p+ZFeGo6UUFndMN6vMMbTadwyc
-+Modh2QghTdplPsqN20hy/7/mqoru16hCBwNL5PNowxu+JbjYB7sMaS278ZNoi0/BYnCOO1gyqDr
-Iwh5rclwcjzeNLdQjh/mi0tGvat1foT+ftnOgZxORgA1r9QUMKFsrlcGM/eJ8C3XQD1GNQ7ie/Zy
-Jc+LjP2EOIlrpZDMovIzeah2YlAoPVCuwE+p5w==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210915T184038" 
Name="urn:mace:incommon" validUntil="2021-09-29T18:40:38Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210915T184038"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>iHYgcbluQ0Hvfg4dEIyAZcwxmvTGmSlvZZbNxi+/xv4=</DigestValue></Reference></SignedInfo><SignatureValue>ThxZyRQhFoqljiFvZRNR8r9HZbOI05E6qoJwHNbtF3o7Hy4AiaDg5iLsOtEKTRkqpzJTSBHPjLIR
+gBQHfaMNLPyHDJYD40KDeK1+S2xXjXRm23tpk68mxqJFW6O4skinWNcInQgyXdimjKKq3DYYi5pX
+Btsw9xDBewzqXYH2EWAwkXoJGt+94clwZMaQvI2/0gvyr66OZUtPE4WTRa2WztmgBn7Lwwsg7OxZ
+hBVs1rrCFB0fBanJtiCsR9WQpmsqZzakL2rTHmVkgwkZo+dptP5FZDqR7WHaBM7wlcJqKEvPKvPF
+U8Z05FIZTtxOiyPOH+aBzin9Txb5jN5UrxVOiw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-09-14T18:37:45Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-09-15T18:40:38Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -1162,6 +1162,174 @@ uHaBEGnQl4VACp97Mj6tDACUhPPH7dVkNSCDVQmnAh5L/A==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://brand.cornell.edu/Shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Cornell University Brand 
Center</mdui:DisplayName>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.cornell.edu/privacy-notice.cfm</mdui:PrivacyStatementURL>
+        <mdui:Logo height="100" width="383" 
xml:lang="en">https://shibidp.cit.cornell.edu/cornell-logo.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 9546742929737465875, expires on Sun Sep  7 
17:09:17 2031 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 11319678865218080886, expires on Sun Sep  7 
17:09:17 2031 GMT -->
+          <ds:X509Certificate>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.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1631731829-validUntil.2021-09-29T18.40.38Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations