InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1632164085-validUntil.2021-10-04T18.44.49Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 33c53b4..1820344 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210917T184100" 
Name="urn:mace:incommon" validUntil="2021-10-01T18:41:00Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210917T184100"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>ogV5r+1wmmOO/C3XLVsC+pFaHViwq4MGN95GgHrvy9A=</DigestValue></Reference></SignedInfo><SignatureValue>FzqP22YQ7gttkBgl3ZMKf1a3iw7axY++HBjMus26LHF3CY0Uqek8+/eJfRLons6p2EMJbHZQBK9+
-C++dud+6PAwWvcJVCMlk6B9qsc/PBoasWamstQgTaZA1rIZZLgz3yZ/yPL3Ms3c7GmZmzR5bOc6T
-jZZcFvhiXus6AVKFJkvcmTnIC0S43DArtPHNei1Qm+gUxpzCy5IGQOPajVeSq82IvClR1MXlfTxd
-5oYEcOGZUy94vOnWTBtB0A84W9ZC7uK4b1icBxS07GX4s3cxacjaNXUCx7uYftdeHMRMj8G/7DI8
-OdR4xQ3FGZB7BchITNsB3o9ePgVkKcG+hnEnig==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210920T184449" 
Name="urn:mace:incommon" validUntil="2021-10-04T18:44:49Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210920T184449"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>EwZR3fKVNzX+bYt7nodBMNEdxSSuyoCmcJ51sHgesyE=</DigestValue></Reference></SignedInfo><SignatureValue>VEiv5/87jloXhMohK9X5bLUBkgl9NyOxqd1JBWEytu31aboKq8yl1Hr74NnEXtUAF50VoGo0bgnj
++kOmLw369E4RfAU/7Vq3+WOECOHKHBSWn3v7UO1ys+g6TAj66XV21swGuqs3u/tCk960iOydTnX2
+XUwrDyPPwOh4COyrwvgLTKVIUXWefstoC6vOD+eE41eqnkSva0aCR8U/prbBBZWOKcNLD20d0GCT
+yn851loD+zP1B6UiYfy3Ycg0oj3qMRRNmKFA9+Ms6T4uDQqWqfNZFpsEeNgDrpMHR+z+1qrLWHxk
+hSNxizdxEdCSqPAwytoxY4tMzCggd2Kx4wCM+g==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-09-17T18:41:00Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-09-20T18:44:49Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -2599,6 +2599,9 @@ 
etXQ98XBAxe34E+xL1iYcqodJpbi0pXqLRMktM1DKzqneR87+gvQFVp6YnPLdmI=
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -2642,6 +2645,7 @@ casvBiA=
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://login.ccbcmd.idm.oclc.org/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://login.ccbcmd.idm.oclc.org/Shibboleth.sso/SAML/POST"; 
index="2"/>
@@ -2668,6 +2672,9 @@ casvBiA=
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -2712,6 +2719,7 @@ 
SdaKC9mGhXFz3FGDmaClv12gzpmplIFrLiH8du/7JX8npIyBzxvmx9p7Rl0Tip8X
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://login.colby.idm.oclc.org/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://login.colby.idm.oclc.org/Shibboleth.sso/SAML2/Artifact"; 
index="2"/>
@@ -2736,10 +2744,89 @@ 
SdaKC9mGhXFz3FGDmaClv12gzpmplIFrLiH8du/7JX8npIyBzxvmx9p7Rl0Tip8X
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://lafayette.idm.oclc.org/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol 
urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://login.ezproxy.lafayette.edu/Shibboleth.sso/DS"; index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Lafayette University EZproxy Server 
Hosted at OCLC</mdui:DisplayName>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.oclc.org/en/policies/privacy.html</mdui:PrivacyStatementURL>
+        <mdui:Logo height="187" width="390" 
xml:lang="en">https://www.oclc.org/content/dam/oclc/common/images/logos/new/OCLC/OCLC_Logo_H_Color_NoTag.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 3, expires on Sat Oct 17 20:35:20 2026 GMT -->
+          <ds:X509Certificate>
+MIIECzCCAvOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBmMSAwHgYDVQQDFBcqLmV6
+cHJveHkubGFmYXlldHRlLmVkdTELMAkGA1UEBhMCVVMxDTALBgNVBAoTBE9DTEMx
+JjAkBgkqhkiG9w0BCQEWF2ltcGxlbWVudGF0aW9uQG9jbGMub3JnMB4XDTE2MTAx
+NzIwMzUyMFoXDTI2MTAxNzIwMzUyMFowZjEgMB4GA1UEAxQXKi5lenByb3h5Lmxh
+ZmF5ZXR0ZS5lZHUxCzAJBgNVBAYTAlVTMQ0wCwYDVQQKEwRPQ0xDMSYwJAYJKoZI
+hvcNAQkBFhdpbXBsZW1lbnRhdGlvbkBvY2xjLm9yZzCCASIwDQYJKoZIhvcNAQEB
+BQADggEPADCCAQoCggEBANooM2WjgT7ZIB7CPt9cAfvpuq2YWxG7RjhPhBHu0k7p
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1632164085-validUntil.2021-10-04T18.44.49Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations