InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1632768358-validUntil.2021-10-11T18.35.42Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index a064e31..a93a09a 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210924T183729" 
Name="urn:mace:incommon" validUntil="2021-10-08T18:37:29Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210924T183729"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>yne2Reb57NQBMiDLIrPN4Eopk9AbOldKDF4H4bD1KJE=</DigestValue></Reference></SignedInfo><SignatureValue>yyZLnL0/CGEyBWJHn/3pofPNc+QvhGbwVi60pSpEY2s9nDncMmdmgIfoJa4tWwIBKptAf70gG9AT
-hBTM5Wx/ryDxYrEILvEt7e8AEEoQ+E6/mumtSSNXqu7OZUFkwDoT+or4z/C7udX/zBVtZEYwOWTg
-Z7ojJf4czWTDDlatSEA5tzff/Lr8mlhCUA7/f2a0m5lnEyyCrZPuJ9MqyJDFutPQzuHFYtbvEg8Y
-cCheklttjixZmLUlV3cWhyGQDydDwgS1ml1jID5itlqiXet3tqcgAkVvgDHOA2VYX+52wj8ntQrw
-BFwv6Ncmec3rjp2H3K9Wy5/bCBnh6IThABWV9Q==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210927T183542" 
Name="urn:mace:incommon" validUntil="2021-10-11T18:35:42Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210927T183542"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>UinMNxFSsJ++Oni3OhANxKP6nfctvty9Lt22pFBGQc8=</DigestValue></Reference></SignedInfo><SignatureValue>I7eFdYT566EQ7uA9rhDDKLPHYWY6ffEvGsLMcKGuPamKXv7P/VScYG+V6bMPqew+8+8hdDe1PMWv
+MBpt9x1njiwT563cm0xVo9og5p7rQcCszso/3/PEcWMoRqpYZCMUsEGZnYnifzhf2yU3oTctoTvh
+qeXJiDVcIQe8f8+/IZ7wzLwGMhTvP9IUSxeKH/SDqPZeVZ4ncemwiCJ7czqKsfNVP6uFk0e3OkZ0
+Teio7s7I0/ezKTpN8LdH9m6C4nnaGdmwW8+uPpo0kbYBsETCPe1wthjyjZpCCTi8T4025FQgiPEa
+ImTvL8EVTAcKhQzMNuP9pqXIqpiGTa8qtrFLTQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-09-24T18:37:29Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-09-27T18:35:42Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -204992,7 +204992,7 @@ S090zfmwsGWhwzRAuj3yfk255KNOB8JiyJDb7iYdeRVqGvAcw1s=
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://www.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 16171642718467270422, expires on Fri Oct 22 
15:46:13 2021 GMT -->
@@ -205038,6 +205038,53 @@ hpaXgXCSx9knprbLR+fnZPGb2sI=
       <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 13367252655468357807, expires on Sat Oct 22 
17:13:05 2022 GMT -->
+          <ds:X509Certificate>
+MIIGxjCCBa6gAwIBAgIJALmCBXeoFqivMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
+VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
+MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
+cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
+dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIxMDkyMDE3MTMwNVoX
+DTIyMTAyMjE3MTMwNVowKTEnMCUGA1UEAxMeYXVndXN0YS5hY2Nlc3NpYmxlbGVh
+cm5pbmcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvswWlgYA
+iswlOr4VU+PqQpvP0XjA+IAuRpeFlQATL6NouK57oyuBA9Ay48NxAj8o9mqL+0jE
+rxjfCrOP3X5xBrUR0qoYHc3lq0hX46BM9BGOv0+EVVR4kRJvOdLDZpbOqjZYu7wL
+Ws4n2GwWE2Wku1dft4UQpN9E0Q3BeuL+cZnKcorraiLE7yKJzNQUs01D89YvsSyN
+67m8+BUiJOSWFBJq/uD4aV0UrJGYtYinyylxKg2+boH/ca7O/N0bu1aLt3KlEXyO
+XInp19f2FYiwo9YIGjQxJEci1dcq4L0fMi5uhGK4MUfG/UpXogygGFqMlNeMDmbX
+jE90UTq7cotITQIDAQABo4IDYzCCA18wDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
+BggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDgGA1UdHwQxMC8w
+LaAroCmGJ2h0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2RpZzJzMS0zMzA4LmNybDBd
+BgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j
+ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMHYG
+CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5j
+b20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29t
+L3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQYMBaAFEDCvSeOzDSDMKIz1/ts
+s/C0LIDOME0GA1UdEQRGMESCHmF1Z3VzdGEuYWNjZXNzaWJsZWxlYXJuaW5nLmNv
+bYIid3d3LmF1Z3VzdGEuYWNjZXNzaWJsZWxlYXJuaW5nLmNvbTAdBgNVHQ4EFgQU
+f2po76hCud36Q0s2/ZQ1ytI0Yp4wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2
+ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABfAQybf0AAAQDAEcw
+RQIhAI2lG4IFyFyeskJVCoSMM50pvkbJ2udADu9Qor7hofi0AiBywJhzyxzBeAWd
+yz3ciqBnKEMG1NBAR6ykoxsJraQk+gB2AEHIyrHfIkZKEMahOglCh15OMYsbA+vr
+S8do8JBilgb2AAABfAQycFkAAAQDAEcwRQIhANulNGwF1ymUbZZNp2JW7+nyURrw
+IvM6HptUvwEzci7IAiAJpIz2E/0ygBy2ceO+doRzydPsZWg536ds1vG1q3uuLAB2
+AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABfAQycUEAAAQDAEcw
+RQIgMOim2W26A+izPaACojL3WZlkj7zPspKA0LHFh7ASLUwCIQCXdUpl+JYulsKL
+ziSSiwtN40e7mc07M+lNj/vEcZ3ObjANBgkqhkiG9w0BAQsFAAOCAQEAF0OsljoN
+VO7Fdv5scoUWbSiiqWd2KKLt+Wt1HgHC/9YY7XAm9CIYF55sEtV9YgVkHBmJe0fX
+4gdQ0GoDLjxwPCq3J4liXaMUdn4U5TdJJLuF+6RhNUa0DxmzxAxCFTYvI0qS80Mc
+hBAKNDId12jtybFgSaKhC43SUVYx/reRy17beXR/iXAsUue44eXq4lKosNKvsLA9
+UycWP5pxeN8+XwIF73Etpt3OOVuEd1FgBpAB9wUAjBmmFzTWDFsNuoqBXuY+X00/
+e6nN3GQCiunVGoMgOC9LbFKR8f9FDsaZwRej0NyFe6WopmJhWZJem0BIVGUzLEGl
+au/uExzgxq6rWA==
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://augusta.accessiblelearning.com/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://augusta.accessiblelearning.com/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://augusta.accessiblelearning.com/Shibboleth.sso/SAML2/Artifact";
 index="3"/>
@@ -213927,6 +213974,87 @@ C0f/f8LWl/Ktk/RtRJQ/UTdZOUOnKt1265WNfMZXbw==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://login-proxy.nersc.gov/sp";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1632768358-validUntil.2021-10-11T18.35.42Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations