InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1635878753-validUntil.2021-11-16T18.35.54Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index d4dc587..70782a9 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20211101T184928" 
Name="urn:mace:incommon" validUntil="2021-11-15T18:49:28Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20211101T184928"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>tNiqUMlukv1NnhZQBx2WZKoYWf+4EslGNB5OiM00wEs=</DigestValue></Reference></SignedInfo><SignatureValue>e6DEjUFKOXb5x8skTJE97XXUbZ4pvMwZEpoGwYopXVr7OUJ2KWmXGIK4RpbXVzhSOOl+C9d0BGPo
-bPnUANKmF7wiUr90ZhflpoiLlqYTYHh4gvpSSH99lbmPECcXTdzCJ1wLR+ukCt579N1Ku7ykAD8+
-hMzRb15HDvFfzWjYAemVmAbhgTn+LWfD1tbU/hl7Q5lZ8fqPumIKh6JNs9MIE/fqKH7kMzktTjhU
-fkIT5ui3B6GCuoqvfQVKOznR7mic/lJC5aT1sEB4YROOGUKaVucFYNJcAIAzwgKjs5s2aqJsbT8m
-B4KOo74d9QmNmovgKGQ+vFtDEBOPDFjMhwlaYw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20211102T183554" 
Name="urn:mace:incommon" validUntil="2021-11-16T18:35:54Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20211102T183554"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>ptVi76/31mUpdwgFNyDaPlA2IUrhBMK5clAvv9S2NoU=</DigestValue></Reference></SignedInfo><SignatureValue>ccVLUr5soYBracG5nkT24sW05jkfdAVtzmrefUYrVsX0l6+UFK+58KQOItdNnpd0p0u0pJA0R4KG
+A1ri5ogH9euFmfh5ukXpztIqhUhSUPWJ1sJuStjdd6bFGxgG8XiXuKJuQ2dyR+tKAqds+CYieQ1F
+H4COWNApOvbN/WI2GIJVCruFhG8P8Y6tzv3FgGCOmrZ6JKnB4nOjqy3XNBQ0GV1C43tthcBbele+
+Eq0X0kw1riZhghqSTykMX/r/yG67NScakWnR6oOO7r0pb9fDZRUv7NKY49TtYGFPjiUixi7b1IwR
+jDl/zfQGkiAP2B6mBOSIAFx9Fhs9Tqa7TfmCUQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-11-01T18:49:28Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-11-02T18:35:54Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -19908,6 +19908,9 @@ 
MIIDTjCCAjYCCQDP0/owytd5/TANBgkqhkiG9w0BAQsFADBpMQswCQYDVQQGEwJVSzEPMA0GA1UECAwG
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -19947,6 +19950,7 @@ tfiCE+/ZBj2mP/XpCO03y3nZ1onoE3NJhR7EGw==
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://al2s-demo.net.internet2.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://al2s-demo.net.internet2.edu/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
@@ -19961,26 +19965,29 @@ tfiCE+/ZBj2mP/XpCO03y3nZ1onoE3NJhR7EGw==
     <OrganizationURL xml:lang="en">http://www.internet2.edu</OrganizationURL>
   </Organization>
   <ContactPerson contactType="technical">
-    <GivenName>Ian Bobbitt</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Internet2 NOC</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="administrative">
-    <GivenName>Ian Bobbitt</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Internet2 NOC</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="support">
-    <GivenName>Ian Bobbitt</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Internet2 NOC</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
-    <GivenName>Ian Bobbitt</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Internet2 NOC</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
 <EntityDescriptor entityID="https://al2s.net.internet2.edu/shibboleth";>
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
@@ -20818,6 +20825,9 @@ sapLvvDcDKWrUx6QUS4uDXRwSO5IS3TMD6jBxPqCWYleAz0=
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -20861,6 +20871,7 @@ zl2+gtMQ0FQttL+7mX2s1ZtadPfe6xV7lSh+V03m/neMMgYIiKk=
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://snapp-portal.net.internet2.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1635878753-validUntil.2021-11-16T18.35.54Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations