InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1638391170-validUntil.2021-12-15T20.29.34Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 83465c3..65097c0 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20211130T194302" 
Name="urn:mace:incommon" validUntil="2021-12-14T19:43:02Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20211130T194302"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>KKUfphUt0c5ctnH2HDT8JNBJQ0XOvblzhmAu0ITZK6I=</DigestValue></Reference></SignedInfo><SignatureValue>W8MtlO8w1CqtXaDL5CszKmlOgWJXhrEQpBB/P77zxKrErzVruzdQEJ16NiFNDHRYfUwcF+E3wf4R&#13;
-bNs5CLOpe1b+83V/V9Vxhja3cELS6z69jPaHq9dORuBN1N5K3ePIkWpgdwJdx/eWhW9CUTvjC/d0&#13;
-cWO23Vt68+kgNOZEFGzC/QWauH4HaPn4NmsGRQlKIAcA4xI5MkrFITlkd9fdG84O+kfV/DawEwa8&#13;
-ss2ztJvlGzKlmT11z+knGajq+14lWiyrkNl3xjV06VH/BejoQeqkX3e8llLk5cl+JfSAeaPwIZR3&#13;
-ptQ8IHqRq50i31qmofS7YAWhk2eesJoDVPlbXw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20211201T202934" 
Name="urn:mace:incommon" validUntil="2021-12-15T20:29:34Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20211201T202934"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>kW5KB02FzZR3pnHPGshcSKdhRlBjHDFV1GZFYODe9LY=</DigestValue></Reference></SignedInfo><SignatureValue>bgcsbOepOUSlWQZRA5rY+fTZEocsQ/6jB+Sts84yWI7c+Yjp3obld5tL1VgapVSEETKsD3qHteUK&#13;
+aRMHyXtV1iRpOfMvcKSzeSEnhb/X9FWaDRZDbV9vQdyzH52ORw5BcbwZo4P2VEYTdSPE1Weylc5I&#13;
+tQUv11/GTC5VIyJrxilUHoylJ5AvmMBGGPeXXKWQYmZLbtjGKUpOB1octyC4syV+m9bqDz2MzjkF&#13;
+CxjXtBEAP2L9fQCibeyTTxz9wfm3brm5cH5b9J521gF+h5+hgpKmPkxA42vr+QyrJ/j2lBGwJbSA&#13;
+51Kp3dlTl4x80d4UnjkLa2MLryRatD2I51RB6g==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-11-30T19:43:02Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-12-01T20:29:34Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://mfa-auth.dev2.phenoapp.com/Saml2";>
   <Extensions>
@@ -11694,6 +11694,81 @@ 
ioQSDgDTuLm8v6eDypDwyn5e8FH5SEbgBpLS6d2jIGnBsBZupH11QADc02DgDg4r
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://rems.ucop.edu";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://rems.ucop.edu/Shibboleth.sso/Login"; index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">RESEARCH ENTERPRISE MANAGEMENT 
SYSTEM (REMS)</mdui:DisplayName>
+        <mdui:Description xml:lang="en">The RESEARCH ENTERPRISE MANAGEMENT 
SYSTEM (REMS) web application is used to track indirect cost exceptions, 
maintain sponsor codes, and publish sponsor guidance.</mdui:Description>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.ucop.edu/ethics-compliance-audit-services/_files/compliance/privacy/statement-of-privacy-for-web-based-applications.pdf</mdui:PrivacyStatementURL>
+        <mdui:Logo height="60" width="80" 
xml:lang="en">https://www.ucop.edu/_common/_images/sso/uc.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 17681741102180827853, expires on Fri Nov 28 
17:19:56 2031 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://rems.ucop.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">RESEARCH ENTERPRISE MANAGEMENT SYSTEM 
(REMS)</ServiceName>
+      <ServiceDescription xml:lang="en">The RESEARCH ENTERPRISE MANAGEMENT 
SYSTEM (REMS) web application is used to track indirect cost exceptions, 
maintain sponsor codes, and publish sponsor guidance.</ServiceDescription>
+      <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+    </AttributeConsumingService>
+  </SPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">University of California - Office of the 
President</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">University of California - Office 
of the President</OrganizationDisplayName>
+    <OrganizationURL 
xml:lang="en">http://www.ucop.edu/welcome.html</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="administrative">
+    <GivenName>IT Service Desk</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>IAM Group</GivenName>
+    <EmailAddress></EmailAddress>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1638391170-validUntil.2021-12-15T20.29.34Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations