InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1638906914-validUntil.2021-12-21T19.45.19Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index c72e46e..9a84143 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20211206T193903" 
Name="urn:mace:incommon" validUntil="2021-12-20T19:39:03Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20211206T193903"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>Z6WanDUol7F9PyPTVR6nr34eKp8kxPhNO0zPEt4mGHU=</DigestValue></Reference></SignedInfo><SignatureValue>NCUDtv/aeKqM3GezXJ9jykdfP2ZL1EL5vB7qXTwK/hJvVAiVL0ua2O2ov48hKQ1TJWnE2SzaM9Sr&#13;
-uzmMclqiHFO7Oqvw5uhei0QimeAhnGO8/GvuEhIRNcCzTWx43cA2zSPEHUMf+SKN4ezK4lV3E1zl&#13;
-b0Y1v1RlzFvVnlCHs+ULg8eGKQ0R8YmFH4IeqNY+e5gsmCjcxGBbWriR/huLgEsJNFxW4GV4Kt9l&#13;
-KF7nSgc9/jqfAbdo9hOZ6NWexnEJQDIF/cn6lSC9SxeRLMlgYHpkvgDJt7bPKSyD3ISu4d3UAzlB&#13;
-ANzDflO87Sj5042JQfNgv8nptXaaGdi8cX6EXA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20211207T194519" 
Name="urn:mace:incommon" validUntil="2021-12-21T19:45:19Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20211207T194519"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>PA2bdY2AS6tAACpa6kw6kw/2JYcTfFFvRO4dDz0UcUs=</DigestValue></Reference></SignedInfo><SignatureValue>cFVZ67QDAKsDQ2Dr8aqKNR/JjazpOcfpd8oBRR8SFxom1qk+A6VOjLwmrcdIWzv5xnJJ86J8mNrr&#13;
+uQAwbQws8PC6ff4por5J+bxN8Jy09BoEhV95aeTRCcSMP36iUYWQ0ABI1GA2sWPSzNrXgw3aQBbt&#13;
+f7RScslQ7pSQByEI+D90B/uctCOgt3ZGZmjRB2CPva3sXEBMBDss/ysBJ00BYs1fU1YqQXEuFn22&#13;
+1+jsbM4p2d2oBvnBudow/o4IbE5CMPan19/YCLNJvT2lGVWrQGb3oETUo228RIC9gFCqgkk119Kk&#13;
+TgSOEhwMVXeuNp0WvQqFC17bxdWQGPA8Wf+iwA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-12-06T19:39:03Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-12-07T19:45:19Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://mfa-auth.dev2.phenoapp.com/Saml2";>
   <Extensions>
@@ -14298,7 +14298,7 @@ 
eXoKuJhDmBZ7guw2keo/i72mAdG8CYXwgX8LjZ7k1+JHDP/bEOWACU8bQA==
       </saml:Attribute>
     </mdattr:EntityAttributes>
   </Extensions>
-  <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+  <IDPSSODescriptor 
errorURL="https://ucanridp.ucanr.edu/idp/sp-error.html?sp=ERRORURL_SP&amp;error=ERRORURL_CODE&amp;addlInfo=ERRORURL_CTX";
 protocolSupportEnumeration="urn:mace:shibboleth:1.0 
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
       <shibmd:Scope regexp="false">ucanr.edu</shibmd:Scope>
       <mdui:UIInfo>
@@ -80301,6 +80301,9 @@ i5LcnTHCgUUFH7J7EyAEl002xfE9jD8pK/2vObhH81f39z6ANpYw
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -80340,6 +80343,7 @@ 
EvSmn6ck9a5RkI8DubDBah4v6tfSFW5rG1yPtysNhJ+7/jdvaJYsjvgfT12/3sX9
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://my.biotech.wisc.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
   </SPSSODescriptor>
@@ -80348,17 +80352,17 @@ 
EvSmn6ck9a5RkI8DubDBah4v6tfSFW5rG1yPtysNhJ+7/jdvaJYsjvgfT12/3sX9
     <OrganizationDisplayName xml:lang="en">University of 
Wisconsin-Madison</OrganizationDisplayName>
     <OrganizationURL xml:lang="en">http://www.wisc.edu/</OrganizationURL>
   </Organization>
-  <ContactPerson contactType="technical">
-    <GivenName>Richard Kunert</GivenName>
-    <EmailAddress></EmailAddress>
-  </ContactPerson>
   <ContactPerson contactType="administrative">
-    <GivenName>Richard Kunert</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Christopher Harrison</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
-    <GivenName>Richard Kunert</GivenName>
-    <EmailAddress></EmailAddress>
+    <GivenName>Christopher Harrison</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Christopher Harrison</GivenName>
+    <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
 <EntityDescriptor entityID="https://federationdev.nih.gov/FederationGateway";>
@@ -151374,89 +151378,6 @@ AundumU=
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
-<EntityDescriptor entityID="https://errico.srv.cs.cmu.edu/shibboleth";>
-  <Extensions>
-    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
-    <mdattr:EntityAttributes>
-      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
-        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
-      </saml:Attribute>
-    </mdattr:EntityAttributes>
-  </Extensions>
-  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol 
urn:oasis:names:tc:SAML:2.0:protocol">
-    <Extensions>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://errico.srv.cs.cmu.edu/Shibboleth.sso/Login"; index="1"/>
-      <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="en">Errico server</mdui:DisplayName>
-        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.cmu.edu/policies/information-technology/computing.html</mdui:PrivacyStatementURL>
-        <mdui:Logo height="125" width="181" 
xml:lang="en">https://login.cmu.edu/images/cmu-181x125.gif</mdui:Logo>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1638906914-validUntil.2021-12-21T19.45.19Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations