InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1646424220-validUntil.2022-03-18T19.53.06Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 710aba8..5b2fd09 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20220303T194059" 
Name="urn:mace:incommon" validUntil="2022-03-17T19:40:59Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20220303T194059"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>TcjafylzK15jIAjWn9gvmmjlJEmhQVmwCt6CIIswpbQ=</DigestValue></Reference></SignedInfo><SignatureValue>UdRfEbhGeqhKedwFboRoY410pGc8cIlv7dsFUGrcO4Wq7cw04FiJPhQtTMhqjUNRVp6yEpf5K/iP&#13;
-weDyzU9URaxL+EBLA1aD/t3maN22/czo/h6cUd/OdoC1MzAxg093M3M1dBwe/wGRAUiKnDFqKFTw&#13;
-fJXnNvAzAV2bELp1VXsPGKV6m4tMdLnkB9b6HQtV9b56F7z2suswnls3GlsJ/EafMtHc7ATEy406&#13;
-Xrq/pK9FnkeUSc27slmop+rqPZViZQ85HNLLSsPA/umU0yuZQz/g/aI2THkcbzDeeuUM87xtzFR9&#13;
-dOcCy8ncuowqV69+7r+0YuCW25iWXQFFWUMF1Q==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20220304T195306" 
Name="urn:mace:incommon" validUntil="2022-03-18T19:53:06Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20220304T195306"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>yHrRhgO43H1k6gC58oHJA1t7KKnNOXMjNtIB6q9yWZo=</DigestValue></Reference></SignedInfo><SignatureValue>FA4rwcBpBLxcAAjEhUCNR+crqn/BwAouCUBzEOqF3QE+ovQHuGqcX6tF1G+MnVbD9m4PJM4sPmV8&#13;
+0dMgwqmho1QrgSbA2EqzERADe7ve3hsHlUSaak4Qupec1pqy3zjsW4VFx0YDah+eaGHIpOjGF2we&#13;
+x72fBQ6cHYdGNhPbUOejpmL+bwZIc/4ESADs3Yg+GNlId2mdkX+XvFCws97qf/vdsRIOsqJ8cL81&#13;
+DsPxgwvgjfiPkN2/k3RX/o8BFQcrspBLPs63HeS/5FU9rbUMwl1t/LHW3nux4kYpg39ZW4hqsm3P&#13;
+mLbnGYtWAUiS+TBZJWfkxNfcfMO+blCU5BB4uw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2022-03-03T19:40:59Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2022-03-04T19:53:06Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://mfa-auth.dev2.phenoapp.com/Saml2";>
   <Extensions>
@@ -15912,6 +15912,7 @@ wTzg4ySINObSbxYOWpY=
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" 
Location="https://review-stage.ap.uci.edu/Shibboleth.sso/SAML2/ECP"; 
index="28"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://review-stage.ap.uci.edu/Shibboleth.sso/SAML/POST"; 
index="29"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" 
Location="https://review-stage.ap.uci.edu/Shibboleth.sso/SAML/Artifact"; 
index="30"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://review2-dev.ap.uci.edu/Shibboleth.sso/SAML2/POST"; 
index="31"/>
   </SPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">University of 
California-Irvine</OrganizationName>
@@ -43027,6 +43028,7 @@ JoOPifKJMDjBqmo1Dkhft0Q1AcxWvXrh
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://shibbolethsp.jstor.org/Shibboleth.sso/SAML2/POST"; 
index="1"/>
@@ -43038,6 +43040,7 @@ JoOPifKJMDjBqmo1Dkhft0Q1AcxWvXrh
       <ServiceDescription xml:lang="en">Service provider for JSTOR, Artstor 
and JSTOR Forum.</ServiceDescription>
       <RequestedAttribute FriendlyName="eduPersonEntitlement" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
       <RequestedAttribute FriendlyName="eduPersonScopedAffiliation" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonTargetedID" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
       <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
@@ -43114,6 +43117,7 @@ 
yWDbsX80TPbq/9TggwnEt9TX57Bd9Be8e2iPiwexyHIrGk+3yNVmU9J/djtVvlBD
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://testshibbolethsp.jstor.org/Shibboleth.sso/SAML2/POST"; 
index="1"/>
@@ -150861,12 +150865,15 @@ 
RisCn91uRsbkcD1U5ziboM4m9h4sYC/RP7yrFAUt9XM/aAl5JCBD8A+hnx+R50IW
       <saml:Attribute Name="http://macedir.org/entity-category-support"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
       </saml:Attribute>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
     </mdattr:EntityAttributes>
   </Extensions>
-  <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+  <IDPSSODescriptor errorURL="https://www.utep.edu/technologysupport/"; 
protocolSupportEnumeration="urn:mace:shibboleth:1.0 
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
       <shibmd:Scope regexp="false">utep.edu</shibmd:Scope>
       <mdui:UIInfo>
@@ -294837,6 +294844,9 @@ 
C2o/nieRjYsGH3GpOMHvWjLNrygqI/mWJcFZdqaXPiLAHmzVCKvu8/LbayL5FUxG
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
@@ -294847,7 +294857,7 @@ 
C2o/nieRjYsGH3GpOMHvWjLNrygqI/mWJcFZdqaXPiLAHmzVCKvu8/LbayL5FUxG
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">Northwestern 
(PROD)</mdui:DisplayName>
         <mdui:Description xml:lang="en">1479</mdui:Description>
-        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.imodules.com/s/1333/index.aspx?sid=1333&amp;gid=1&amp;pgid=230&amp;cid=157</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.imodules.com/s/1333/index.aspx?sid=1333&amp;gid=1&amp;pgid=230&amp;cid=157&amp;no_cookie=1</mdui:PrivacyStatementURL>
         <mdui:Logo height="1" width="1" 
xml:lang="en">https://www.imodules.com/s/1333/images/editor/incommon/logo__2_.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
@@ -294876,8 +294886,9 @@ knA=
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1646424220-validUntil.2022-03-18T19.53.06Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations