InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1667852047-validUntil.2022-11-21T20.02.41Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 3e5a3a5..8a80e59 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20221104T202702" 
Name="urn:mace:incommon" validUntil="2022-11-18T20:27:02Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20221104T202702"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>MR83AKQUWuNuJshrK/Q0c89XywftrsDIR+98dpV0C8g=</DigestValue></Reference></SignedInfo><SignatureValue>ZgxVaon3FiAZi4WsEQZVNZ7rzXTr/SWf7vCdnV+MCQCmMCllB4dGkSAysCQ+MFXye431mErqITHy&#13;
-hz3hyiEThTAqOY6++mJeIDGK6PtDHFstuVc/N0r71ISfBT+Mn60EK/eyqzHV4ARVllAUjprBzYo3&#13;
-6h/UmtmI7Qk0WuvXF7GOtez1iS+J51Uw3okjvtL/EP/N9TYxeju56icHbuCltZptWuYN8JbhcaMW&#13;
-31AKx20VcORrYcIpypNGVai+KWUj4AsL9mGgcpJxixyMx0kCqhCbyFDpGOp4ebIk/UTHx5yO7/IF&#13;
-3SNQK7mne36hpyvGcRztHsK7agn+zv6/C40JEA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20221107T200241" 
Name="urn:mace:incommon" validUntil="2022-11-21T20:02:41Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20221107T200241"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>JJkbGe9GKPFG1Feiu3NL0vYkpkAurM6PVras6Hfd3U8=</DigestValue></Reference></SignedInfo><SignatureValue>Fv2cKqv9Wcpm+NeOIrjyo4K1lVa3sqJqCJs5zd3wPkl4dFqnLLoZvpPcSJIlgrACDvlR3yOlTWAq&#13;
+ZN9GXN/wPm0i06cO7ItmYa0oSDcD2DklDX44Jjp1L0dckpFMmjDtFDKhV2Wt4jiho7vZ6v2yGo5Q&#13;
+2jOkDofRdGZ0F68vVKSStnfqauzUPg4qbC1tw7SvJFHzmfgDnNfdTAGkhilIwGGk8XtZd064dJn7&#13;
+RoHFGwcVWBdEsa/I7LW/lpfDshYWy60fq9iFGu6utnILCoZTFTWXlqthF7OucdGI6p/GnvAA8w6c&#13;
+Sb7TiQgI8EnL2Xp8MY7XSosJ2blvLt1ve499Ag==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2022-11-04T20:27:02Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2022-11-07T20:02:41Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.dev.conity.com/saml2";>
   <Extensions>
@@ -209853,7 +209853,7 @@ 
UlUgvK8Z7+S1b6O5P47U4zqmZAk7Q0q8WjymSUGVEHLxQRWDfKbfJ+3o2YD2jDyt
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://common.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 15844845835805822193, expires on Sat May 27 
07:04:00 2023 GMT -->
@@ -209899,6 +209899,33 @@ 
Noi6Uu62hTLONRBhAx3JQfeGYd/zJ6jNR9A05coJ6yPH3SxMIrY1fWE+Mw==
       </ds:KeyInfo>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 166692265886864396396294739322555900605, expires 
on Fri Oct 29 05:10:39 2032 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://kea.accessiblelearning.com/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://kea.accessiblelearning.com/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://kea.accessiblelearning.com/Shibboleth.sso/SAML2/Artifact"; 
index="3"/>
@@ -210062,7 +210089,7 @@ USE5x2hFvFQj4Q==
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://www.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 13721987482541747034, expires on Sat Apr 22 
07:05:06 2023 GMT -->
@@ -210109,6 +210136,33 @@ LsxPHHg9R2HFoe8=
       </ds:KeyInfo>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 137852906783222241931827843137806657095, expires 
on Fri Oct 29 05:24:26 2032 GMT -->
+          <ds:X509Certificate>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.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1667852047-validUntil.2022-11-21T20.02.41Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations