InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1671479823-validUntil.2023-01-02T19.46.19Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 15ee316..883a016 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20221216T193901" 
Name="urn:mace:incommon" validUntil="2022-12-30T19:39:01Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20221216T193901"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>mOuVddkEs4021efEcPmSJWzjNHxyZV02ctEGP9kiqJE=</DigestValue></Reference></SignedInfo><SignatureValue>WHGmPXyyGE5+7eAE0pOlx6BYHiMs9TSUFO5aABK94gY2NoLWnqsMOJ1ZB+3xk6QPo3A0JAwVwOMW&#13;
-NnFIUIEVJsBa9pIw40e9kRwLOY/mOADFhX49kAotCx27yaGWsQ64CiTPqrlW2r9ErZ1IiM6GzH5R&#13;
-+KesDB6Nqtp0WUEhGoyDqxr2Cnyms1eT1zG0MZsdNBoxoZz6lwhpyPMZXrujBMMRZXaHXgSqAzeZ&#13;
-EnzqZ5LVhFC6OyNADF9QOf0MvnKr2VabPlUXlvjKqzeOkjgQSYEUwoIMkFLxvwc8/0w9hHlxsWDP&#13;
-LSUXa29gYeRuUWvlpA5R9jrtyCxx4gL7Q9jEPQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20221219T194619" 
Name="urn:mace:incommon" validUntil="2023-01-02T19:46:19Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20221219T194619"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>s5mCSGNuLyf7SvR1P3YMnxU0LnDKx90GWMAd8+dpLbI=</DigestValue></Reference></SignedInfo><SignatureValue>hMiltYO9QF8+qETrUK86JpoOla9rSizd65pF5YlqKBIv7sta//SEY3/vHVOilrLAyDXumSIWbIL3&#13;
+DHZFRyButfSuQs3OBIhyuVTLKbpZumdnflDCfcWhXH312g53Szcc0p27vZDORLCT+opekiWNuogO&#13;
+S7HtnSFe/7XfRH+cG1ly641lqR+U8cxtjTRZCnu325vHWUsEmszi7VvYXXFGCxS9zrTEbpV19p/O&#13;
+//4UuZ/m0BxB8o5BV134k1sVZO9pne+cYmmXEFRiEwnRB0p773F2TFbVzZNX7ZG1PKQOojbryuTg&#13;
+OgkBWf8HZ2dER8QuG38xRS7PhYWjLRUveWVVWw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2022-12-16T19:39:01Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2022-12-19T19:46:19Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.dev.conity.com/saml2";>
   <Extensions>
@@ -210415,7 +210415,7 @@ 
aGLYAASeLXCDWgRy2Khp9oX5gSMMy1pM5Bj2+L/q5j5d4yN0l1Enon1o7N2oXcIP
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://www.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 1109968711721644617, expires on Tue Aug  8 
07:08:34 2023 GMT -->
@@ -210462,6 +210462,34 @@ H9oNIcyW2LXHCMA=
       </ds:KeyInfo>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 102871152452960030851506610725274142502, expires 
on Fri Oct 29 04:05:58 2032 GMT -->
+          <ds:X509Certificate>
+MIIDLjCCAhagAwIBAgIQTWRDZx9rX7BJt9VMJ4pHJjANBgkqhkiG9w0BAQsFADAq
+MSgwJgYDVQQDDB9iYWNoZWxvci5hY2Nlc3NpYmxlbGVhcm5pbmcuY29tMB4XDTIy
+MTAyOTAzNTYwNVoXDTMyMTAyOTA0MDU1OFowKjEoMCYGA1UEAwwfYmFjaGVsb3Iu
+YWNjZXNzaWJsZWxlYXJuaW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
+AQoCggEBAPJPS4+hLznV17yZa9SpXmKC7yX/I7za+lZY/TGhESNQorc3/+8P/38X
+K7K6WnnN2PaTISrpHl/QcEhsGD3ET5x4Fqhxc6TzUFMXZe8JczF5oiYXfGsZjP9m
+MjDBdwCIuS0tW0HbD0O8alTSXpGJl1FCKVO6Xe9cBSWplWaiKa8eTXc/T1v0uZFl
+nrcStfwv6o3pKYJ05iBcGdob2LDaq5w1jo7gLtZXXdZLaOpojabXH4Q93PzCEvEs
+G0HqBUJQJ1zf/eqxE7/Ae2Y2DTAPaeUrgt+Moyhj0vkNCwh0tNGQIljZzYO001ro
+oRyvzPxnidgsfIyyVtjtlpX52N39XTECAwEAAaNQME4wDgYDVR0PAQH/BAQDAgWg
+MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQU7MQdtJ5f
+2IHLF7dZXdFfjcjRLpMwDQYJKoZIhvcNAQELBQADggEBADL6FE1+hmVRZUIN+LsT
+HPr92mL069oM8Yw6l7AFYiZCFcfv3iBh0n6wza4DwvxcnvVDsjYy4l9ZAbRk3ieY
+IvJ0psz8MSUzfH+iqFml7Hwerfv6QDTZ7M+gC1zXlrsjSj+heK/m+pj2cNBWpwUZ
+iu3iwccg6zl1QQuKt7tew9z+aN7HJMWpCjge2s7DnD1l7hHnKfCk6lBbIRedqekh
+wy0KtX9Yj76TNwRa3hdKx7XGw4R6lfZGj0o7u0dknXs9oCS7rl/oJv5rk8pDgXlH
+w+62Y21VPjfS6wD1wcp3tYzSAb4HjVC80chtZjjWcxXaJruVXOTN8vuNACTUCxfB
+uv8=
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://bachelor.accessiblelearning.com/Shibboleth.sso/SAML2/POST"; 
index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://bachelor.accessiblelearning.com/Shibboleth.sso/SAML2/POST-SimpleSign";
 index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://bachelor.accessiblelearning.com/Shibboleth.sso/SAML2/Artifact";
 index="3"/>
@@ -210522,7 +210550,7 @@ H9oNIcyW2LXHCMA=
         <mdui:Logo height="64" width="350" 
xml:lang="en">https://www.accessiblelearning.com/Shibboleth/logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor>
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
           <!-- Serial No. 14473566252604931449, expires on Sun Mar 26 
02:48:58 2023 GMT -->
@@ -210568,6 +210596,33 @@ 
GnlbSiiuMi2panEYKRVPQnvaXWJ+cZSpCDPZsNPgZg/7RK5qpMbKxASP9DqLRA==
       </ds:KeyInfo>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 157471050347128262821514163474261948542, expires 
on Fri Oct 29 04:17:58 2032 GMT -->
+          <ds:X509Certificate>
+MIIDJjCCAg6gAwIBAgIQdnfSNSrCN7xALkDzy1E4fjANBgkqhkiG9w0BAQsFADAm
+MSQwIgYDVQQDDBtiZWFyLmFjY2Vzc2libGVsZWFybmluZy5jb20wHhcNMjIxMDI5
+MDQwODA2WhcNMzIxMDI5MDQxNzU4WjAmMSQwIgYDVQQDDBtiZWFyLmFjY2Vzc2li
+bGVsZWFybmluZy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0
+KkOximQGWyegeBP8/S2eSCEreH5RTppL74TSHEu9cSVq6W8XQdqBAYvY8NqqYPUI
+sK6a3BTA5PhnP2hKXyfcT8v9ZnN+cyHy8XJUdN0XpCyntmbYikw3D4Zwoa0BOEh4
+fBgOvKUHlK7zyLQurJPai1JtHJKe8+BNj6BN+YVpa4QQ7fme4rFzxJwyGbCVSXkn
+5M1MTZszjWNtRu9E3zRwbc/zLzjDC7BTIL0Ykbif6mvw/aw/9uA/zH2Rzo/RGjIy
+34/hxeP3HqMlX8D4ZMxl5Q2/uvNgKwNZJc6IJJIdJC9Y+K+iZarfHDG9oIq92P4M
+yYbZgTeMhSI+ZsSLglnBAgMBAAGjUDBOMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
+FjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwHQYDVR0OBBYEFFN7WQeyHuWDJV9bgA9c
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1671479823-validUntil.2023-01-02T19.46.19Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations