InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1674503731-validUntil.2023-02-06T19.44.51Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 06bf3a2..7970254 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20230120T193702" 
Name="urn:mace:incommon" validUntil="2023-02-03T19:37:02Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20230120T193702"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>00jKeMJK56BPeUV3kcX2eHNmyJ8jImX1RJUtBOOyvDM=</DigestValue></Reference></SignedInfo><SignatureValue>icxa+DsbMLTOfhy2wwePSEm8dpeb3oal+poLsVbU6jJl/dsJhkKErv+DJHTMDE2jIhx6FzrigGYo&#13;
-iW0Ud/fCQWq1NLHl6BFynFQ/g2o6uqNoDOzvpG59nAAkFASdhkf1QgNTnciIRM2Km3SsBYi17+si&#13;
-ZjTMKIcG1E59QEcbp4SApgBztQvHNZty+w6I9RUrzyYeaL5PU1SvLxO0l6LKl9bsCwHfCV8NVPqe&#13;
-iISm3CeVRi+BUgB/5MrHaGeflPqK9DhXSxjqdNF052cuX1Aln4kxUtY9VezO4HmOtpwetqjWqS93&#13;
-eWwncuHDsC12ZfEmAfapOrIfeTDjLOyNW06oBA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20230123T194451" 
Name="urn:mace:incommon" validUntil="2023-02-06T19:44:51Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20230123T194451"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>NDzAGcVydYBakh5tLtMV/74iXNvCC6DZxGF5ZZidfqY=</DigestValue></Reference></SignedInfo><SignatureValue>P5vDKpRjXzDdtNMe47bTcq0ftndjI5lJl6QeWzFcqJ/hwEfC/OPln6mgBw0UhSXnTlbgSmDhddiO&#13;
+CEhmEBgfKFMBizP0tFVyp5BKZ2K6dkMtIuwTrpiGeazYnigbCllgV+z3Zr/mgKKCVMi7Wq5+CoG0&#13;
+/Ihr3++GunfdYNPXXDUl3b8hHbIW37OIGk6NjkwMPjstRfOOZNIHhj/6d9og4ynaUMDhX+czIa4A&#13;
+j6kcVvQsXGQ3ROTAwz4kHYS4+dCOHDnxw9gOGGELwjuVI5Wz843/Uc+so1CnHyRh87Gyz2gLbMDY&#13;
+0BPtrMGyrQvm5n8zcraqHazfN+qcvuH9yEGxVg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2023-01-20T19:37:02Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2023-01-23T19:44:51Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.dev.conity.com/saml2";>
   <Extensions>
@@ -139223,6 +139223,98 @@ 
fEjKSM/7WyBx25FQJQ7IePI1kfVA8BNRI5atCm8DJd5lqFlQK/rmZiZWYrADVQ==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://cirrus-saml3-proxy.mit.edu/sp";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://mit-saml3.proxy.cirrusidentity.com/module.php/saml/sp/request-init.php/mit-saml3_proxy";
 index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">MIT CIrrus Authentication Proxy 
3</mdui:DisplayName>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://idp.mit.edu/privacy-statement.pdf</mdui:PrivacyStatementURL>
+        <mdui:Logo height="60" width="80" 
xml:lang="en">https://idp.mit.edu/images/mdui-logo.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 514212900573431918171254589390543887338230526953, 
expires on Sun Nov 28 16:17:17 2032 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://mit-saml3.proxy.cirrusidentity.com/module.php/saml/sp/saml2-acs.php/mit-saml3_proxy";
 index="1"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">MIT CIrrus Authentication Proxy 
3</ServiceName>
+      <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1674503731-validUntil.2023-02-06T19.44.51Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations