InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1692989495-validUntil.2023-09-08T18.40.40Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 0576cea..328029a 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20230824T184915" 
Name="urn:mace:incommon" validUntil="2023-09-07T18:49:15Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20230824T184915"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>zXaTzH88VzDC/HbIN0DnhGgnAFQrQgbGtVWpPeOr4E8=</DigestValue></Reference></SignedInfo><SignatureValue>lbfDITJ306Mk/OoOE5rb77CBlZh3w8MWa36S1NAfhCkTkwNv1nhhQ12RGuibnyduwMCQgh1PBdbc&#13;
-ij9Hf5HshlMioHZmVwzAywfRQ8w6UiV8EhIDNPwALTf7cMPALllzpXYZtb8rdZvWdUSKFlc32CEj&#13;
-7n7jlY7SzLRn9UrzrTraeWT0qtWv4IPdMo3Ej/gqIAdxdUb+bUqNQe6dNjoQt04qnK+b8fdD2sxz&#13;
-CKz2dOE7Pza4tI3BSN92WLZg8a4WIV/HZJ8rPdDR/epmSYaBHIFyY6OVXQGl4zWiX7ApKkmuMwKe&#13;
-PJVRRtJDYZgsfsXXytORNyXCKdt4tH09aOk8zw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20230825T184040" 
Name="urn:mace:incommon" validUntil="2023-09-08T18:40:40Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20230825T184040"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>CVGgXLX+yldsAaRWFr0UeQJx9gr1XasN6yM95nSukQM=</DigestValue></Reference></SignedInfo><SignatureValue>Ff7ee9U7VxawEq2Ux5liF/VLgaNVc7/Ry4u5MMhm+SsWWOGolmTWX7cInWxjeWMjddJw76qxFvNG&#13;
+Y2jlhxHGkUQXZQ4t/uZGvGJuK+So7Pwca0Y8ySXJl6JXSLHy4/bTrpP+1VjbpgGL22NcdaAC3bsQ&#13;
+lzjS0nB6JTmvWdM8FyyZYEHH/1EIYlAaRZw1UlTBUgXkEAx036f8HIWHP56mZOLdCq5+mbCez3Qc&#13;
+iXm1aTQR1KGQkHiG7UCzbNRAMmfBpH6NCMFdaLg8H4vZ9VBI5Bp0DRj1eGmOCq98zLuPZRbgiynR&#13;
+VnNXAGGRnHTuQn4AbGXnraXHCa5GJ4I4S5UR1A==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2023-08-24T18:49:15Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2023-08-25T18:40:40Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -13140,6 +13140,115 @@ 
MIID5zCCAs+gAwIBAgIJAI4XubteXKakMA0GCSqGSIb3DQEBCwUAMIGJMQswCQYDVQQGEwJVUzETMBEG
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://roots.prod.rwd.aws.ucop.edu/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://roots.prod.rwd.aws.ucop.edu/Shibboleth.sso/Login"; 
index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Redwood Roots</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Service Provider for Redwood 
Roots</mdui:Description>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.ucop.edu/ethics-compliance-audit-services/_files/compliance/privacy/statement-of-privacy-for-web-based-applications.pdf</mdui:PrivacyStatementURL>
+        <mdui:Logo height="60" width="80" 
xml:lang="en">https://www.ucop.edu/_common/_images/sso/uc.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 411150514552087721057967942576208715272405866763, 
expires on Sun Aug 21 21:23:43 2033 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 605353740754048790562896691181193966045199321405, 
expires on Sun Aug 21 21:23:32 2033 GMT -->
+          <ds:X509Certificate>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.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1692989495-validUntil.2023-09-08T18.40.40Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations