InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1700164968-validUntil.2023-11-30T19.51.26Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index b8b4adb..78091c7 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20231115T194112" 
Name="urn:mace:incommon" validUntil="2023-11-29T19:41:12Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20231115T194112"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>b9f5YezBlmT8KZVn3YavUOm6oYkB5fem2xIMc788HJg=</DigestValue></Reference></SignedInfo><SignatureValue>UXnNW6p6tgfHhn7nWFzbf1AkxF2Vlb4YUnCvfN9jXkjo94L3wRL+XOtlfER/NmqbGDaIb/dhIr75&#13;
-yE/gaUUvq8SnL6GZ7DJLrH6F/oWpx+nDcN9pqRzikAci9khlxEVMwo6ar9SOkHCSLVvm/UU+CV/M&#13;
-BbGiawgdgK2lOOPdl+6CVprJTpLVyI6ivWc43uWgjunqT3gLjoybnJj/Zwa2gP+rhSA75T3uVZ+T&#13;
-MeFqX/JrV0EfodWAm8008W1CUsS/7pC5PJZsrYWcjmHlol6kC+ThO4NdqUB7KdGWq3DmkGFTSFMq&#13;
-zqtuQz1tx3m5FxxI2BrLL6NExwsaQr6Cak3Jaw==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20231116T195126" 
Name="urn:mace:incommon" validUntil="2023-11-30T19:51:26Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20231116T195126"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>AikzVc3W/GsWJmXPixGOUBIBOPyTfFuMHGiw4aAD5F4=</DigestValue></Reference></SignedInfo><SignatureValue>tzQxDfok9zrFPdY9zFt71K3pfAplUyz5Di7ktlKRY9Eq2dr/Lz5T36eZHi0dRS0CfH74FiOxkxzA&#13;
+cB64eaEb/Wg3WDV66ta/hw5XKAoNPdYRcqF7C+Z2PjCWwRsmSrXMSp/OUBVIcFM+Q/LLlD2WXPDL&#13;
+0cmloRlwSB43D7oFuvxbr5uqHNr4RycD7x4jQonyCUhXsrx9XkYXSR8XZlSrRFGNIXgvlxkgsfFi&#13;
+p4AT4a3+EhdyBt5qkDhOF7nDfOs+3Rh5NnoPhR4s3X0KsikxZ4hQZJXEhGhcWckTEq+J5qo+8qP6&#13;
+s80zXwbynxq+xwubZ11PQyrmqTHJXfvenNSL+A==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2023-11-15T19:41:12Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2023-11-16T19:51:26Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -144796,6 +144796,91 @@ JXygKoGfG4DSVLC9sA==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://qcddlplws801.ucsf.edu/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol 
urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/DS"; index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Log in to DDL Test 
Environment</mdui:DisplayName>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://qa.ddl.ucop.edu/public/Terms+and+Conditions</mdui:PrivacyStatementURL>
+        <mdui:Logo height="107" width="130" 
xml:lang="en">https://identity.ucsf.edu/sites/g/files/tkssra266/f/wysiwyg/logo_0.jpg</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 13526482782065722041150274865096046553599280119, 
expires on Sun Nov  6 23:25:46 2033 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SLO/POST"/>
+    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SLO/Redirect"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SAML2/POST-SimpleSign"; 
index="2"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SAML2/Artifact"; index="3"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SAML2/ECP"; index="4"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SAML/POST"; index="5"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" 
Location="https://qa.ddl.ucop.edu/Shibboleth.sso/SAML/Artifact"; index="6"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">Log in to DDL Test Environment</ServiceName>
+      <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+    </AttributeConsumingService>
+  </SPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">University of California, San 
Francisco</OrganizationName>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1700164968-validUntil.2023-11-30T19.51.26Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations