InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1701290153-validUntil.2023-12-13T20.24.04Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index a1be7cd..6415886 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20231128T203520" 
Name="urn:mace:incommon" validUntil="2023-12-12T20:35:20Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20231128T203520"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>nXGEnv9REeB6Q758U/VJdshmN41tPJjuQqNeNEmdHvQ=</DigestValue></Reference></SignedInfo><SignatureValue>J+o5AoeYKI5UexRbbFR0CjFVC4DEDIQwjbAMU0G/ePn20eJtX254A9R1XKCYR7Ra/pTfQkNBrDpO&#13;
-mpqEHuxcSPRRM2t6R1CoddNXL4+xFkOG/TKv4iOkwy6njl3/l5S4zvpt9qj+tg8R7Osi4+uD/xBF&#13;
-1cx0/B2+dGlO7ayFz690NAtIyUSINO6+ei9WtSFAo1FVH2qOB6M0H+c/cDA0iW5o5lj0QEh9aIkr&#13;
-O26BvV5hH90XeqRM4jOKSwz5DLrpCOjLlbdkZkrzUzic7Jtn7zPOx0hu4Nd7y75RxJT/tQhhYG9i&#13;
-iqH1eaiF4vP5gd4elnX1yzG1QTmeazLj287BiA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20231129T202404" 
Name="urn:mace:incommon" validUntil="2023-12-13T20:24:04Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20231129T202404"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>0n3/0xenoLBRzehnLK4bU0zouqijaVda7yhSP3uIh/s=</DigestValue></Reference></SignedInfo><SignatureValue>DQltd6WJdk4/hGDzjEC03VByuB3XIOxDngNgCRp77f+WYNSzApDgx7LJxk1+MlQ2b5xCZHFQoi3g&#13;
+gaW3XInRWFDQI3yMkvGQzFrIKOaAcNpJvh9KURgRBV6UE7jq/tPEsve8zECcRXucOqq94lh98tIW&#13;
+i7mYsGcchkUpKeSIUMpYdk3+lhFOQ/j0V2sQzqpKZi9yz3mTKxTeb5iNd1WMt0aOSLGW4q0kfIoa&#13;
+MgYkXM/pyvjMvOSyES1bPS5BNbJSGRCS7NFto7TpiBOXNiK8LfG/FIQxBe9CG4zodwpMaj99/jNC&#13;
+L/MBdAmeeaTiu4rfiDqjOme7MsLb1J3lYI0f4g==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2023-11-28T20:35:20Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2023-11-29T20:24:04Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -150528,6 +150528,88 @@ n3JVlfs4shC1skchnUm/C3o6QMKQQ6bTdMIA9HG/uQ==
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://appinvite.colostate.edu/shibboleth-sp";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://appinvite.colostate.edu/Shibboleth.sso/Login"; index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">CSU Application Invitation 
Management</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Service to manage external 
identities and process invitations to use CSU web 
applications</mdui:Description>
+        <mdui:InformationURL 
xml:lang="en">https://appinvite.colostate.edu/privacy.aspx</mdui:InformationURL>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://appinvite.colostate.edu/privacy.aspx</mdui:PrivacyStatementURL>
+        <mdui:Logo height="60" width="353" 
xml:lang="en">https://netid.colostate.edu/_support/images/csu60.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 16550184935037043418, expires on Sat Jun 14 
15:19:37 2025 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://appinvite.colostate.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">CSU Application Invitation 
Management</ServiceName>
+      <ServiceDescription xml:lang="en">Service to manage external 
identities and process invitations to use CSU web 
applications</ServiceDescription>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+    </AttributeConsumingService>
+  </SPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">Colorado State 
University</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">Colorado State 
University</OrganizationDisplayName>
+    <OrganizationURL 
xml:lang="en">http://www.colostate.edu/</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="administrative">
+    <GivenName>CSU Identity and Access Management</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1701290153-validUntil.2023-12-13T20.24.04Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations