InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1712603071-validUntil.2024-04-22T18.52.27Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 33a807e..46bab11 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240405T183436" 
Name="urn:mace:incommon" validUntil="2024-04-19T18:34:36Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240405T183436"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>nl4X+2KLu0/bcvA+9a1HvkQYxjtPW/zPvwkGPDF3hlA=</DigestValue></Reference></SignedInfo><SignatureValue>QVYthitB37fyylRt91WU6sKTdpV3M1vA0XW9bQpv/GdAAu75H0+Q3HgtpJMgeJH6oi4ewlilOoV5&#13;
-pQKVvhzF8TXZ/R2Gzs3DD5xkW3uNPgli9wybJ2ppmZJp0Nthh9+msnBZA0Jad3YPyG03f4Ok5izP&#13;
-LWGhjiLT0K+jJKVUW844pckYMU0B0uW/ZGa8824wYIv5446twA9P0umYctTiFPqJSynyKVQIn+wF&#13;
-WStty8PcGQGRM+aLxTePDf7yvIuq//YdsTmTHYltn7PzVL3y3Uo5ZlKQgE5hRyXdAyjt2BwGly/a&#13;
-qnPoud4cLWyxtlpAcAr1vhrLkytrGdnNwLZrEg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240408T185227" 
Name="urn:mace:incommon" validUntil="2024-04-22T18:52:27Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240408T185227"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>HvpYFSZTQZp84RT+qfWrPcx1JW0BQicGKGR8dmWz/RM=</DigestValue></Reference></SignedInfo><SignatureValue>bDa27qE3fQV5++uT/x5J1nQ2nphJ08lE8FgcKQ2IVDusIX4sSVF9nr7ovsy4Zh0xn/zVoN38Xagh&#13;
+SFf6yyHWHRJFb4Q9yQmuF3xyi/xArNOy6Ff73XQwmrU4f4oKr8tLpkP5YGKJHKX7p+tlWbYY+ulB&#13;
+inq3oxlAoFev3Fg7LAj0/CGpvvPgNPXuT5yan9pa2issk8zhR51dJhSrWlBBqTX7HGQSz9tI68Pn&#13;
+Oque4dehXs70Bg0+Pz3jRG5/1ZBTxAPseMba/s+8QqViSXJOpNYohPMtdZ4GwZiH5x764e16ssGw&#13;
+ctUcwCS/pXQckkoTrXPLKL7bt/WvaQXFLMEYwQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2024-04-05T18:34:36Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2024-04-08T18:52:27Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -217028,7 +217028,7 @@ XhWLqbRfZU2OpF5ECpBfGfzZtL7KTorFdG5dak8=
         <mdui:DisplayName xml:lang="en">Production Fermilab Federation Hub 
SP</mdui:DisplayName>
         <mdui:InformationURL 
xml:lang="en">http://www.fnal.gov/</mdui:InformationURL>
         <mdui:PrivacyStatementURL 
xml:lang="en">http://www.fnal.gov/pub/disclaim.html</mdui:PrivacyStatementURL>
-        <mdui:Logo height="100" width="600" 
xml:lang="en">https://pingprod.fnal.gov:9031/files/flogo.png</mdui:Logo>
+        <mdui:Logo height="100" width="600" 
xml:lang="en">https://pingprod.fnal.gov/files/flogo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
     <KeyDescriptor>
@@ -217040,9 +217040,10 @@ 
MIIDtDCCApygAwIBAgIGAWP5cg3SMA0GCSqGSIb3DQEBCwUAMIGaMQswCQYDVQQGEwJVUzELMAkGA1UE
           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://pingprod.fnal.gov:9031/sp/SLO.saml2"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://pingprod.fnal.gov:9031/sp/ACS.saml2"; index="1"/>
+    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://pingprod.fnal.gov/sp/SLO.saml2"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://pingprod.fnal.gov/sp/ACS.saml2"; index="1"/>
     <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">Production Fermilab Federation Hub 
SP</ServiceName>
       <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
@@ -222372,6 +222373,34 @@ 
BjecOoaT1TSrxNywQXHlql7Dql6FrG+np3x2mxiKDEgbCTp7baZ/muGgobKdE+Jr
         </ds:X509Data>
       </ds:KeyInfo>
     </KeyDescriptor>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 446950622821116894528809848340265956993110678980, 
expires on Mon Mar 27 16:25:44 2034 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://federation.campuslabs.com/Shibboleth.sso/SLO/POST"/>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://federation.campuslabs.com/Shibboleth.sso/SLO/Redirect"/>
     <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
Location="https://federation.campuslabs.com/Shibboleth.sso/SLO/SOAP"/>
@@ -294718,39 +294747,6 @@ 
mQLYKAsMhzU3YWX4j63xpEpEaiqeUbq3SVY40ooXQUC6EK5CqK8Gu0VECakpIi7A
     <KeyDescriptor>
       <ds:KeyInfo>
         <ds:X509Data>
-          <!-- Serial No. 14563191982618452506, expires on Mon Apr  8 
16:01:57 2024 GMT -->
-          <ds:X509Certificate>
-MIIESzCCAzOgAwIBAgIJAMoa2fL3yiIaMA0GCSqGSIb3DQEBBQUAMIG7MQswCQYD
-VQQGEwJVUzERMA8GA1UECAwITmV3IFlvcmsxDjAMBgNVBAcMBVVwdG9uMScwJQYD
-VQQKDB5Ccm9va2hhdmVuIE5hdGlvbmFsIExhYm9yYXRvcnkxKDAmBgNVBAsMH0lu
-Zm9ybWF0aW9uIFRlY2hub2xvZ3kgRGl2aXNpb24xFjAUBgNVBAMMDWxvZ2luLmJu
-bC5nb3YxHjAcBgkqhkiG9w0BCQEWD2l0ZGhlbHBAYm5sLmdvdjAeFw0xNDA0MDkx
-NjAxNTdaFw0yNDA0MDgxNjAxNTdaMIG7MQswCQYDVQQGEwJVUzERMA8GA1UECAwI
-TmV3IFlvcmsxDjAMBgNVBAcMBVVwdG9uMScwJQYDVQQKDB5Ccm9va2hhdmVuIE5h
-dGlvbmFsIExhYm9yYXRvcnkxKDAmBgNVBAsMH0luZm9ybWF0aW9uIFRlY2hub2xv
-Z3kgRGl2aXNpb24xFjAUBgNVBAMMDWxvZ2luLmJubC5nb3YxHjAcBgkqhkiG9w0B
-CQEWD2l0ZGhlbHBAYm5sLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1712603071-validUntil.2024-04-22T18.52.27Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations