InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1720464520-validUntil.2024-07-22T18.35.09Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 97b9aae..557c045 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240705T184038" 
Name="urn:mace:incommon" validUntil="2024-07-19T18:40:38Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240705T184038"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>GrwJlNBfdfitc6aRKSMj0M38c+1dZSu8y0TgcVD2Hjo=</DigestValue></Reference></SignedInfo><SignatureValue>ggZMYnUZbnMOaK4qhHW5o/zADGy9qPOL40U2KiPDqtF4R1Yejb714pJhmAP7l3PoJYPDnVT+KRfY&#13;
-zVY+AfVnGeiPnB/E4YudaoajhdwsgRWWf5QAwQwEKKNxAJCCkXbynJRCAPKmwsPN02PpgidE9vG0&#13;
-08h3Q/oQ/8XdOe10093I/YnQzDyqJY3c1Ab7bRsB+yWZ3wv14Lh82MGy69UmRyKvIYubVa0KXgb6&#13;
-6YpggdvOvnlMdZzuTz0WWM0J7P9ElxsK3eFvmfrGMlkXmYfzw5xUSlyqjkTvq+4af/1wX4/PCQCM&#13;
-1cn9wAF3IP1O9Lrp0QgnCnosvwxBbRC8OxjN5w==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240708T183509" 
Name="urn:mace:incommon" validUntil="2024-07-22T18:35:09Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240708T183509"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>3arBfb8u5PXJpxwtnVWQMpxf73Gsc47xGhSQd67fPkc=</DigestValue></Reference></SignedInfo><SignatureValue>MNo/aGdM450F4/Xb1Y6x2+SaeeJNfvWLqkjOPW7bFewnq9WSSoYjNYd/3MmF80S/9NfmNa9QCQwL&#13;
+TOPVX7Nc3G53gQuVlTrQJ1WNVfQVJ1TC0G6KPoYus5zFLj8ijSPodKpBhC+KJ+EZ//nbiPEmIku9&#13;
+0G5RYyB3Xcya4x/W9oUvylaJbSUro2hSXVZZS9aaj5ZBoBwCJXMJ9xvwH212W8PpKtO0w+N4Kyqo&#13;
+fvy1VdpQlxIbLxj2kjGAGTAnO/VrB9OPMEF7pYLj+m//6PdTqjZpC2iaWCur2HuQSny4Q8o45g7G&#13;
+KkH9lvbblKz3c7t4aILIjPhwnlGrUzssAmZGgg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2024-07-05T18:40:38Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2024-07-08T18:35:09Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -102255,6 +102255,89 @@ 
xMqHf7MMh0kLtrR+c9QmkXOReA7fAbIoph/VXOxJS5pMaNsTPU4GNVrRaoU7qPnJ
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://lrc-ondemand.lbl.gov/shibboleth/new";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://lrc-ondemand.lbl.gov/Shibboleth.sso/Login"; index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">LRC Open OnDemand</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Berkeley Lab Open OnDemand access to 
Lawrencium</mdui:Description>
+        <mdui:InformationURL 
xml:lang="en">https://it.lbl.gov/service/scienceit/high-performance-computing/lrc/open-ondemand/</mdui:InformationURL>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.lbl.gov/terms-and-conditions/</mdui:PrivacyStatementURL>
+        <mdui:Logo height="64" width="114" 
xml:lang="en">https://identity.lbl.gov/assets/14_BL_Alt_Stack_Pos_rgb.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor>
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 17514997104939655202, expires on Sat Sep 21 
00:02:10 2030 GMT -->
+          <ds:X509Certificate>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+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://lrc-ondemand.lbl.gov/Shibboleth.sso/SAML2/POST"; index="1"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">LRC Open OnDemand</ServiceName>
+      <ServiceDescription xml:lang="en">Berkeley Lab Open OnDemand access to 
Lawrencium</ServiceDescription>
+      <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+    </AttributeConsumingService>
+  </SPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">Lawrence Berkeley National 
Laboratory</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">Lawrence Berkeley National 
Laboratory</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.lbl.gov/</OrganizationURL>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1720464520-validUntil.2024-07-22T18.35.09Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations