InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1723229369-validUntil.2024-08-23T18.37.23Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index d908cbc..20b4866 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240808T190251" 
Name="urn:mace:incommon" validUntil="2024-08-22T19:02:51Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240808T190251"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>v8DaMculrpGW9v47GJVlds0fd3+zGC37s2bf5q069pE=</DigestValue></Reference></SignedInfo><SignatureValue>nJYtv/aY2HWidiy6FEb11gfHwnShPyokSLfybZHFLJOyg785N1vNo1rh71l9ZEVa4EuEUQ1YWBgO&#13;
-Ie7qedx7iSIC4JtmKivxWp2U/eZff/PJ1V624w7oyV2OYygflsECsCDF0Erd1wpkQtTUmojl0QHg&#13;
-tIyuzpuiXK/t5p8x5mma0dQPcMyK7igj9KvIS15h50jecahB52pRxGN5sxNTUQqlx82XRvmHh23r&#13;
-id8I+uWnq5PtRah+gGB6jxDL4Sbl+6jT436aZVLg5ujF/+axBJ9AGcLnqObLW0BVed8ns7qBcy+E&#13;
-UiWYMdupsvi/IrCowWLCS8cArcRhzKZnEUgDeQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240809T183723" 
Name="urn:mace:incommon" validUntil="2024-08-23T18:37:23Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240809T183723"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>IroD41e9nO120aHltj/6dCsKvhAXHoYZGB+cBSb4ffo=</DigestValue></Reference></SignedInfo><SignatureValue>hIqVg46mWAFUmCfH/VbKdKXa7ClgGL0NrxL2u51K5E/ofaz+RM9FT5I47rhro7rsJYXNAdhzmhwx&#13;
+tuDyyWWwmujkSEe3BClYQ0LW9eXRM/F/mv9VJ9b9cHtncjjsRnolCsnbilZvnh3MOt+bUb92RCHr&#13;
+sSt5sBPXPlRAs4pSvBzB9ddMLzeHI45EQhkR62xr0qn/Fk5zcnYp8i1jObHOoaNP8CmiTpUG5e8i&#13;
+EPjNZIfUmHct5czWBYfJQpvNs/sIda0CwxeiOiNWA9P9egLwzFZp2Ddcn2dHE7nPXdQme2cYZg2W&#13;
+XGQWvhOEXRyDvZBywPeyMS0m1sIRcaF6TkAz0w==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2024-08-08T19:02:51Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2024-08-09T18:37:23Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -11137,6 +11137,78 @@ 
MIID5zCCAs+gAwIBAgIJAI4XubteXKakMA0GCSqGSIb3DQEBCwUAMIGJMQswCQYDVQQGEwJVUzETMBEG
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://ise.dev.finapps.aws.ucop.edu/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://ise.dev.finapps.aws.ucop.edu/Shibboleth.sso/Login"; 
index="1"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://isedev.ucop.edu/Shibboleth.sso/Login"; index="2"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Intercampus Summer Enrollment System 
(ISE) - Dev</mdui:DisplayName>
+        <mdui:Description xml:lang="en">UCOP-only development environment 
for the Intercampus Summer Enrollment (ISE) application</mdui:Description>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.ucop.edu/ethics-compliance-audit-services/_files/compliance/privacy/statement-of-privacy-for-web-based-applications.pdf</mdui:PrivacyStatementURL>
+        <mdui:Logo height="60" width="80" 
xml:lang="en">https://www.ucop.edu/_common/_images/sso/uc.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 44305728667851474924712552845152764941156618633, 
expires on Fri Jul  7 03:48:32 2034 GMT -->
+          <ds:X509Certificate>
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
 
g1dkIKDwAjUBs2nCWqw5MmFohbmM92cDkey3RpgJGGHe2T2M1jkQllRtiQNnJIZf0DEaJP+OBoLkKn9ek7oJ1STeXADChNvAsfXbDav66k6CmS5QB1wFSy3Z99DTud6p0iHrbqC6DBzWgvPf7E7lFrMLrik4myKkA+wWhN8QaZutUszje0xKkONHSnhqPw87PUTi6v4kpnt6DRsKhq9HRTfiEJv/CIWDgd+HnwA/NGa1LQ0JDbHTAmTjyO9RPPUiR0WybrFvs81rW8xKDyIHhfbUmets6CtvaDK27eg2klq19BLYmILYJ0tPNCkz47KEkrNxojMWllElJ/iO2UZ+h7GAcJeIautO4lhOclrVrpWTiMEVnZtNd7eMTIwgsuf5edwApfJKT1/kIgLhx/NYFHbAKJW68YW6tC0T5WB77PC/qHfoUj5KLgwPPv44TNA7nS+3FHGoHnssgpZxb/NaZgWDzmLad3MbHv1yGahA4o=
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 151142324425194744214117115265983322224978207495, 
expires on Fri Jul  7 03:37:14 2034 GMT -->
+          <ds:X509Certificate>
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
 
l+LXrtIeriL/fWcLXIPMEXy0YnwbqNut36YNgnJlUoswBASzew3ALp5ldMop9Wo61xLPfHtG2zuKiP6IK29lrS3sqlrt05pctIQ/7AZzUByiDPTIWRO6Tu++lfpdi6WuUC5cAp6WdCHvacukN9PajH7m62Th+bTGEik/jyQrmrYsyOt4LZ52KUe0kBcb9LkXezCIpdZFyG6acojuBprAxuTrAJ20iWv5XIL2p+QzmbXvzpx1K0GjIw/7LbV3Q7CsWnzs5vAwshdQMIWnxrbmzTOc77QIWCSEo9OM9oreRLFXJrB2zOmY9VDUQlrJ4t0h33WoClx6LPuupHm5cJwXuk9IRHkrsQgO0dTJPZdmO8iYwv5ShKHz3BJBgxOptabQMEInKUSldafQqG5M6PJ0vMIXJXQEBMWAn7qy1S4rCA9XQz3B2H40enyZXOxW57aK/AsbzaFHAl7NctRzzDbqLLBERM8F1V8jibHfoKwNCU=
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://ise.dev.finapps.aws.ucop.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://isedev.ucop.edu/Shibboleth.sso/SAML2/POST"; index="2"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">Intercampus Summer Enrollment System (ISE) 
- Dev</ServiceName>
+      <ServiceDescription xml:lang="en">UCOP-only development environment 
for the Intercampus Summer Enrollment (ISE) application</ServiceDescription>
+      <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
+      <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
+    </AttributeConsumingService>
+  </SPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">University of California - Office of the 
President</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">University of California - Office 
of the President</OrganizationDisplayName>
+    <OrganizationURL 
xml:lang="en">http://www.ucop.edu/welcome.html</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="administrative">
+    <GivenName>IT Service Desk</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Identity and Access Management</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
+    <GivenName>Security Operations</GivenName>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1723229369-validUntil.2024-08-23T18.37.23Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations