InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1725046372-validUntil.2024-09-13T19.15.46Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 29d8d79..00c722b 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240829T190959" 
Name="urn:mace:incommon" validUntil="2024-09-12T19:09:59Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240829T190959"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>PNLpcr8ae+EENPirn7ep05BaDS4rIadDOdOoUp4BpUg=</DigestValue></Reference></SignedInfo><SignatureValue>T6eQYpskeYI9yDsXVOx1v7BT11j6uUdY2e+hPDzi9z7n2Jr38RBr5moJMIOclkjS3lSsLMSQQTzd&#13;
-0FA1jbHjIobPNRGCA5N9Ii+OckzJiMQXL0Ie8alGjvZva5i7vBHcShLqUjAQ9IeL7AaG99pvLy6C&#13;
-LU6fDZIHqd5SswqXB4unfIKtXCdBTPea0RJlmhldSktzJha7t1zQL+o0UxWfnUIpxTm20RG1auep&#13;
-969qwXEKUnAOt1F5cVjgIpHhm0q/MKF1Qt2mMOBEVFWjFz/+sVtyBNleKlHX2AOsV1fvo/SsQPPr&#13;
-FMqXpTJoxQhTc/WofO2IkvIrozgK+Ipv5tqh1Q==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240830T191546" 
Name="urn:mace:incommon" validUntil="2024-09-13T19:15:46Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240830T191546"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>1hkkwW40ayEtd+cwMXkuAc0IZVnKw/s5VxGsf5FPUmE=</DigestValue></Reference></SignedInfo><SignatureValue>AOS7GoTSzE2EiTqmIyKLUuMLg1v5KoKgLWu0KvJKDvmYwclEuZx3sKcIjzk5STPIwb/kAsDRZTEr&#13;
+F+0UEdD3o74k3HjR7UxkhGCmJ+wc4et5SB5hU938A+peV4V4sBGVit+U6cVOosHCpfyWAPwBoLPA&#13;
+C3TnmFuSzbrRPsq9ZEI156UZ2ZyS/7WbvVarHHMkYnAps71rZShCdwQ5wld0rAndswg2VHMCnqY/&#13;
+PnHs0jfJZcyPbxVPQwQWL0SM7fna/TJ3KiKSeBcjlDWQ8OxE1wlx5Bg9ZUA9C8MFyon9IJLQVmV1&#13;
+polj7enMBUc5O/eldXgQw+ilM9yl9rRcFfL/hQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2024-08-29T19:09:59Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2024-08-30T19:15:46Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -11285,6 +11285,78 @@ 
MIIEVzCCAr+gAwIBAgIUGnl0y1R1SYt6Lm0TghpTqFz2owcwDQYJKoZIhvcNAQELBQAwJzElMCMGA1UE
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
+<EntityDescriptor entityID="https://ise.qa.finapps.aws.ucop.edu/shibboleth";>
+  <Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
+    <mdattr:EntityAttributes>
+      <saml:Attribute 
Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+      </saml:Attribute>
+      <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
+      </saml:Attribute>
+    </mdattr:EntityAttributes>
+  </Extensions>
+  <SPSSODescriptor 
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <Extensions>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://ise.qa.finapps.aws.ucop.edu/Shibboleth.sso/Login"; 
index="1"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://iseqa.ucop.edu/Shibboleth.sso/Login"; index="2"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Intercampus Summer Enrollment System 
(ISE) - QA</mdui:DisplayName>
+        <mdui:Description xml:lang="en">QA environment for the Intercampus 
Summer Enrollment (ISE) application</mdui:Description>
+        <mdui:PrivacyStatementURL 
xml:lang="en">https://www.ucop.edu/ethics-compliance-audit-services/_files/compliance/privacy/statement-of-privacy-for-web-based-applications.pdf</mdui:PrivacyStatementURL>
+        <mdui:Logo height="60" width="80" 
xml:lang="en">https://www.ucop.edu/_common/_images/sso/uc.png</mdui:Logo>
+      </mdui:UIInfo>
+    </Extensions>
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 36326262472394793623748958095859850621552502861, 
expires on Fri Jul  7 03:41:33 2034 GMT -->
+          <ds:X509Certificate>
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
 
YOM1NdpBUqE6sRbW8eypuaRRo+mOKHpVBXvffbUPeuGsuiSmC0yxAEi9zDMskAbOEyPC3CF/O4xpqww1pbeaqSHgNgN/Zdej0mHkom96VML/d7ycYeYRLQFHI9/3hhq/b7uYBec1wNYR1DAhWzolM8JZjb7nafq6194YbCqpBlLdvBFyg88Z5JNCToA/ty8URM6kq41V7Ofcahjet3rvxyMOvVbH3q7ey3HSIL/zix7t3kGn8QySDFB+RXQ7FJbiRYfFY/hDQRN0Dstlj+duqaQQYWvzsepguGx1AehU6HT1IbKvA6HB1EEj23x+Hn8JyE7oqgJHbf7Q2XXxlqlaTgQqroIWNljPXVznKsXEgHJL5lOeavK7oRuFHV74Axul0rD5rp078DA5H8/DLHbO3crCkb6aahgAfrBiNevKHszRregZx8Z7By+1Rwo8oyK/sXckT1I/aP5kX+T3375TB7CIOG4wGod4J5p7Q==
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <!-- Serial No. 248380691300918993258008043231336659071581698093, 
expires on Fri Jul  7 03:42:44 2034 GMT -->
+          <ds:X509Certificate>
+MIIEUzCCArugAwIBAgIUK4HGgLGkNhXfW1NJ7vRgidwmOC0wDQYJKoZIhvcNAQELBQAwJjEkMCIGA1UEAxMbaXNlLnFhLmZpbmFwcHMuYXdzLnVjb3AuZWR1MB4XDTI0MDcwOTAzNDI0NFoXDTM0MDcwNzAzNDI0NFowJjEkMCIGA1UEAxMbaXNlLnFhLmZpbmFwcHMuYXdzLnVjb3AuZWR1MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAol9qfW3yb4G6UylveWxXQqwRSkxInbvH6TDIIEi8Q2+Lcnc7hlYkvGmly4ZtL78g9Mg7Ll3YqbHbouqTmO2x8PPu8SXWaWVihb1L9+OXdST66kheA7YolkwI3mi7XVOV9o+jnjx4tNMCsFuJkOvaRFsolfrCxld4mDks41roE3OMn4aF24/HomCtsykhAgOPDyQ1R4IJPHpUfOj6QIXGAgtBAHIRfnY4mx1cofz3AjVfRV/gVE0YDxr0zgeJVdO93pWSViTTNESVlS1jIbcCqRP5+hveop+miea1s89a5tU76jH4RjUmdTWmG+jA8DNWLVCkEsoMF8cvqCfsOGxxLItdH5V9Z9gG0HlKgAGti2LIGDVdP5VKpoMOVKvu25p/DHb1K2YqMImZTD8KG+QDjDAUznaGIzpZfA4xf4Sh7pPNAKv+MmCaIEqlNAv0iyZe07sVsbyWdGHv5eeulD+OcjEQxfgdHeBMUyizKT2joeDsZkjCEuUtgWD5CtIhp+k3AgMBAAGjeTB3MFYGA1UdEQRPME2CG2lzZS5xYS5maW5hcHBzLmF3cy51Y29wLmVkdYYuaHR0cHM6Ly9pc2UucWEuZmluYXBwcy5hd3MudWNvcC5lZHUvc2hpYmJvbGV0aDAdBgNVHQ4EFgQUAlKxW24Qb23q5JEi89NmPaykUMcwDQYJKoZIhvcNAQELBQADggGBAGHDa2IDAcuHpK0xQom9tOReYZ7vQ
 
x/IKRHejxO6m8ehudVR4l7tLfm4lsotDMKsbLp1VyI3qO7vuZFEpsZASNKIG+SIR1PrQPsWZlPrgQJUXS5gfQR6NNh1igGoUxXcoPQSgweWGHvVwsWUYIoTx7yvZILJrGY+afrFc4KczqSh1f4Mlzz3mS/hN0ED5RahhLcW4x9DUGHztPEsr5/PuRk6Vjf/16hrD3/aTkQxBbsp8pFBt8axD9HRkM6YRj5tcFRY++K0c7xWVfCaptwAXR/YBz6+An6rsxtcrKS2GBYgpiRPnGpkntpHkyDqZ1410DlyqB7B6Onkl8qXseMOPFWem7JwBux9mC1PWYEtU9XoYFDE9TDm+HtPALKtWGFA/W9EixIE4DrFUX2+bVSmpgeIXSbVXtOrlrmA63thbmkEaqdo0PUOBvtrEXrobwPKDJM6LI89TMLnFPI9bziuefjK8/IYHozWsAw5h3m2E6GZGU/coADepk8ySK1ZuIO1jw==
+          </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+    </KeyDescriptor>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://ise.qa.finapps.aws.ucop.edu/Shibboleth.sso/SAML2/POST"; 
index="1"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://iseqa.ucop.edu/Shibboleth.sso/SAML2/POST"; index="2"/>
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="en">Intercampus Summer Enrollment System (ISE) 
- QA</ServiceName>
+      <ServiceDescription xml:lang="en">QA environment for the Intercampus 
Summer Enrollment (ISE) application</ServiceDescription>
+      <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
+      <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" 
isRequired="true"/>
+    </AttributeConsumingService>
+  </SPSSODescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">University of California - Office of the 
President</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">University of California - Office 
of the President</OrganizationDisplayName>
+    <OrganizationURL 
xml:lang="en">http://www.ucop.edu/welcome.html</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="administrative">
+    <GivenName>IT Service Desk</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Identity and Access Management</GivenName>
+    <EmailAddress></EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="other" 
remd:contactType="http://refeds.org/metadata/contactType/security";>
+    <GivenName>Security Operations</GivenName>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1725046372-validUntil.2024-09-13T19.15.46Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations