InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1726081750-validUntil.2024-09-25T18.54.31Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 3caeeed..8906ea7 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240910T183713" 
Name="urn:mace:incommon" validUntil="2024-09-24T18:37:13Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240910T183713"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>/fSlxjdtpslVzk6IFPe+uSje3JSQo3k/WWxa2gd5XK8=</DigestValue></Reference></SignedInfo><SignatureValue>ZmoAz2hd0+D9seFnHjDSBL8VP35iU8kv7RzvPzYrptIkvs2gcyTEFWg7VTKsPg5Q05z1PS71Yg3D&#13;
-WK9xfCytQwF8C8Eb+xSj6eLoJM2MdxRTgk0FgrIk5Nb0+Gix6RFb5FjTMMChFhxOVmSugaUPQKwo&#13;
-mWM9kXfIb0xTA0TzW9ZPPx5GnWhv8d1W6HgiUo3SrnadM858c+U8F2ua9N5x7E6G1qDKxOCggIUZ&#13;
-C4Rn4ERtm9KXwCcUw/pfkQ4mS3ICsg08fGAuVtryI/m1IU9s+uAc4eoTXKAsh7B28ammKOviIaVy&#13;
-0Bue6jmTX4fUl0y7JMRNGcv10zWOz50QqLWRBg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20240911T185431" 
Name="urn:mace:incommon" validUntil="2024-09-25T18:54:31Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20240911T185431"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>W54ofg64oGeq9G6EtpD9SBUsGo/nghZ5ZfhlH+SoTpA=</DigestValue></Reference></SignedInfo><SignatureValue>TxS9aIRlXlxIrJXjNGBdQnDLFZdzeSmPPX4tNK/g8GAjL4MA2IM/kD60Jd1EtMkXYqS4qaSMOkJq&#13;
+PYpM99UEDww8KY2SzaZtPBQaQui/gO8WY9CMV2YNkz6GHmGBCd6FmX/adlckrrSkPgqVUbjWeMHl&#13;
+h56EV20sUuGtstvHdhH3MGXl0eSe4EuIz0gNWUtQUV0kw5JceDFKr1bxeFtKjdDaJzy6qgkzZZpE&#13;
+rXQoQce/HAg3fStnIvHILDIsJbOGmLjq9u0C+fAhg25kUA0mr0OKkL0m+Fd6+uFv2aZ/AyE9Hcbk&#13;
+wtWQxfwjqJhTIyk/0LxAx9A73kYA1ruP4U5cUQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw&#13;
 
EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh&#13;
 
dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG&#13;
 
EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u&#13;
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ&#13
 
xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH&#13;
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2024-09-10T18:37:13Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2024-09-11T18:54:31Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -38505,7 +38505,7 @@ kFhAPTrlZdh9/KLkKhq9QA==
     <Extensions>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://account.carc.usc.edu/Shibboleth.sso/Login"; index="1"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://hpcaccount.usc.edu/Shibboleth.sso/Login"; index="2"/>
-      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://laguna-ood.usc.edu/Shibboleth.sso/Login"; index="3"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://laguna-ood.carc.usc.edu/Shibboleth.sso/Login"; index="3"/>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">CARC Federated HPC 
Resources</mdui:DisplayName>
         <mdui:Description xml:lang="en">Interinstitutional access to High 
Performance Compute shared resources</mdui:Description>
@@ -38545,9 +38545,9 @@ 
AnRmOCpqCBiqmqVLlxGFGWWKKVvSq6+g0yW8fHy152d9xc/MpsPMry0uhZYPLJ2t
       </ds:KeyInfo>
       <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://laguna-ood.usc.edu/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://laguna-ood.usc.edu/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
Location="https://laguna-ood.usc.edu/Shibboleth.sso/SLO/SOAP"/>
+    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://laguna-ood.carc.usc.edu/Shibboleth.sso/SLO/Redirect"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
Location="https://laguna-ood.carc.usc.edu/Shibboleth.sso/SLO/SOAP"/>
+    <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://laguna-ood.carc.usc.edu/Shibboleth.sso/SLO/POST"/>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://hpcaccount.usc.edu/Shibboleth.sso/SLO/POST"/>
     <SingleLogoutService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
Location="https://hpcaccount.usc.edu/Shibboleth.sso/SLO/Redirect"/>
     <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
Location="https://hpcaccount.usc.edu/Shibboleth.sso/SLO/SOAP"/>
@@ -38556,7 +38556,7 @@ 
AnRmOCpqCBiqmqVLlxGFGWWKKVvSq6+g0yW8fHy152d9xc/MpsPMry0uhZYPLJ2t
     <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
Location="https://account.carc.usc.edu/Shibboleth.sso/SLO/SOAP"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://account.carc.usc.edu/Shibboleth.sso/SAML2/POST"; index="1"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://hpcaccount.usc.edu/Shibboleth.sso/SAML2/POST"; index="2"/>
-    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://laguna-ood.usc.edu/Shibboleth.sso/SAML2/POST"; index="3"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://laguna-ood.carc.usc.edu/Shibboleth.sso/SAML2/POST"; 
index="3"/>
   </SPSSODescriptor>
   <Organization>
     <OrganizationName xml:lang="en">University of Southern 
California</OrganizationName>
@@ -231576,7 +231576,7 @@ 
ik202ny3EMaI0Inw9Wc8Toppy2R91Bz/bh0SCYqsCrcJygRoZ4ROwvUZ/DBoyixB
     <EmailAddress></EmailAddress>
   </ContactPerson>
 </EntityDescriptor>
-<EntityDescriptor entityID="https://cas.cgcent.miami.edu/idp/shibboleth";>
+<EntityDescriptor entityID="https://sso.miami.edu/idp";>
   <Extensions>
     <mdrpi:RegistrationInfo registrationAuthority="https://incommon.org"/>
     <mdattr:EntityAttributes>
@@ -231587,108 +231587,82 @@ 
ik202ny3EMaI0Inw9Wc8Toppy2R91Bz/bh0SCYqsCrcJygRoZ4ROwvUZ/DBoyixB
         <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
       </saml:Attribute>
       <saml:Attribute Name="http://macedir.org/entity-category"; 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
-        
<saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
         
<saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
       </saml:Attribute>
     </mdattr:EntityAttributes>
   </Extensions>
-  <IDPSSODescriptor errorURL="https://cas.cgcent.miami.edu/idp/"; 
protocolSupportEnumeration="urn:mace:shibboleth:1.0 
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+  <IDPSSODescriptor 
errorURL="https://miami-ms.bridge.cirrusidentity.com/error.php?code=ERRORURL_CODE&amp;ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX";
 protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
       <shibmd:Scope regexp="false">miami.edu</shibmd:Scope>
       <mdui:UIInfo>
-        <mdui:DisplayName xml:lang="en">University of Miami - 
Non-production</mdui:DisplayName>
-        <mdui:Description xml:lang="en">The non-production authentication 
system.</mdui:Description>
+        <mdui:DisplayName xml:lang="en">University of Miami - 
Authentication</mdui:DisplayName>
+        <mdui:Description xml:lang="en">University of Miami - 
Authentication</mdui:Description>
         <mdui:InformationURL 
xml:lang="en">https://welcome.miami.edu</mdui:InformationURL>
         <mdui:PrivacyStatementURL 
xml:lang="en">https://welcome.miami.edu/privacy-and-legal/privacy/index.html</mdui:PrivacyStatementURL>
-        <mdui:Logo height="40" width="40" 
xml:lang="en">https://ucomm.miami.edu/_assets/images/tools-and-resources/signatures/umiami_prime.gif</mdui:Logo>
+        <mdui:Logo height="81" width="160" 
xml:lang="en">https://ucomm.miami.edu/_assets/images/tools-and-resources/signatures/umiami_prime.gif</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor use="signing">
+    <KeyDescriptor>
       <ds:KeyInfo>
         <ds:X509Data>
-          <!-- Serial No. 96060080357906574687788763764442804869754519128, 
expires on Sun Jun 15 13:26:11 2031 GMT -->
+          <!-- Serial No. 255218540075971784916609107913978471500579599851, 
expires on Thu Sep  7 14:11:07 2034 GMT -->
           <ds:X509Certificate>
-MIIDOzCCAiOgAwIBAgIUENN7pIAppEM5kpFqfJ0yapfX/lgwDQYJKoZIhvcNAQEF
-BQAwHzEdMBsGA1UEAxMUY2FzLmNnY2VudC5taWFtaS5lZHUwHhcNMTEwNjE1MTMy
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1726081750-validUntil.2024-09-25T18.54.31Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations