InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1742842427-validUntil.2025-04-07T18.42.32Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index b595fa2..39dcf93 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20250321T191840" 
Name="urn:mace:incommon" validUntil="2025-04-04T19:18:40Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www
 .w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20250321T191840"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>zVF9kvJReatIdpHDkpSadhCyXej7seCv9EErEcmNclE=</DigestValue></Reference></SignedInfo><SignatureValue>moJdX+W5xo+M9GqFI7oQN/sMPVX/NYCsl3KVbLsuJhVTPb+Z5sDP+Bh8c6MB59WuBAY8DIf4Tpux
-pUr6ER/J2oWbcFkqmdnLJ6hK2MJHTq9V1SfrNtY7oWC2Z6JUaVdjPJON+xocZNC4LC3RcEBpukZd
-2GLm7sPc7Ip8QGp4/KB93ybr2BK+wDJwsCSZ1DZRclYyFdQtp93naqHFSnKOchbrb6oxroXfd3Df
-ehhe6obHtjv66+keEtlyCf3zsZ72PTFqa7NH4e1Aq/x/B+Fllv/RtGsxYe88K7CEYhG2e6NpBLcx
-pfxGPaQV1cVcU4hDf2fXkBoDuBP0vpmh3JZjTQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20250324T184232" 
Name="urn:mace:incommon" validUntil="2025-04-07T18:42:32Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www
 .w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20250324T184232"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>KvNOSYrQSsEblnql/wwD0rmJFygqNKKk7Qlaxs1b9UA=</DigestValue></Reference></SignedInfo><SignatureValue>QYd41OENIaLHDutoNzEuHWYaCqgtyhwxfgObbiaN1+jGgqICFjosPpqp1M+moxSH5IZPf430gMcJ
+BPaR2GsS9KqGA9H/ka5EqRJluWzOFo7bn/2jilDwgTtyxrSaVMr9SXs7EktB5ux+5VJElTGfVwer
+8od9+Yd/ijYzoBqYbTmkuv1c3itLtolhmHRp/2MBXp7bxyFtSXAxJsXu4D7Kmt6/bMLp9I58Pe2d
+IJuZuvHnvXeZ5knenMEl36u7wO6v4+ycd2tUfdTaftOK32owQXYcKIlPXrZcWICINdBdjL5Dcznr
+VzT4XUE6Bk8iBFhBgYxowlqp2nUKRQGOSJQZKg==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2025-03-21T19:18:40Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2025-03-24T18:42:32Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://authproxy.conity.com/saml2";>
   <Extensions>
@@ -18251,6 +18251,7 @@ 
eXoKuJhDmBZ7guw2keo/i72mAdG8CYXwgX8LjZ7k1+JHDP/bEOWACU8bQA==
     <Extensions>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://ucanr.edu/Shibboleth.sso/Login"; index="1"/>
       <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://authenticate.ucanr.edu/Shibboleth.sso/Login"; index="2"/>
+      <idpdisc:DiscoveryResponse 
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
Location="https://my.ucanr.edu/Shibboleth.sso/Login"; index="3"/>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="en">UC ANR Universal 
Login</mdui:DisplayName>
         <mdui:Description xml:lang="en">UC ANR Universal Login and Portal 
Login</mdui:Description>
@@ -18290,6 +18291,7 @@ ZEgjx13ARQRYpPzmNusmAAnGAq1UapiE/60wq+zIPuojnbDP
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://authenticate.ucanr.edu/Shibboleth.sso/SAML2/POST"; 
index="2"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://ucanr.edu/Shibboleth.sso/SAML/POST"; index="3"/>
     <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
Location="https://authenticate.ucanr.edu/Shibboleth.sso/SAML/POST"; index="4"/>
+    <AssertionConsumerService 
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
Location="https://my.ucanr.edu/Shibboleth.sso/SAML2/POST"; index="5"/>
     <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">UC ANR Universal Login</ServiceName>
       <ServiceDescription xml:lang="en">UC ANR Universal Login and Portal 
Login</ServiceDescription>
@@ -54442,6 +54444,7 @@ 
Lb6jEM5TR+YNqqDF6WIVkcayHWj/tL0sAx9nSFowioUlSFiWNTcLLUe3u6UQ
       <ServiceDescription xml:lang="en">PolicyWonk is an application that 
allows people to ask questions about UCOP</ServiceDescription>
       <RequestedAttribute FriendlyName="displayName" 
Name="urn:oid:2.16.840.1.113730.3.1.241" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
+      <RequestedAttribute FriendlyName="eduPersonScopedAffiliation" 
Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
       <RequestedAttribute FriendlyName="mail" 
Name="urn:oid:0.9.2342.19200300.100.1.3" 
NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
@@ -235230,51 +235233,6 @@ apyNS4/MQRlPn0w9GA==
         <mdui:Logo height="900" width="1200" 
xml:lang="en">https://www.ship.edu/Static/img/logo-stacked.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor use="signing">
-      <ds:KeyInfo>
-        <ds:X509Data>
-          <!-- Serial No. 14298390625279992080630412833203773713, expires on 
Fri Feb 23 23:59:59 2024 GMT -->
-          <ds:X509Certificate>
-MIIGsjCCBZqgAwIBAgIQCsHFFfMlkn58Pa8TEzVhETANBgkqhkiG9w0BAQsFADB2
-MQswCQYDVQQGEwJVUzELMAkGA1UECBMCTUkxEjAQBgNVBAcTCUFubiBBcmJvcjES
-MBAGA1UEChMJSW50ZXJuZXQyMREwDwYDVQQLEwhJbkNvbW1vbjEfMB0GA1UEAxMW
-SW5Db21tb24gUlNBIFNlcnZlciBDQTAeFw0yMzAxMjMwMDAwMDBaFw0yNDAyMjMy
-MzU5NTlaMG0xCzAJBgNVBAYTAlVTMRUwEwYDVQQIEwxQZW5uc3lsdmFuaWExMDAu
-BgNVBAoTJ1NoaXBwZW5zYnVyZyBVbml2ZXJzaXR5IG9mIFBlbm5zeWx2YW5pYTEV
-MBMGA1UEAxMMaWRwLnNoaXAuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
-CgKCAQEAwZ/zB9j4bf7C53wrDb0WWjrD5rHJ3+YJi0csif/LzV4eb8DD5R9lKCmP
-tz5IJU/NLJqa662NZvSpSdVCxz3ODrq7PwShSvnkeFbMAYgRfOdsNutKa6zpOcBG
-7zKB6zaC7qG2+7IwG9hJzJSokQSvZ6Rhfnd11d3KdclIt12rdwTbPBH9yZQAiUfp
-qDrDsPnt15+h1982/KzPYe5SvfnBND0dWc/I+0o26lyxZ87ZZ3OOr+Dw+fOq1+B9
-m3Vgo+SLSFO1Omm3K57/voIesGN3VQqYU/nU5691b+QuN8iHSYsH/9PCZCxsqnFU
-mouXcr5LB0d2w6tnzwTenl9uxxXYcQIDAQABo4IDQzCCAz8wHwYDVR0jBBgwFoAU
-HgWjd49sluJbh0umtIascQAM5zgwHQYDVR0OBBYEFLjxn3KSKh64hppihIXbI7ex
-mpKZMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG
-AQUFBwMBBggrBgEFBQcDAjBnBgNVHSAEYDBeMFIGDCsGAQQBriMBBAMBATBCMEAG
-CCsGAQUFBwIBFjRodHRwczovL3d3dy5pbmNvbW1vbi5vcmcvY2VydC9yZXBvc2l0
-b3J5L2Nwc19zc2wucGRmMAgGBmeBDAECAjBEBgNVHR8EPTA7MDmgN6A1hjNodHRw
-Oi8vY3JsLmluY29tbW9uLXJzYS5vcmcvSW5Db21tb25SU0FTZXJ2ZXJDQS5jcmww
-dQYIKwYBBQUHAQEEaTBnMD4GCCsGAQUFBzAChjJodHRwOi8vY3J0LnVzZXJ0cnVz
-dC5jb20vSW5Db21tb25SU0FTZXJ2ZXJDQV8yLmNydDAlBggrBgEFBQcwAYYZaHR0
-cDovL29jc3AudXNlcnRydXN0LmNvbTAXBgNVHREEEDAOggxpZHAuc2hpcC5lZHUw
-ggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AHb/iD8KtvuVUcJhzPWHujS0pM27
-KdxoQgqf5mdMWjp0AAABhd+GVP8AAAQDAEgwRgIhALOV4vLvVesLSDD4CZya6Zod
-s0m0ZqFkaYLu3t260+4AAiEAzEpXEGNlGKQQL8ujPp959NOCwsVwN0TAz7RvBJVd
-pxMAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYXfhlTJAAAE
-AwBHMEUCIEgRIKm8XJDEz+wznKEEfKqb5zV0IkzCmDab/Qufpdi8AiEA/qNAfIe6
-aGzgSTmW6+5y4hpKTc2xJarHR2Ct3n9ziJYAdgDuzdBk1dsazsVct520zROiModG
-fLzs3sNRSFlGcR+1mwAAAYXfhlSVAAAEAwBHMEUCIQDAlnHHMRy4KEekpZHOlX9l
-qIoorBhgXEoHoQZpAmtQ7AIgca7dpN8uLQDtvtiEXQR/aol/yqCOF/qmncNc5b7X
-0aMwDQYJKoZIhvcNAQELBQADggEBAAhEQ6401T6vI71y6JQ76jd0J1+C/7gFJakk
-notfOFF3ewpyN6aMXRPCSHhsr4lraNEX4EZylqMMUwZWvl+AWbBv4iQFGt4svlRy
-TgYhf1vWRjMIvGejHxXTFr8/pLv28+L5SMqQMs8clyO6xL04XeFX5fEeJ1jVBJPX
-FKN86sHX274cNcGzh9Ij69fNMMP6nkrvErA5sz9Q0dI3/j6/Ck/FndGHHMNC39qV
-lxjJfcAHfrzSVEKCzRyPsmVCnvO0obBr2CbEWHIxnhbUHdRxzGUWVATXui9LCZ67
-2LWph2vRZ5w04Nwq1vCRkJ6H1oqkKgt8wfu2XD+zOdCTrTaqhCE=
-          </ds:X509Certificate>
-        </ds:X509Data>
-      </ds:KeyInfo>
-    </KeyDescriptor>
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1742842427-validUntil.2025-04-07T18.42.32Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations