COmanage Developers List

[Heather Flanagan <>]

Metadata tweaks strike again!  I can't tell if we asked for the wrong thing 
or if TSG changed the wrong thing.  Thoughts?

-Heather
________________________________________
From: 

 
[]
 on behalf of Tom Scavo 
[]
Sent: Thursday, March 07, 2013 6:12 AM
To: IJ Kim; Jeff Hagley; Ryan Martin
Cc: Angi Sizemore; Heather Flanagan; Ann West; InCommon Administration
Subject: Re: Internet2 has been Published

Hello Internet2 Site Administrators,

This metadata was approved a few days ago. There's nothing wrong with
it, but unless I've missed my mark, this is not the entity descriptor
that needed to be updated for R&S. AFAICT, the correct entity has
entityID https://demo.co.internet2.edu/shibboleth

Heather, can you please confirm that the above entityID is correct? Is
that the SP that applied for R&S?

This might be a use case for delegated administration. Perhaps Heather
should be made a delegated administrator so that she can update the
metadata herself? (If not Heather, then someone else on the COmanage
project?)

Thanks,
Tom

On Thu, Feb 28, 2013 at 2:59 PM,  
<>
 wrote:
> Update notification for 
> entityId="https://comanagedemo.internet2.edu/shibboleth":
>
> The following metadata update has been published at
> "http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml";
>
> <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
> entityID="https://comanagedemo.internet2.edu/shibboleth";>
>   <SPSSODescriptor 
> protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
>     <md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
>       <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
>         <mdui:DisplayName xml:lang="en">COmanage Showcase</mdui:DisplayName>
>         <mdui:Description xml:lang="en">A showcase instance of the COmanage 
> platform</mdui:Description>
>       </mdui:UIInfo>
>     </md:Extensions>
>     <md:KeyDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
>       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>         <ds:X509Data>
> <!-- Serial No. 480, expires on Thu Jan 13 20:06:18 2011 GMT -->
>           <ds:X509Certificate>
> MIIFpTCCBI2gAwIBAgICAeAwDQYJKoZIhvcNAQEFBQAwVjELMAkGA1UEBhMCVVMx
> HDAaBgNVBAoTE0luQ29tbW9uIEZlZGVyYXRpb24xKTAnBgNVBAMTIEluQ29tbW9u
> IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA5MDExMjIwMDYxOFoXDTExMDEx
> MzIwMDYxOFowJTEjMCEGA1UEAxMaY29tYW5hZ2VkZW1vLmludGVybmV0Mi5lZHUw
> ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0kk2kcLU3K6D9zgUq74z
> x0xJ71ndDqDMQAjeq3Kdj3iBlijDtKId2fAJaOj1EV50K/O8SurGvLhi7sr2Hz80
> F1tRjo0d+HchP048T+aX24qxpe1IuQOT8NQF7nVJU7FErOPCZ4FDr0JpRKXcUPY0
> 2qw/ZUDZec//wHKPAlKD247G9WYtThX7o02pp+L9tmZtN2zyIs2WoguHsObrBpLA
> ILMe5xDbsRZZeUn2PeUtXh9dbfVpD6+J+i13m+/eub4H/+zjWGUJy6tSMs5RTXRe
> 9CqijKKaoXzyQmYcDLZTnHOihqVngZy3zzOOh29eBwfP6Yav0KTbaP8H99i+w1Nn
> AgMBAAGjggKsMIICqDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNV
> HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFANDEuiuJ9y0FcVW
> j9JWF1tE99tXMH4GA1UdIwR3MHWAFJMtyGEYrWPjm2Wznd2Nk7rnymNFoVqkWDBW
> MQswCQYDVQQGEwJVUzEcMBoGA1UEChMTSW5Db21tb24gRmVkZXJhdGlvbjEpMCcG
> A1UEAxMgSW5Db21tb24gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHmCAQAwgbIGCCsG
> AQUFBwEBBIGlMIGiME8GCCsGAQUFBzAChkNodHRwOi8vaW5jb21tb25jYTEuaW5j
> b21tb25mZWRlcmF0aW9uLm9yZy9icmlkZ2UvY2VydHMvY2EtY2VydHMucDdiME8G
> CCsGAQUFBzAChkNodHRwOi8vaW5jb21tb25jYTIuaW5jb21tb25mZWRlcmF0aW9u
> Lm9yZy9icmlkZ2UvY2VydHMvY2EtY2VydHMucDdiMIGNBgNVHR8EgYUwgYIwP6A9
> oDuGOWh0dHA6Ly9pbmNvbW1vbmNybDEuaW5jb21tb25mZWRlcmF0aW9uLm9yZy9j
> cmwvZWVjcmxzLmNybDA/oD2gO4Y5aHR0cDovL2luY29tbW9uY3JsMi5pbmNvbW1v
> bmZlZGVyYXRpb24ub3JnL2NybC9lZWNybHMuY3JsMF4GA1UdIARXMFUwUwYLKwYB
> BAGuIwEEAQEwRDBCBggrBgEFBQcCARY2aHR0cDovL2luY29tbW9uY2EuaW5jb21t
> b25mZWRlcmF0aW9uLm9yZy9wcmFjdGljZXMucGRmMCUGA1UdEQQeMByCGmNvbWFu
> YWdlZGVtby5pbnRlcm5ldDIuZWR1MA0GCSqGSIb3DQEBBQUAA4IBAQAEvgF0AzPn
> WtxSYhQ2VePUMrpSLytz6a86Zg2byCZXQSMltAN8XZpesNJ2ygTOzLIMCJIPbIQD
> xayVzHh7Dsnu1mCFgPgRqI3PjzADgyUFC2l6DMbQ0GdsfKuJh4gt1ai3nzIWFAZK
> zai9qdA+9UHPxIghV36ubpN5gK7d2gMu5F23Vxnv/oxEO0WA0B5nMFDuUihqXiBi
> /05xWbtlUdzP/RaGpCDyYF5OkjCZiqO1jxu5eezRaRMDgwGvgdhQacjFC1ZTw15W
> jjiY4wgBn+ADerH0Le8S5TXyk2ELh06rxaOxVp1lXYo98fH2nro9+zJrOZyvA/Tz
> aW6JMR3rTwF1
>           </ds:X509Certificate>
>         </ds:X509Data>
>       </ds:KeyInfo>
>     </md:KeyDescriptor>
>     <md:AssertionConsumerService 
> xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" index="1" 
> Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" 
> Location="https://comanagedemo.internet2.edu/Shibboleth.sso/SAML/POST"/>
>   </SPSSODescriptor>
>   <Organization>
>     <OrganizationName xml:lang="en">Internet2</OrganizationName>
>     <OrganizationDisplayName 
> xml:lang="en">Internet2</OrganizationDisplayName>
>     <OrganizationURL 
> xml:lang="en">http://www.internet2.edu</OrganizationURL>
>   </Organization>
>   <ContactPerson contactType="technical">
>     <GivenName>Technical Support</GivenName>
>     
> <EmailAddress></EmailAddress>
>   </ContactPerson>
> </EntityDescriptor>
>
>
> FYI, InCommon Certificate Authority:
>
> The Metadata signing certificate:
> "https://wayf.incommonfederation.org/bridge/certs/incommon.pem";
>
> The InCommon Root certificate:
> "https://wayf.incommonfederation.org/bridge/certs/ca.pem";
>
> The InCommon CRL is posted in two locations:
> "http://incommoncrl1.incommonfederation.org/crl/eecrls.crl";
> "http://incommoncrl2.incommonfederation.org/crl/eecrls.crl";
>
>
> If you have any questions, please send an email to 
> .
>
> Sincerely,
>
>  -  Registration Authority System
>
>
>
>