1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
<md:EntityDescriptor 	xmlns:md='urn:oasis:names:tc:SAML:2.0:metadata'
					xmlns:saml='urn:oasis:names:tc:SAML:2.0:assertion'
					xmlns:xenc='http://www.w3.org/2001/04/xmlenc#'
					xmlns:ds='http://www.w3.org/2000/09/xmldsig#'
					entityID='https://testsp.safire.ac.za/Shibboleth.sso/Metadata'>
	<md:SPSSODescriptor protocolSupportEnumeration='urn:oasis:names:tc:SAML:2.0:protocol' AuthnRequestsSigned='true'>
		<md:Extensions>
			<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">        <mdui:DisplayName xml:lang="en">SAFIRE Test Service Provider</mdui:DisplayName>        <mdui:DisplayName xml:lang="af">SAFIRE Toets Diens-Verskaffer</mdui:DisplayName>        <mdui:Description xml:lang="en">The Test Service Provider allows you to log into your home organisation, and to see what personal information they provide about you.</mdui:Description>        <mdui:Description xml:lang="af">Die Toets Diens-Verskaffer laat u toe om by u tuis organisasie in te teken én om u private informasie te kontroleer wat hulle oor u verskaf.</mdui:Description>        <mdui:PrivacyStatementURL xml:lang="en">https://safire.ac.za/safire/policy/privacy/</mdui:PrivacyStatementURL>        <mdui:InformationURL xml:lang="en">https://testsp.safire.ac.za/</mdui:InformationURL>        <mdui:Logo width="16" height="16">https://static.safire.ac.za/logos/safire-logo-16x16.png</mdui:Logo>        <mdui:Logo width="300" height="300">https://static.safire.ac.za/logos/safire-testsp-300x300.png</mdui:Logo>      </mdui:UIInfo>
		</md:Extensions>
		<md:KeyDescriptor use='encryption'>
			<ds:KeyInfo>
				<ds:X509Data xmlns:ds="http://www.w3.org/2000/09/xmldsig#">          <ds:X509Certificate>MIIDfTCCAmWgAwIBAgIJAPuDbETKj7kHMA0GCSqGSIb3DQEBCwUAMFUxCzAJBgNVBAYTAlpBMSowKAYDVQQKDCFTb3V0aCBBZnJpY2FuIElkZW50aXR5IEZlZGVyYXRpb24xGjAYBgNVBAMMEVNBRklSRSBXZWIgU2VydmVyMB4XDTE3MDEzMDExMjUxNloXDTMyMDEzMTExMjUxNlowVTELMAkGA1UEBhMCWkExKjAoBgNVBAoMIVNvdXRoIEFmcmljYW4gSWRlbnRpdHkgRmVkZXJhdGlvbjEaMBgGA1UEAwwRU0FGSVJFIFdlYiBTZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfy50CBX3ukse45DfTKc5J+da5Q+5rzp0+mP0HymVDOsst+Wl0lBcVmZrGWMO3akNDOHxgINBF0kfvgXAqhvyjJMODDplnRrWa1neeldB/PLVkbQyyHrhWE2x7hCkNs7ROnMtlxb70E8g6ovMeuyP8lyoU125mxOV4HdTeGorz38a18FoH4SqdQEFpTjdIa7JdL8m8sbpvUpRWgMCG14TDAiWLcwkW8CjP11aQFXguVpL4UYGDCdt6/9KJkTD5NbkcjU024HSa7WZloonDb16cOyjgvi+oKJWURRMFUlYJ4BjSEqMl2CXy0V5L+yDChzPyl/qwBAa5jDIfHlfdiXRAgMBAAGjUDBOMB0GA1UdDgQWBBTvfZhjua3QdjJ3uE3esyijpWa2iTAfBgNVHSMEGDAWgBTvfZhjua3QdjJ3uE3esyijpWa2iTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBBWU7hRzjcfUSICukHiaBGyZgAsAvUhoFxrhjoHUp5zAeD41KFVaxX5cbSMEI/QJvM5VQxGbUfaN8oWI5ta0SJIoXSAnKjD4t5YBsNgAcItMBLPJhvw6u6RnBpLWG0rCiNzc3+owKBJr9wM5Yvd87T7dkOkFmtALb+LtJsUklYJY8x9qelFEGNuQNVBExmsw36wA2oqxEDtWToc1K9AbQfry2/H5pOZ/IzHLty5IozkwzHNt0CYZr7R3/5eJEyY/C+xp5KgKMtY8XP8xx9e7umhvDc5HQONl1mLCYDUBCC6ArLP919+WOkY1torkoRx89qlHweTSD46Gktkab08R47</ds:X509Certificate>        </ds:X509Data>
			</ds:KeyInfo>
		</md:KeyDescriptor>
		<md:ArtifactResolutionService Binding='urn:oasis:names:tc:SAML:2.0:bindings:SOAP' Location='https://testsp.safire.ac.za/Shibboleth.sso/Artifact/SOAP' index='1' isDefault='true'>
			
		</md:ArtifactResolutionService>
		<md:SingleLogoutService Binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect' Location='https://testsp.safire.ac.za/Shibboleth.sso/SLO/Redirect'>
			
		</md:SingleLogoutService>
		<md:SingleLogoutService Binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' Location='https://testsp.safire.ac.za/Shibboleth.sso/SLO/POST'>
			
		</md:SingleLogoutService>
		<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
		<md:AssertionConsumerService Binding='urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' Location='https://testsp.safire.ac.za/Shibboleth.sso/SAML2/POST' index='1' isDefault='true'>
			
		</md:AssertionConsumerService>
		<md:AttributeConsumingService index='0' isDefault='true'>
			<md:ServiceName xml:lang='en'>SAFIRE Test Service Provider</md:ServiceName>
			<md:ServiceName xml:lang='af'>SAFIRE Toets Diens-Verskaffer</md:ServiceName>
			<md:ServiceDescription xml:lang='en'>The Test Service Provider allows you to log into your home organisation, and to see what personal information they provide about you.</md:ServiceDescription>
			<md:ServiceDescription xml:lang='af'>Die Toets Diens-Verskaffer laat u toe om by u tuis organisasie in te teken én om u private informasie te kontroleer wat hulle oor u verskaf.</md:ServiceDescription>
			<md:RequestedAttribute Name='urn:oid:2.16.840.1.113730.3.1.241' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='displayName' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.1' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonAffiliation' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.7' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonEntitlement' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.16' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonOrcid' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.5' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonPrimaryAffiliation' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.6' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonPrincipalName' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.9' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonScopedAffiliation' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.5923.1.1.1.10' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='eduPersonTargetedID' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:2.16.840.1.113730.3.1.3' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='employeeNumber' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:2.5.4.42' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='givenName' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:0.9.2342.19200300.100.1.3' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='mail' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:2.5.4.10' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='o' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:2.16.840.1.113730.3.1.39' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='preferredLanguage' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.25178.1.2.9' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='schacHomeOrganization' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:1.3.6.1.4.1.25178.1.2.10' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='schacHomeOrganizationType' isRequired='true'>
			</md:RequestedAttribute>
			<md:RequestedAttribute Name='urn:oid:2.5.4.4' NameFormat='urn:oasis:names:tc:SAML:2.0:attrname-format:uri' FriendlyName='sn' isRequired='true'>
			</md:RequestedAttribute>
		</md:AttributeConsumingService>
	</md:SPSSODescriptor>
	<md:Organization>
		<md:OrganizationName xml:lang='en'>Tertiary Education and Research Network of South Africa NPC</md:OrganizationName>
		<md:OrganizationDisplayName xml:lang='en'>TENET</md:OrganizationDisplayName>
		<md:OrganizationURL xml:lang='en'>http://www.tenet.ac.za/</md:OrganizationURL>
	</md:Organization>
	<md:ContactPerson contactType='technical'>
		<md:GivenName>TENET SAFIRE Project Office</md:GivenName>
		<md:EmailAddress>mailto:safire@tenet.ac.za</md:EmailAddress>
	</md:ContactPerson>
	<md:ContactPerson contactType='support'>
		<md:GivenName>TENET Service Operations Centre</md:GivenName>
		<md:EmailAddress>mailto:soc@tenet.ac.za</md:EmailAddress>
		<md:TelephoneNumber>+27.21.763.7147</md:TelephoneNumber>
	</md:ContactPerson>
	<md:ContactPerson contactType='other'>
		<md:GivenName>TENET SAFIRE Project Office</md:GivenName>
		<md:EmailAddress>mailto:safire@tenet.ac.za</md:EmailAddress>
		<md:TelephoneNumber>+27.21.763.7156</md:TelephoneNumber>
	</md:ContactPerson>
</md:EntityDescriptor>