1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
<EntityDescriptor entityID="https://apps.cirrusidentity.com/shibboleth" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://apps.cirrusidentity.com/Shibboleth.sso/Login" index="1"/>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">Cirrus Identity Gateway Admin</mdui:DisplayName>
        <mdui:Description xml:lang="en">Application host for Cirrus Identity apps.</mdui:Description>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
<!-- Serial No. 10738874070037570831, expires on Thu Jan 11 02:54:58 2024 GMT -->
          <ds:X509Certificate>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          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://apps.cirrusidentity.com/Shibboleth.sso/SLO/SOAP"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://apps.cirrusidentity.com/Shibboleth.sso/SLO/POST"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://apps.cirrusidentity.com/Shibboleth.sso/SLO/Redirect"/>
    <md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://apps.cirrusidentity.com/Shibboleth.sso/SAML2/POST" index="1"/>
    <md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://apps.cirrusidentity.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    <md:AssertionConsumerService xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://apps.cirrusidentity.com/Shibboleth.sso/SAML2/Artifact" index="3"/>
    <AttributeConsumingService index="1" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
      <ServiceName xml:lang="en">Cirrus Identity Gateway Admin</ServiceName>
      <ServiceDescription xml:lang="en">Application host for Cirrus Identity apps.</ServiceDescription>
      <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
      <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <RequestedAttribute FriendlyName="givenName" Name="urn:mace:dir:attribute-def:givenName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
      <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <RequestedAttribute FriendlyName="mail" Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
      <RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <RequestedAttribute FriendlyName="sn" Name="urn:mace:dir:attribute-def:sn" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
      <RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    </AttributeConsumingService>
  </SPSSODescriptor>
  <Organization>
    <OrganizationName xml:lang="en">Cirrus Identity, Inc.</OrganizationName>
    <OrganizationDisplayName xml:lang="en">Cirrus Identity, Inc.</OrganizationDisplayName>
    <OrganizationURL xml:lang="en">http://cirrusidentity.com/</OrganizationURL>
  </Organization>
  <ContactPerson contactType="support">
    <GivenName>Cirrus Identity Support</GivenName>
    <EmailAddress>support@cirrusidentity.com</EmailAddress>
  </ContactPerson>
  <ContactPerson contactType="administrative">
    <GivenName>Lucas Rockwell</GivenName>
    <EmailAddress>lucas@cirrusidentity.com</EmailAddress>
  </ContactPerson>
</EntityDescriptor>