Projet

Général

Profil

0001-WIP-support-federation-file-loading-19396.patch

Paul Marillonnet, 23 novembre 2017 15:23

Télécharger (113 ko)

Voir les différences:

Subject: [PATCH] WIP support federation file loading (#19396)

 mellon/adapters.py              |    4 +
 mellon/app_settings.py          |   20 +-
 mellon/federation_utils.py      |   78 ++
 mellon/utils.py                 |   42 ++
 setup.py                        |    1 +
 tests/dummy_cert.pem            |   18 +
 tests/dummy_md.xml              | 1495 +++++++++++++++++++++++++++++++++++++++
 tests/federation-sample.xml     |  451 ++++++++++++
 tests/test_federations_utils.py |   39 +
 tests/test_utils.py             |   17 +-
 tests/utils.py                  |    5 +
 11 files changed, 2167 insertions(+), 3 deletions(-)
 create mode 100644 mellon/federation_utils.py
 create mode 100644 tests/dummy_cert.pem
 create mode 100644 tests/dummy_md.xml
 create mode 100644 tests/federation-sample.xml
 create mode 100644 tests/test_federations_utils.py
mellon/adapters.py
30 30
    def get_identity_providers_setting(self):
31 31
        return app_settings.IDENTITY_PROVIDERS
32 32

  
33
    def get_federations(self):
34
        for federation in getattr(app_settings, 'FEDERATIONS', []):
35
            yield federation
36

  
33 37
    def get_idps(self):
34 38
        for i, idp in enumerate(self.get_identity_providers_setting()):
35 39
            if 'METADATA_URL' in idp and 'METADATA' not in idp:
mellon/app_settings.py
36 36
        'LOGIN_URL': 'mellon_login',
37 37
        'LOGOUT_URL': 'mellon_logout',
38 38
        'ARTIFACT_RESOLVE_TIMEOUT': 10.0,
39
        'FEDERATIONS': [],
39 40
    }
40 41

  
41 42
    @property
43
    def FEDERATIONS(self):
44
        from django.conf import settings
45
        if settings.hasattr('MELLON_FEDERATIONS'):
46
            federations = settings.MELLON_FEDERATIONS
47
        if isinstance(federations, dict):
48
            federations = [federations]
49
        return federations
50

  
51
    @property
42 52
    def IDENTITY_PROVIDERS(self):
43 53
        from django.conf import settings
54
        idps = []
44 55
        try:
45
            idps = settings.MELLON_IDENTITY_PROVIDERS
56
            if hasattr(settings, 'MELLON_IDENTITY_PROVIDERS'):
57
                idps = settings.MELLON_IDENTITY_PROVIDERS
58
            elif not hasattr(settings, 'MELLON_FEDERATIONS'):
59
                raise AttributeError
46 60
        except AttributeError:
47 61
            from django.core.exceptions import ImproperlyConfigured
48
            raise ImproperlyConfigured('The MELLON_IDENTITY_PROVIDERS setting is mandatory')
62
            raise ImproperlyConfigured('Either the MELLON_IDENTITY_PROVIDERS '
63
                                       'or the MELLON_FEDERATIONS settings '
64
                                       'are mandatory')
49 65
        if isinstance(idps, dict):
50 66
            idps = [idps]
51 67
        return idps
mellon/federation_utils.py
1
import fcntl
2
import logging
3
import tempfile
4
import threading
5
from datetime import timedelta
6

  
7
from django.utils.text import slugify
8
from datetime import datetime
9

  
10
import requests
11
from pytz import utc
12
from time import mktime, sleep
13
import os
14
import hashlib
15
import os.path
16

  
17
from django.core.files.storage import default_storage
18

  
19

  
20
def truncate_unique(s, length=250):
21
    if len(s) < length:
22
        return s
23
    md5 = hashlib.md5(s.encode('ascii')).hexdigest()
24
    # we should be the first and last characters from the URL
25
    l = (length - len(md5)) / 2 - 2  # four additional characters
26
    assert l > 20
27
    return s[:l] + '...' + s[-l:] + '_' + md5
28

  
29

  
30
def load_federation_cache(url):
31
    logger = logging.getLogger(__name__)
32
    try:
33
        filename = truncate_unique(slugify(url), 250)
34
        path = os.path.join('metadata-cache', filename)
35

  
36
        unix_path = default_storage.path(path)
37
        if not os.path.exists('metadata-cache'):
38
            os.makedirs('metadata-cache')
39
        f = open(unix_path, 'w')
40
        try:
41
            fcntl.lockf(f, fcntl.LOCK_EX | fcntl.LOCK_NB)
42
        except IOError:
43
            return
44
        else:
45
            with tempfile.NamedTemporaryFile(dir=os.path.dirname(unix_path), delete=False) as temp:
46
                try:
47
                    # increase modified time by one hour to prevent too many updates
48
                    st = os.stat(unix_path)
49
                    os.utime(unix_path, (st.st_atime, st.st_mtime + 3600))
50
                    response = requests.get(url)
51
                    response.raise_for_status()
52
                    temp.write(response.content)
53
                    temp.flush()
54
                    os.rename(temp.name, unix_path)
55
                except:
56
                    os.unlink(temp.name)
57
                finally:
58
                    fcntl.lockf(f, fcntl.LOCK_UN)
59
        finally:
60
            f.close()
61
    except OSError:
62
        logger.exception(u"could create the intermediary 'metadata-cache' "
63
                         "folder")
64
        return
65
    except:
66
        logger.exception(u'failed to load federation from %s', url)
67

  
68

  
69
def get_federation_from_url(url, update_cache=False):
70
    logger = logging.getLogger(__name__)
71
    filename = truncate_unique(slugify(url), 250)
72
    path = os.path.join('metadata-cache', filename)
73
    if not default_storage.exists(path) or update_cache or \
74
            default_storage.created_time(path) < datetime.now() - timedelta(days=1):
75
        load_federation_cache(url)
76
    return path
77
    logger.warning('federation %s has not been loaded', url)
78
    return None
mellon/utils.py
5 5
import isodate
6 6

  
7 7
from django.contrib import auth
8
from django.core.exceptions import ValidationError
8 9
from django.core.urlresolvers import reverse
10
from django.core.validators import URLValidator
9 11
from django.template.loader import render_to_string
12
from django.utils.text import slugify
10 13
from django.utils.timezone import make_aware, now, make_naive, is_aware, get_default_timezone
11 14
from django.conf import settings
12 15
from django.utils.six.moves.urllib.parse import urlparse
13 16
import lasso
14 17

  
15 18
from . import app_settings
19
from federation_utils import get_federation_from_url
16 20

  
17 21

  
18 22
def create_metadata(request):
......
83 87
                logger.error(u'bad metadata in idp %r', idp['ENTITY_ID'])
84 88
                logger.debug(u'lasso error: %s', e)
85 89
                continue
90
        for federation in get_federations():
91
            fedmd = None
92
            pemcert = None
93
            if (isinstance(federation, tuple) and len(federation) == 2):
94
                logger.info('Loading local cert-based federation %r',
95
                        federation) # XXX
96
                if federation[1].endswith('.pem'):
97
                    fedmd = federation[0]
98
                    pemcert = federation[1]
99
            else:
100
                urlval = URLValidator()
101
                try:
102
                    urlval(federation)
103
                except ValidationError as e:
104
                    logger.info('Loading file-based federation %s',
105
                            federation)
106
                    fedmd = federation
107
                else:
108
                    logger.info('Fetching and loading url-based federation %s',
109
                            federation)
110
                    fedmd = get_federation_from_url(federation)
111

  
112
            try:
113
                server.loadMetadata(lasso.PROVIDER_ROLE_IDP,
114
                                    fedmd, pemcert, None,
115
                                    lasso.SERVER_LOAD_METADATA_FLAG_DEFAULT)
116

  
117
            except lasso.Error, e:
118
                logger.error(u'bad metadata for federation %r', federation)
119
                logger.debug(u'lasso error: %s', e)
120
                continue
86 121
        cache[root] = server
87 122
        settings._MELLON_SERVER_CACHE = cache
88 123
    return settings._MELLON_SERVER_CACHE.get(root)
......
112 147
                yield idp
113 148

  
114 149

  
150
def get_federations():
151
    for adapter in get_adapters():
152
        if hasattr(adapter, 'get_federations'):
153
            for federations in adapter.get_federations():
154
                yield federations
155

  
156

  
115 157
def flatten_datetime(d):
116 158
    d = d.copy()
117 159
    for key, value in d.iteritems():
setup.py
94 94
          'django>=1.5',
95 95
          'requests',
96 96
          'isodate',
97
          'pytz',
97 98
      ],
98 99
      setup_requires=[
99 100
          'django',
tests/dummy_cert.pem
1
-----BEGIN CERTIFICATE-----
2
MIIC9zCCAd+gAwIBAgIEfe6j3jANBgkqhkiG9w0BAQsFADAsMSowKAYDVQQDEyFT
3
QU1MIE1ldGFkYXRhIFNpZ25pbmcgQ2VydGlmaWNhdGUwHhcNMTYwNzI5MDczNjM4
4
WhcNMjYwNjA3MDczNjM4WjAsMSowKAYDVQQDEyFTQU1MIE1ldGFkYXRhIFNpZ25p
5
bmcgQ2VydGlmaWNhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv
6
X69N/roE+BhQXuybhP75br2oxXIZCf3A2qkEtzqynnd6r8lFM5QPbph6GOyV3mo3
7
nYG/avlAbujhVTXbdqRdRjO6m+rV/62YX03Bhrsw8Q8XMLMkeE1eNk1HFyxbVYtb
8
fh+FAKbShqTehI+g2jmp4aKM2xNKSBK3WY8fQ/x33lp/ZUmdPrNutyXG8fh6aqlP
9
2gYuxaopYuUhtnu7U9SO41XAse6P3T39qmYLXdEEilXnZ97Lip7LfhudEd0JOSdl
10
439MktMn2ExbPP1Nt2N8gVqIXsx5j45hFfNQl5C4ccy7/Yh6aShHbqZiLqKu+bHw
11
B09w8LBxErDYJrjEuFs3AgMBAAGjITAfMB0GA1UdDgQWBBTT88iZzWO+hN9SBUkp
12
x871lmTuLTANBgkqhkiG9w0BAQsFAAOCAQEABoPpODryXwiM5jjtqk6veR02FevC
13
KHpZP6Od7Kqcfs6lg5LcQmGUOgpmW3Gg4UMjBYkgARsT2Nsnah1CJqa8cjvv8p5K
14
EIhY0hVS8iMJnrb3PDeiFSeP4xSfct/6z/ebV4+QFl22bsm2zpAC6BpFz8+IJ/jA
15
mQzTVob4MAUeQPnwwzm3xz6yanLZx7BK5cfrTCa+hrarNQCboRjXPwiejF8WRCxp
16
gRHH6yNs5QH/Z6o5e3tUP7uEpn2Ob+kcLsEMGb9DghkoDAgkHCOZeTy+7hgxt+/T
17
94cLTa58gVtvEOnd0GuL7Vfd+IVdXgSard8RfR3OyZlf6M4aSGQA73sskQ==
18
-----END CERTIFICATE-----
tests/dummy_md.xml
1
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
2
<md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:pyff="http://pyff.io/NS" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="_20171123T063102Z" Name="https://federation.renater.fr/" cacheDuration="PT1H" validUntil="2017-12-02T06:31:02Z"><ds:Signature>
3
<ds:SignedInfo>
4
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
5
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
6
<ds:Reference URI="">
7
<ds:Transforms>
8
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
9
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
10
</ds:Transforms>
11
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
12
<ds:DigestValue>EKbo8BOMe1/mKXG67EMK+V8nH+yfj45kX9fGv3Tan8k=</ds:DigestValue>
13
</ds:Reference>
14
</ds:SignedInfo>
15
<ds:SignatureValue>
16
6JbI1ftDbm49XR927FxEUrh86RPr+hTWISkdUqkU1d9NGZf/7fI6Wo/M/Gmow0RbIWeVCEsmXK8X
17
NpnjO2XfdzEVTdeivW1dcUyL35gE2IxA2Jc20Z1BnIsRMSuNXHZBxN/BNNdHGyVh2CbESe9Lakle
18
ZQAXZ8LNEFEG4bO+TVL0AeCiti/3sl/w7RJDoxqpCYXe2fJXEI3JGzIXBCQSV5zjTv0Ks/+Ri/ny
19
slqQdBiRvMo8j8t4XvwPjEAydeH3J62Z7kHP0qYcdGF5eYWnYz2qObgNL1ytcoiuNvCk8efeofgk
20
fRy0AzE4tIgvaW+OGtIZ2vc+x0rtLYX9kK2Tdw==
21
</ds:SignatureValue>
22
<ds:KeyInfo>
23
<ds:KeyValue>
24
<ds:RSAKeyValue>
25
<ds:Modulus>
26
71+vTf66BPgYUF7sm4T++W69qMVyGQn9wNqpBLc6sp53eq/JRTOUD26Yehjsld5qN52Bv2r5QG7o
27
4VU123akXUYzupvq1f+tmF9NwYa7MPEPFzCzJHhNXjZNRxcsW1WLW34fhQCm0oak3oSPoNo5qeGi
28
jNsTSkgSt1mPH0P8d95af2VJnT6zbrclxvH4emqpT9oGLsWqKWLlIbZ7u1PUjuNVwLHuj909/apm
29
C13RBIpV52fey4qey34bnRHdCTknZeN/TJLTJ9hMWzz9TbdjfIFaiF7MeY+OYRXzUJeQuHHMu/2I
30
emkoR26mYi6irvmx8AdPcPCwcRKw2Ca4xLhbNw==
31
</ds:Modulus>
32
<ds:Exponent>AQAB</ds:Exponent>
33
</ds:RSAKeyValue>
34
</ds:KeyValue>
35
<ds:X509Data>
36
<ds:X509Certificate>
37
MIIC9zCCAd+gAwIBAgIEfe6j3jANBgkqhkiG9w0BAQsFADAsMSowKAYDVQQDEyFTQU1MIE1ldGFk
38
YXRhIFNpZ25pbmcgQ2VydGlmaWNhdGUwHhcNMTYwNzI5MDczNjM4WhcNMjYwNjA3MDczNjM4WjAs
39
MSowKAYDVQQDEyFTQU1MIE1ldGFkYXRhIFNpZ25pbmcgQ2VydGlmaWNhdGUwggEiMA0GCSqGSIb3
40
DQEBAQUAA4IBDwAwggEKAoIBAQDvX69N/roE+BhQXuybhP75br2oxXIZCf3A2qkEtzqynnd6r8lF
41
M5QPbph6GOyV3mo3nYG/avlAbujhVTXbdqRdRjO6m+rV/62YX03Bhrsw8Q8XMLMkeE1eNk1HFyxb
42
VYtbfh+FAKbShqTehI+g2jmp4aKM2xNKSBK3WY8fQ/x33lp/ZUmdPrNutyXG8fh6aqlP2gYuxaop
43
YuUhtnu7U9SO41XAse6P3T39qmYLXdEEilXnZ97Lip7LfhudEd0JOSdl439MktMn2ExbPP1Nt2N8
44
gVqIXsx5j45hFfNQl5C4ccy7/Yh6aShHbqZiLqKu+bHwB09w8LBxErDYJrjEuFs3AgMBAAGjITAf
45
MB0GA1UdDgQWBBTT88iZzWO+hN9SBUkpx871lmTuLTANBgkqhkiG9w0BAQsFAAOCAQEABoPpODry
46
XwiM5jjtqk6veR02FevCKHpZP6Od7Kqcfs6lg5LcQmGUOgpmW3Gg4UMjBYkgARsT2Nsnah1CJqa8
47
cjvv8p5KEIhY0hVS8iMJnrb3PDeiFSeP4xSfct/6z/ebV4+QFl22bsm2zpAC6BpFz8+IJ/jAmQzT
48
Vob4MAUeQPnwwzm3xz6yanLZx7BK5cfrTCa+hrarNQCboRjXPwiejF8WRCxpgRHH6yNs5QH/Z6o5
49
e3tUP7uEpn2Ob+kcLsEMGb9DghkoDAgkHCOZeTy+7hgxt+/T94cLTa58gVtvEOnd0GuL7Vfd+IVd
50
XgSard8RfR3OyZlf6M4aSGQA73sskQ==
51
</ds:X509Certificate>
52
</ds:X509Data>
53
</ds:KeyInfo>
54
</ds:Signature><md:EntityDescriptor entityID="http://campus-prof.ueb.eu/auth/shibboleth">
55
			<md:Extensions>
56
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2009-08-03T14:41:30Z">
57
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
58
				</mdrpi:RegistrationInfo>
59
								
60
				<mdattr:EntityAttributes>
61
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
62
				 
63
				   <saml:AttributeValue>https://federation.renater.fr/category/elearning</saml:AttributeValue>
64
				 
65
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
66
				 
67
				 </saml:Attribute>
68
				</mdattr:EntityAttributes>
69
				
70
			</md:Extensions>
71
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
72
               <md:Extensions>
73
			    <mdui:UIInfo>  
74
          		      
75
			      <mdui:DisplayName xml:lang="en">Université de Rennes 1 - Moodle CNB pour les enseignants</mdui:DisplayName>
76
			      
77
			      			      
78
			      <mdui:InformationURL xml:lang="fr">https://campus-prof.ueb.eu</mdui:InformationURL>
79
          		      <mdui:Description xml:lang="en">Moodle CNB pour les enseignants</mdui:Description>
80
          		      <mdui:DisplayName xml:lang="fr">Université de Rennes 1 - Moodle CNB pour les enseignants</mdui:DisplayName>
81
          		      <mdui:Description xml:lang="fr">Moodle CNB pour les enseignants</mdui:Description>
82
          		            			    </mdui:UIInfo>
83
    			  </md:Extensions>
84
				<md:KeyDescriptor use="signing">
85
                                   <ds:KeyInfo>
86
					  
87
					  <ds:X509Data>
88
					    <ds:X509Certificate>
89
					      MIID0DCCArigAwIBAgIJAL6E0aP43G9BMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNV
90
BAYTAkZSMSIwIAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMRswGQYD
91
VQQDExJjYW1wdXMtcHJvZi51ZWIuZXUwHhcNMTQxMDI4MTExNzQyWhcNMzQxMDIz
92
MTExNzQyWjBOMQswCQYDVQQGEwJGUjEiMCAGA1UECgwZVW5pdmVyc2l0w4PCqSBk
93
ZSBSZW5uZXMgMTEbMBkGA1UEAxMSY2FtcHVzLXByb2YudWViLmV1MIIBIjANBgkq
94
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP1afKPuBkz3GfQsUN7x+lY3x/Tk4/TB
95
0Dd0nwQYkl96rU+rW2jgULgQbhCfTpc50HWw+WCD+CXXlvkN+58tYBc1S37vxq0B
96
pX6NWPgJi7H+hJpcbTpkow6xfPh63QLF1kcIZfhJTqzgwLeWY2gXrKz5d1vPte5p
97
4iMmgPNcA+ysc+nvkVF7oqrIUSqR38J/JgMGUQJ4an9DxethnBmKq+EGNvLDI+N7
98
kfj+dI7dWyuHetKbRP8LIKPQsu6AJ9VBlkiZdlHlXUiE9mHgw32RMAP7afUdojbl
99
IUZtFwrXwc8WBwHdtQjZ9fa8is5d5dPy5V16TCVYTbtOrCL3LZNt0QIDAQABo4Gw
100
MIGtMB0GA1UdDgQWBBSwWo+dMtQN2v2TsFqrse+F02qjYDB+BgNVHSMEdzB1gBSw
101
Wo+dMtQN2v2TsFqrse+F02qjYKFSpFAwTjELMAkGA1UEBhMCRlIxIjAgBgNVBAoM
102
GVVuaXZlcnNpdMODwqkgZGUgUmVubmVzIDExGzAZBgNVBAMTEmNhbXB1cy1wcm9m
103
LnVlYi5ldYIJAL6E0aP43G9BMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
104
ggEBAGvcUF+0N4fBV1lpmQxqDmi/Hb0zfrpfAV/2RbBuL6Uf/TISy2bNU45kwyGB
105
TW7cRf9cp8XsiPYkNtOFLfIK2PFGQVVSv9G828wOp5VM/ROok9TQg3v3dI3O1dpS
106
XaegT6y018tKGip0WAbFRAv18WDXfYZ6U0sCk3hAIMjCM0juAZMTDjDAkbaHZT14
107
/1Jjd+j4lRBUn0iBGTZtuftOmpXanqzkoj8aGPbBbCPtyl0ZQVY+au0gpNB7uqWP
108
vBO2Q5xZE19Ab3OW6d/1PXjtuoU3UAX3fS0Q0tPftlplA7xgWsBokogpCjNdMZEv
109
ThABfaHfLlPRpaBQxdTJVnIaShE=
110
					    </ds:X509Certificate>
111
					  </ds:X509Data>
112
					  
113
					</ds:KeyInfo>
114
				</md:KeyDescriptor>
115
		               
116
				<md:KeyDescriptor use="encryption">
117
                                   <ds:KeyInfo>
118
					  <ds:X509Data>
119
					    <ds:X509Certificate>
120
					      MIID0DCCArigAwIBAgIJAL6E0aP43G9BMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNV
121
BAYTAkZSMSIwIAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMRswGQYD
122
VQQDExJjYW1wdXMtcHJvZi51ZWIuZXUwHhcNMTQxMDI4MTExNzQyWhcNMzQxMDIz
123
MTExNzQyWjBOMQswCQYDVQQGEwJGUjEiMCAGA1UECgwZVW5pdmVyc2l0w4PCqSBk
124
ZSBSZW5uZXMgMTEbMBkGA1UEAxMSY2FtcHVzLXByb2YudWViLmV1MIIBIjANBgkq
125
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP1afKPuBkz3GfQsUN7x+lY3x/Tk4/TB
126
0Dd0nwQYkl96rU+rW2jgULgQbhCfTpc50HWw+WCD+CXXlvkN+58tYBc1S37vxq0B
127
pX6NWPgJi7H+hJpcbTpkow6xfPh63QLF1kcIZfhJTqzgwLeWY2gXrKz5d1vPte5p
128
4iMmgPNcA+ysc+nvkVF7oqrIUSqR38J/JgMGUQJ4an9DxethnBmKq+EGNvLDI+N7
129
kfj+dI7dWyuHetKbRP8LIKPQsu6AJ9VBlkiZdlHlXUiE9mHgw32RMAP7afUdojbl
130
IUZtFwrXwc8WBwHdtQjZ9fa8is5d5dPy5V16TCVYTbtOrCL3LZNt0QIDAQABo4Gw
131
MIGtMB0GA1UdDgQWBBSwWo+dMtQN2v2TsFqrse+F02qjYDB+BgNVHSMEdzB1gBSw
132
Wo+dMtQN2v2TsFqrse+F02qjYKFSpFAwTjELMAkGA1UEBhMCRlIxIjAgBgNVBAoM
133
GVVuaXZlcnNpdMODwqkgZGUgUmVubmVzIDExGzAZBgNVBAMTEmNhbXB1cy1wcm9m
134
LnVlYi5ldYIJAL6E0aP43G9BMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
135
ggEBAGvcUF+0N4fBV1lpmQxqDmi/Hb0zfrpfAV/2RbBuL6Uf/TISy2bNU45kwyGB
136
TW7cRf9cp8XsiPYkNtOFLfIK2PFGQVVSv9G828wOp5VM/ROok9TQg3v3dI3O1dpS
137
XaegT6y018tKGip0WAbFRAv18WDXfYZ6U0sCk3hAIMjCM0juAZMTDjDAkbaHZT14
138
/1Jjd+j4lRBUn0iBGTZtuftOmpXanqzkoj8aGPbBbCPtyl0ZQVY+au0gpNB7uqWP
139
vBO2Q5xZE19Ab3OW6d/1PXjtuoU3UAX3fS0Q0tPftlplA7xgWsBokogpCjNdMZEv
140
ThABfaHfLlPRpaBQxdTJVnIaShE=
141
					    </ds:X509Certificate>
142
					  </ds:X509Data>
143
					</ds:KeyInfo>
144
				</md:KeyDescriptor>
145
			       
146

  
147
				
148
				
149
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://campus-prof.ueb.eu/auth/shibboleth/Shibboleth.sso/SAML/POST" index="5"/>
150
				
151
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://campus-prof.ueb.eu/auth/shibboleth/Shibboleth.sso/SAML2/POST" index="9"/>
152
				
153
				
154

  
155
		       <md:AttributeConsumingService index="0">
156
			 <md:ServiceName xml:lang="fr">Université de Rennes 1 - Moodle CNB pour les enseignants</md:ServiceName>
157
			 <md:ServiceName xml:lang="en">Université de Rennes 1 - Moodle CNB pour les enseignants</md:ServiceName>
158
			 <md:ServiceDescription xml:lang="fr">Moodle CNB pour les enseignants</md:ServiceDescription>
159
			 <md:ServiceDescription xml:lang="en">Moodle CNB pour les enseignants</md:ServiceDescription>
160
				         
161
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
162
			 </md:RequestedAttribute>
163
				         
164
			 <md:RequestedAttribute FriendlyName="eduPersonPrimaryAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
165
			 </md:RequestedAttribute>
166
				         
167
			 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
168
			 </md:RequestedAttribute>
169
				         
170
			 <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
171
			 </md:RequestedAttribute>
172
				         
173
			 <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
174
			 </md:RequestedAttribute>
175
		
176
		       </md:AttributeConsumingService>
177

  
178
			</md:SPSSODescriptor>
179

  
180

  
181
		<md:Organization>
182
			<md:OrganizationName xml:lang="en">Université européenne de Bretagne</md:OrganizationName>
183
			<md:OrganizationDisplayName xml:lang="en">Université européenne de Bretagne</md:OrganizationDisplayName>
184
			<md:OrganizationURL xml:lang="en">http://www.univ-rennes1.fr</md:OrganizationURL>
185
		</md:Organization>
186
		
187

  
188
			
189
			    <md:ContactPerson contactType="technical">
190
			     <md:EmailAddress>fed-admin@listes.univ-rennes1.fr</md:EmailAddress>
191
		        </md:ContactPerson>
192
		    	
193

  
194
			
195
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://cfaufpi-formation/connexion/module.php/saml/sp/metadata.php/shibboCLE">
196
			<md:Extensions>
197
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2015-04-07T16:23:25Z">
198
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
199
				</mdrpi:RegistrationInfo>
200
								
201
				<mdattr:EntityAttributes>
202
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
203
				 
204
				   <saml:AttributeValue>https://federation.renater.fr/category/preprod</saml:AttributeValue>
205
				 
206
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
207
				 
208
				 </saml:Attribute>
209
				</mdattr:EntityAttributes>
210
				
211
			</md:Extensions>
212
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
213
               <md:Extensions>
214
			    <mdui:UIInfo>  
215
          		      
216
			      <mdui:DisplayName xml:lang="en">Université de Strasbourg - preprod FPI</mdui:DisplayName>
217
			      
218
			      			      
219
			      <mdui:InformationURL xml:lang="fr">http://cfaufpi-formation.u-strasbg.fr/</mdui:InformationURL>
220
          		      <mdui:Description xml:lang="en">plateforme FPI du CFAU</mdui:Description>
221
          		      <mdui:DisplayName xml:lang="fr">Université de Strasbourg - preprod FPI</mdui:DisplayName>
222
          		      <mdui:Description xml:lang="fr">plateforme FPI du CFAU</mdui:Description>
223
          		            			    </mdui:UIInfo>
224
    			  </md:Extensions>
225
				<md:KeyDescriptor use="signing">
226
                                   <ds:KeyInfo>
227
					  
228
					  <ds:X509Data>
229
					    <ds:X509Certificate>
230
					      MIIEijCCA3KgAwIBAgIRAPbx7wUg5RoJsiiMtKj7qeAwDQYJKoZIhvcNAQEFBQAw
231
NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
232
IFNTTCBDQTAeFw0xMzA5MTcwMDAwMDBaFw0xNjA5MTYyMzU5NTlaMEwxITAfBgNV
233
BAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEnMCUGA1UEAxMeY2ZhdWNsZS1m
234
b3JtYXRpb24udS1zdHJhc2JnLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
235
CgKCAQEAoiwlSkn9Tj6gKQPlKIbHvgLAfkOrwxg2YTwCHGOuNdJIKufFt5cyP+UN
236
oxFrLKawZA6F8gWzLRUSPv5klbMNweesmwDfd0Css4JKqtRd3prEnr77ILc9/+bH
237
t4QU+cHpX6BvHL9oxh89yXn8b+dHZw7tCZy3PEUtmn4x4s1jdOKUz15jA+RAmJB3
238
b5TVVSTtLIhm1pqVrVOU3lZYecwpvXD1VmGDpA6iIuyNueLbX5qGwuQYq26Mf+Kl
239
FRINZyVYNK4BkfVV4GQIaJRBTe07n6yE+zkR3SbibioxWAnBRteJBkN++iRo3Wo4
240
xdnpuY0ERkurMBfRyjV2jO1sNT159QIDAQABo4IBezCCAXcwHwYDVR0jBBgwFoAU
241
DL2TaAzz3qujSWsrN1dH6pDjue0wHQYDVR0OBBYEFCsV3SlRe7EpJjgz7LY+iyq5
242
LN3PMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG
243
AQUFBwMBBggrBgEFBQcDAjAiBgNVHSAEGzAZMA0GCysGAQQBsjEBAgIdMAgGBmeB
244
DAECATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnRjcy50ZXJlbmEub3Jn
245
L1RFUkVOQVNTTENBLmNybDBtBggrBgEFBQcBAQRhMF8wNQYIKwYBBQUHMAKGKWh0
246
dHA6Ly9jcnQudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3J0MCYGCCsGAQUF
247
BzABhhpodHRwOi8vb2NzcC50Y3MudGVyZW5hLm9yZzApBgNVHREEIjAggh5jZmF1
248
Y2xlLWZvcm1hdGlvbi51LXN0cmFzYmcuZnIwDQYJKoZIhvcNAQEFBQADggEBAG+I
249
rGuk2/L4kM391Q9Rp0A1MuAWcxlaEHnXkOV2DCyCw4A7jdQGGeKKKUbd+cQaMHPh
250
LMuCT8Bj66aBFe9RdlgDyQ9y7D8Qp1V64aMhOW6ZKBvw5n70uQssK6K9ssFiCglf
251
9BJMfCs8oftf2KL/x9jHYtkrWibQOx9nKylw68aJEQ1bR2bewltWhv/MIZsgmXRR
252
zP9lcOfuMRwtATzfluRd8mVuh+OoXLs7B6x6tHK53WxFmGs3HG9CPYneMm18DWiW
253
aw84Vc3J6+zcCws7VsvDgYOom6J9oPhuGcmAAq6cZoGeSkJb5WwiMKk7WjA6MoQo
254
0qezonTEnaiTTt1RAYY=
255
					    </ds:X509Certificate>
256
					  </ds:X509Data>
257
					  
258
					</ds:KeyInfo>
259
				</md:KeyDescriptor>
260
		               
261
				<md:KeyDescriptor use="encryption">
262
                                   <ds:KeyInfo>
263
					  <ds:X509Data>
264
					    <ds:X509Certificate>
265
					      MIIEijCCA3KgAwIBAgIRAPbx7wUg5RoJsiiMtKj7qeAwDQYJKoZIhvcNAQEFBQAw
266
NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
267
IFNTTCBDQTAeFw0xMzA5MTcwMDAwMDBaFw0xNjA5MTYyMzU5NTlaMEwxITAfBgNV
268
BAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEnMCUGA1UEAxMeY2ZhdWNsZS1m
269
b3JtYXRpb24udS1zdHJhc2JnLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
270
CgKCAQEAoiwlSkn9Tj6gKQPlKIbHvgLAfkOrwxg2YTwCHGOuNdJIKufFt5cyP+UN
271
oxFrLKawZA6F8gWzLRUSPv5klbMNweesmwDfd0Css4JKqtRd3prEnr77ILc9/+bH
272
t4QU+cHpX6BvHL9oxh89yXn8b+dHZw7tCZy3PEUtmn4x4s1jdOKUz15jA+RAmJB3
273
b5TVVSTtLIhm1pqVrVOU3lZYecwpvXD1VmGDpA6iIuyNueLbX5qGwuQYq26Mf+Kl
274
FRINZyVYNK4BkfVV4GQIaJRBTe07n6yE+zkR3SbibioxWAnBRteJBkN++iRo3Wo4
275
xdnpuY0ERkurMBfRyjV2jO1sNT159QIDAQABo4IBezCCAXcwHwYDVR0jBBgwFoAU
276
DL2TaAzz3qujSWsrN1dH6pDjue0wHQYDVR0OBBYEFCsV3SlRe7EpJjgz7LY+iyq5
277
LN3PMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG
278
AQUFBwMBBggrBgEFBQcDAjAiBgNVHSAEGzAZMA0GCysGAQQBsjEBAgIdMAgGBmeB
279
DAECATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnRjcy50ZXJlbmEub3Jn
280
L1RFUkVOQVNTTENBLmNybDBtBggrBgEFBQcBAQRhMF8wNQYIKwYBBQUHMAKGKWh0
281
dHA6Ly9jcnQudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3J0MCYGCCsGAQUF
282
BzABhhpodHRwOi8vb2NzcC50Y3MudGVyZW5hLm9yZzApBgNVHREEIjAggh5jZmF1
283
Y2xlLWZvcm1hdGlvbi51LXN0cmFzYmcuZnIwDQYJKoZIhvcNAQEFBQADggEBAG+I
284
rGuk2/L4kM391Q9Rp0A1MuAWcxlaEHnXkOV2DCyCw4A7jdQGGeKKKUbd+cQaMHPh
285
LMuCT8Bj66aBFe9RdlgDyQ9y7D8Qp1V64aMhOW6ZKBvw5n70uQssK6K9ssFiCglf
286
9BJMfCs8oftf2KL/x9jHYtkrWibQOx9nKylw68aJEQ1bR2bewltWhv/MIZsgmXRR
287
zP9lcOfuMRwtATzfluRd8mVuh+OoXLs7B6x6tHK53WxFmGs3HG9CPYneMm18DWiW
288
aw84Vc3J6+zcCws7VsvDgYOom6J9oPhuGcmAAq6cZoGeSkJb5WwiMKk7WjA6MoQo
289
0qezonTEnaiTTt1RAYY=
290
					    </ds:X509Certificate>
291
					  </ds:X509Data>
292
					</ds:KeyInfo>
293
				</md:KeyDescriptor>
294
			       
295

  
296
				
297
				
298
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://cfaufpi-formation/connexion/module.php/saml/sp/saml1-acs.php/shibboCLE" index="0"/>
299
				
300
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://cfaufpi-formation/connexion/module.php/saml/sp/saml2-acs.php/shibboCLE" index="0"/>
301
				
302
				
303

  
304
			</md:SPSSODescriptor>
305

  
306

  
307
		<md:Organization>
308
			<md:OrganizationName xml:lang="en">Université de Strasbourg</md:OrganizationName>
309
			<md:OrganizationDisplayName xml:lang="en">Université de Strasbourg</md:OrganizationDisplayName>
310
			<md:OrganizationURL xml:lang="en">http://www.unistra.fr</md:OrganizationURL>
311
		</md:Organization>
312
		
313

  
314
			
315
		    	
316
			    <md:ContactPerson contactType="technical">
317
				 <md:SurName>Trautmann Baptiste</md:SurName>
318
				 <md:EmailAddress>b.trautmann@unistra.fr</md:EmailAddress>
319
		        </md:ContactPerson>
320
			    	
321

  
322
		    		
323

  
324
				
325

  
326
			
327
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://cumulus-v5.parisdescartes.fr">
328
			<md:Extensions>
329
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2016-07-04T14:26:46Z">
330
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
331
				</mdrpi:RegistrationInfo>
332
								
333
				<mdattr:EntityAttributes>
334
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
335
				 
336
				   <saml:AttributeValue>https://federation.renater.fr/category/preprod</saml:AttributeValue>
337
				 
338
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
339
				 
340
				 </saml:Attribute>
341
				</mdattr:EntityAttributes>
342
				
343
			</md:Extensions>
344
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
345
               <md:Extensions>
346
			    <mdui:UIInfo>  
347
          		      
348
			      <mdui:DisplayName xml:lang="en">Université Paris Descartes - Cumulus Test</mdui:DisplayName>
349
			      
350
			      			      
351
			      <mdui:InformationURL xml:lang="fr">http://cumulus-v5.parisdescartes.fr</mdui:InformationURL>
352
          		      <mdui:Description xml:lang="en">Cumulus v5</mdui:Description>
353
          		      <mdui:DisplayName xml:lang="fr">Université Paris Descartes - Cumulus Test</mdui:DisplayName>
354
          		      <mdui:Description xml:lang="fr">Cumulus v5</mdui:Description>
355
          		            			    </mdui:UIInfo>
356
    			  </md:Extensions>
357
				<md:KeyDescriptor use="signing">
358
                                   <ds:KeyInfo>
359
					  
360
					  <ds:X509Data>
361
					    <ds:X509Certificate>
362
					      MIIDEjCCAfqgAwIBAgIJAMTKdzvsIzipMA0GCSqGSIb3DQEBBQUAMCQxIjAgBgNV
363
BAMTGWN1bXVsdXMucGFyaXNkZXNjYXJ0ZXMuZnIwHhcNMTYxMDI0MTQ1NDE3WhcN
364
MjYxMDIyMTQ1NDE3WjAkMSIwIAYDVQQDExljdW11bHVzLnBhcmlzZGVzY2FydGVz
365
LmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MRZ8OdHlRVdNmTb
366
gJgALmRiySnhehEzOeswBE94G/v0td5xHOsxvYBm4Uaoqr37tybLBvuz2zuUvDnE
367
5gCIBUpClO9n4MijSTKVQ47P18rR6rQA13M8067tSH38CzrJNw7qfYmUmZLHNKxb
368
O3LV3WOV0QwDyhfTiiRrbyK05Fjzm3RHivSEoTe6EgBxCGYvJd0mGNXbAiFqsENd
369
NJlejeKSzLdBLMUV83msb5/7yuxdcgqItV5bf04uLHfgAK9yUxhlCEZVjF4FaEN6
370
T6eu7ye4Eedy7Qk2FffYQLbZPAOz5V1C0cJFlXVISnculUlg72mfM05Fg1QD0i4C
371
FFa11wIDAQABo0cwRTAkBgNVHREEHTAbghljdW11bHVzLnBhcmlzZGVzY2FydGVz
372
LmZyMB0GA1UdDgQWBBTpZmVAyoIJ/c4cPa2hL99ydeqffjANBgkqhkiG9w0BAQUF
373
AAOCAQEADT0XvKkfmEqiD2Q0Yf3Rtuu07eZcSC9JR+VGW/hh67QTOxDB+NXbAdFE
374
Ol/HkutCQ2n+EayGU5EARMD6h9WbgU8ypqtoUewvlNdxcz6SpbnM+zQUUSVyyClu
375
RGJGFLge0Oh67MhHZKF8gwK1yaS3Z57b53Y9kwIlXv1ZfwTgg/OEi1L9RLqYdxYt
376
FPJPWjr49weZflX3dHh8n3GMrCZU+yTL3Kv3b9ZLrFJb7iucM07lvLSBzjXT3e7W
377
V2vY/xn6uVcSy4x82/UxpsVeUfhvmexxEx/W7uO4pIc1BSchO4tqUGL8L6pv+1vk
378
uhcdYt6bus7LU0DF16W+YdwwBra0ng==
379
					    </ds:X509Certificate>
380
					  </ds:X509Data>
381
					  
382
					</ds:KeyInfo>
383
				</md:KeyDescriptor>
384
		               
385
				<md:KeyDescriptor use="encryption">
386
                                   <ds:KeyInfo>
387
					  <ds:X509Data>
388
					    <ds:X509Certificate>
389
					      MIIDEjCCAfqgAwIBAgIJAMTKdzvsIzipMA0GCSqGSIb3DQEBBQUAMCQxIjAgBgNV
390
BAMTGWN1bXVsdXMucGFyaXNkZXNjYXJ0ZXMuZnIwHhcNMTYxMDI0MTQ1NDE3WhcN
391
MjYxMDIyMTQ1NDE3WjAkMSIwIAYDVQQDExljdW11bHVzLnBhcmlzZGVzY2FydGVz
392
LmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MRZ8OdHlRVdNmTb
393
gJgALmRiySnhehEzOeswBE94G/v0td5xHOsxvYBm4Uaoqr37tybLBvuz2zuUvDnE
394
5gCIBUpClO9n4MijSTKVQ47P18rR6rQA13M8067tSH38CzrJNw7qfYmUmZLHNKxb
395
O3LV3WOV0QwDyhfTiiRrbyK05Fjzm3RHivSEoTe6EgBxCGYvJd0mGNXbAiFqsENd
396
NJlejeKSzLdBLMUV83msb5/7yuxdcgqItV5bf04uLHfgAK9yUxhlCEZVjF4FaEN6
397
T6eu7ye4Eedy7Qk2FffYQLbZPAOz5V1C0cJFlXVISnculUlg72mfM05Fg1QD0i4C
398
FFa11wIDAQABo0cwRTAkBgNVHREEHTAbghljdW11bHVzLnBhcmlzZGVzY2FydGVz
399
LmZyMB0GA1UdDgQWBBTpZmVAyoIJ/c4cPa2hL99ydeqffjANBgkqhkiG9w0BAQUF
400
AAOCAQEADT0XvKkfmEqiD2Q0Yf3Rtuu07eZcSC9JR+VGW/hh67QTOxDB+NXbAdFE
401
Ol/HkutCQ2n+EayGU5EARMD6h9WbgU8ypqtoUewvlNdxcz6SpbnM+zQUUSVyyClu
402
RGJGFLge0Oh67MhHZKF8gwK1yaS3Z57b53Y9kwIlXv1ZfwTgg/OEi1L9RLqYdxYt
403
FPJPWjr49weZflX3dHh8n3GMrCZU+yTL3Kv3b9ZLrFJb7iucM07lvLSBzjXT3e7W
404
V2vY/xn6uVcSy4x82/UxpsVeUfhvmexxEx/W7uO4pIc1BSchO4tqUGL8L6pv+1vk
405
uhcdYt6bus7LU0DF16W+YdwwBra0ng==
406
					    </ds:X509Certificate>
407
					  </ds:X509Data>
408
					</ds:KeyInfo>
409
				</md:KeyDescriptor>
410
			       
411

  
412
				
413
				
414
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://cumulus-v5.parisdescartes.fr/Shibboleth.sso/SAML2/POST" index="1"/>
415
				
416
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://cumulus-v5.parisdescartes.fr/Shibboleth.sso/SAML/POST" index="5"/>
417
				
418
				
419

  
420
		       <md:AttributeConsumingService index="0">
421
			 <md:ServiceName xml:lang="fr">Université Paris Descartes - Cumulus Test</md:ServiceName>
422
			 <md:ServiceName xml:lang="en">Université Paris Descartes - Cumulus Test</md:ServiceName>
423
			 <md:ServiceDescription xml:lang="fr">Cumulus v5</md:ServiceDescription>
424
			 <md:ServiceDescription xml:lang="en">Cumulus v5</md:ServiceDescription>
425
				         
426
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
427
			 </md:RequestedAttribute>
428
				         
429
			 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
430
			 </md:RequestedAttribute>
431
				         
432
			 <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
433
			 </md:RequestedAttribute>
434
		
435
		       </md:AttributeConsumingService>
436

  
437
			</md:SPSSODescriptor>
438

  
439

  
440
		<md:Organization>
441
			<md:OrganizationName xml:lang="en">Université de Paris 5 - René Descartes</md:OrganizationName>
442
			<md:OrganizationDisplayName xml:lang="en">Université de Paris 5 - René Descartes</md:OrganizationDisplayName>
443
			<md:OrganizationURL xml:lang="en">http://www.parisdescartes.fr/</md:OrganizationURL>
444
		</md:Organization>
445
		
446

  
447
			
448
		    	
449
			    <md:ContactPerson contactType="technical">
450
				 <md:SurName>Yves Gerday</md:SurName>
451
				 <md:EmailAddress>yves.gerday@parisdescartes.fr</md:EmailAddress>
452
		        </md:ContactPerson>
453
			    	
454

  
455
		    	
456
			    <md:ContactPerson contactType="technical">
457
				 <md:SurName>Olivier Waldek</md:SurName>
458
				 <md:EmailAddress>olivier.waldek@parisdescartes.fr</md:EmailAddress>
459
		        </md:ContactPerson>
460
			    	
461

  
462
				
463

  
464
			
465
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://dsi-depot.grenoble-inp.fr">
466
			<md:Extensions>
467
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2017-05-17T16:57:21Z">
468
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
469
				</mdrpi:RegistrationInfo>
470
								
471
				<mdattr:EntityAttributes>
472
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
473
				 
474
				   <saml:AttributeValue>https://federation.renater.fr/category/collaboratif</saml:AttributeValue>
475
				 
476
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
477
				 
478
				 </saml:Attribute>
479
				</mdattr:EntityAttributes>
480
				
481
			</md:Extensions>
482
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
483
               <md:Extensions>
484
			    <mdui:UIInfo>  
485
          		      
486
			      <mdui:DisplayName xml:lang="en">Grenoble  INP - DSI échange</mdui:DisplayName>
487
			      
488
			      			      
489
			      <mdui:InformationURL xml:lang="fr">https://dsi-depot.grenoble-inp.fr/sso_login/federation_renater</mdui:InformationURL>
490
          		      
491
          		      <mdui:DisplayName xml:lang="fr">Grenoble  INP - DSI échange</mdui:DisplayName>
492
          		      <mdui:Description xml:lang="fr">Site de communication pour la DSI Grenoble INP</mdui:Description>
493
          		            			    </mdui:UIInfo>
494
    			  </md:Extensions>
495
				<md:KeyDescriptor use="signing">
496
                                   <ds:KeyInfo>
497
					  
498
					  <ds:X509Data>
499
					    <ds:X509Certificate>
500
					      MIIDVDCCAjygAwIBAgIJAI61T4B2wk3HMA0GCSqGSIb3DQEBBQUAMCkxJzAlBgNV
501
BAMTHmNvY290aWVyLmluZnJhLmdyZW5vYmxlLWlucC5mcjAeFw0xNzAzMjcwNjE4
502
NDFaFw0yMDAzMjYwNjE4NDFaMCkxJzAlBgNVBAMTHmNvY290aWVyLmluZnJhLmdy
503
ZW5vYmxlLWlucC5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL+e
504
j/xnxtnS/B7qzE8/vihWkFc/iX3frkz/SW602790k7tYmM4SgamSqIfBhK50NtG3
505
4Jy8WvU7WVDLoPFrWNNEZX9WzZeZbSjJ9wO5+bQtGRKC4kK3kXGfqq5gObmACJIW
506
CcKz/Es91se/JvosysbkCf6/s6nm7eOwCvZsr8cjWhgAhv+WQ+z5kdsu45GMkAoB
507
wo6B8SSel48H3AsIHTShbwSzgEKVW9B34NWb8jSEkcSJAST0uvHjDFrH0EL4/Rzs
508
THuL+e4eh7ao9OKzgLxc5i6XSJL8XMB4Qj68o58xmZT08MPrJiNvEnS9+u656TBb
509
Ggb+UGInkGwFxtEwHhUCAwEAAaN/MH0wXAYDVR0RBFUwU4IeY29jb3RpZXIuaW5m
510
cmEuZ3Jlbm9ibGUtaW5wLmZyhjFodHRwczovL2NvY290aWVyLmluZnJhLmdyZW5v
511
YmxlLWlucC5mci9zaGliYm9sZXRoMB0GA1UdDgQWBBT1aYak/6ON68Fb7sSjAMgu
512
L/p2FDANBgkqhkiG9w0BAQUFAAOCAQEAigfgJt+oKFeDYHHjiRT65gYxU115qUkO
513
QrsdU12OJTwSD12niiDq1HO0R4gda+CdaTCKSRip4TIl28e2OeLh5CwHe16rtz2C
514
5B0svrSvttul8g6YeP3MkoBEPwPNuK3GoHpYJnD/GqPQMN28UIQwoJLyK3XpsbT9
515
IhLaXz9YSjCXdVBI7xUcxx146ldNU3zn+sL7RFNKx5po7EMJSF41Wi3p8CbIJo+G
516
AgTAyvTltGzVrtPs7yrDfNRI0WJwV4GNIMq6sPqmHJZZqfThZo12KAQel1Jr8Iyx
517
KLIKJO8DRKRKLg6UvEevt9YW3jdunj4Zz7o/ftNcCUNzcUadjjShEA==
518

  
519
					    </ds:X509Certificate>
520
					  </ds:X509Data>
521
					  
522
					</ds:KeyInfo>
523
				</md:KeyDescriptor>
524
		               
525
				<md:KeyDescriptor use="encryption">
526
                                   <ds:KeyInfo>
527
					  <ds:X509Data>
528
					    <ds:X509Certificate>
529
					      MIIDVDCCAjygAwIBAgIJAI61T4B2wk3HMA0GCSqGSIb3DQEBBQUAMCkxJzAlBgNV
530
BAMTHmNvY290aWVyLmluZnJhLmdyZW5vYmxlLWlucC5mcjAeFw0xNzAzMjcwNjE4
531
NDFaFw0yMDAzMjYwNjE4NDFaMCkxJzAlBgNVBAMTHmNvY290aWVyLmluZnJhLmdy
532
ZW5vYmxlLWlucC5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL+e
533
j/xnxtnS/B7qzE8/vihWkFc/iX3frkz/SW602790k7tYmM4SgamSqIfBhK50NtG3
534
4Jy8WvU7WVDLoPFrWNNEZX9WzZeZbSjJ9wO5+bQtGRKC4kK3kXGfqq5gObmACJIW
535
CcKz/Es91se/JvosysbkCf6/s6nm7eOwCvZsr8cjWhgAhv+WQ+z5kdsu45GMkAoB
536
wo6B8SSel48H3AsIHTShbwSzgEKVW9B34NWb8jSEkcSJAST0uvHjDFrH0EL4/Rzs
537
THuL+e4eh7ao9OKzgLxc5i6XSJL8XMB4Qj68o58xmZT08MPrJiNvEnS9+u656TBb
538
Ggb+UGInkGwFxtEwHhUCAwEAAaN/MH0wXAYDVR0RBFUwU4IeY29jb3RpZXIuaW5m
539
cmEuZ3Jlbm9ibGUtaW5wLmZyhjFodHRwczovL2NvY290aWVyLmluZnJhLmdyZW5v
540
YmxlLWlucC5mci9zaGliYm9sZXRoMB0GA1UdDgQWBBT1aYak/6ON68Fb7sSjAMgu
541
L/p2FDANBgkqhkiG9w0BAQUFAAOCAQEAigfgJt+oKFeDYHHjiRT65gYxU115qUkO
542
QrsdU12OJTwSD12niiDq1HO0R4gda+CdaTCKSRip4TIl28e2OeLh5CwHe16rtz2C
543
5B0svrSvttul8g6YeP3MkoBEPwPNuK3GoHpYJnD/GqPQMN28UIQwoJLyK3XpsbT9
544
IhLaXz9YSjCXdVBI7xUcxx146ldNU3zn+sL7RFNKx5po7EMJSF41Wi3p8CbIJo+G
545
AgTAyvTltGzVrtPs7yrDfNRI0WJwV4GNIMq6sPqmHJZZqfThZo12KAQel1Jr8Iyx
546
KLIKJO8DRKRKLg6UvEevt9YW3jdunj4Zz7o/ftNcCUNzcUadjjShEA==
547

  
548
					    </ds:X509Certificate>
549
					  </ds:X509Data>
550
					</ds:KeyInfo>
551
				</md:KeyDescriptor>
552
			       
553

  
554
				
555
				
556
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dsi-depot.grenoble-inp.fr/sso_login/federation_renater/Shibboleth.sso/SAML2/POST" index="1"/>
557
				
558
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dsi-depot.grenoble-inp.fr/sso_login/federation_renater/Shibboleth.sso/SAML/POST" index="5"/>
559
				
560
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://dsi-depot.grenoble-inp.fr/sso_login/federation_renater/Shibboleth.sso/SAML/POST" index="7"/>
561
				
562
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dsi-depot.grenoble-inp.fr/sso_login/federation_renater/Shibboleth.sso/SAML2/POST" index="8"/>
563
				
564
				
565

  
566
		       <md:AttributeConsumingService index="0">
567
			 <md:ServiceName xml:lang="fr">Grenoble  INP - DSI échange</md:ServiceName>
568
			 
569
			 <md:ServiceDescription xml:lang="fr">Site de communication pour la DSI Grenoble INP</md:ServiceDescription>
570
			 
571
				         
572
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
573
			 </md:RequestedAttribute>
574
		
575
		       </md:AttributeConsumingService>
576

  
577
			</md:SPSSODescriptor>
578

  
579

  
580
		<md:Organization>
581
			<md:OrganizationName xml:lang="en">Institut National Polytechnique de Grenoble</md:OrganizationName>
582
			<md:OrganizationDisplayName xml:lang="en">Institut National Polytechnique de Grenoble</md:OrganizationDisplayName>
583
			<md:OrganizationURL xml:lang="en">http://www.grenoble-inp.fr</md:OrganizationURL>
584
		</md:Organization>
585
		
586

  
587
			
588
			    <md:ContactPerson contactType="technical">
589
			     <md:EmailAddress>federation.sos@grenoble-inp.fr</md:EmailAddress>
590
		        </md:ContactPerson>
591
		    	
592

  
593
			
594
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://e-formation.envam.org/auth/shibboleth">
595
			<md:Extensions>
596
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2013-02-07T12:09:20Z">
597
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
598
				</mdrpi:RegistrationInfo>
599
								
600
				<mdattr:EntityAttributes>
601
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
602
				 
603
				   <saml:AttributeValue>https://federation.renater.fr/category/elearning</saml:AttributeValue>
604
				 
605
				   <saml:AttributeValue>https://federation.renater.fr/scope/community</saml:AttributeValue>
606
				 
607
				 </saml:Attribute>
608
				</mdattr:EntityAttributes>
609
				
610
			</md:Extensions>
611
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
612
               <md:Extensions>
613
			    <mdui:UIInfo>  
614
          		      
615
			      <mdui:DisplayName xml:lang="en">Moodle - ENVAM FC</mdui:DisplayName>
616
			      
617
			      			      
618
			      <mdui:InformationURL xml:lang="fr">https://e-formation.envam.org/</mdui:InformationURL>
619
          		      <mdui:Description xml:lang="en">Moodle - ENVAM FC</mdui:Description>
620
          		      <mdui:DisplayName xml:lang="fr">Moodle - ENVAM FC</mdui:DisplayName>
621
          		      <mdui:Description xml:lang="fr">Plate-forme dédiée à la télé-formation continue du consortium ENVAM.</mdui:Description>
622
          		            			    </mdui:UIInfo>
623
    			  </md:Extensions>
624
				<md:KeyDescriptor use="signing">
625
                                   <ds:KeyInfo>
626
					  
627
					  <ds:X509Data>
628
					    <ds:X509Certificate>
629
					      MIID2jCCAsKgAwIBAgIJAPOEmO0su1A4MA0GCSqGSIb3DQEBBQUAMFExCzAJBgNV
630
BAYTAkZSMSIwIAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMR4wHAYD
631
VQQDExVlLWZvcm1hdGlvbi5lbnZhbS5vcmcwHhcNMTQxMDI4MTE0MjMyWhcNMzQx
632
MDIzMTE0MjMyWjBRMQswCQYDVQQGEwJGUjEiMCAGA1UECgwZVW5pdmVyc2l0w4PC
633
qSBkZSBSZW5uZXMgMTEeMBwGA1UEAxMVZS1mb3JtYXRpb24uZW52YW0ub3JnMIIB
634
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXZjaDb0WgpOjaQSeoYTh4X
635
bduxovf8UNkgW5KkRpgPhV/hwS/qQrOnPVn0kP7PK3UyFmFB3fZZL2Ei+qfeFpbM
636
3OV3LHK4FSYb0AmauWU1x4gSr/UEFodOd1d5TYVuKNdfhDjwAai3HqDJmnW27wW/
637
/M1iSzB3yX5jKy4d9o96irCK+0bXw6SoWmBQN75bOWVXwf7CxnpytIIAbEN+ErbB
638
TBw1tnHSRhwJ+S2DU7S/URuGHp4b7T+NuvMfTu+bOZc5SF3EQnA9oloplLP3M2q/
639
MGwoVsew4RJ2H3UwQeYRSAbMnUGEdyvsOrCrRqfq3jFUrDuFTMvdQ+ETEnA6AwID
640
AQABo4G0MIGxMB0GA1UdDgQWBBQR8USNXIl9hAjbLX0KQ/XUj3XPmzCBgQYDVR0j
641
BHoweIAUEfFEjVyJfYQI2y19CkP11I91z5uhVaRTMFExCzAJBgNVBAYTAkZSMSIw
642
IAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMR4wHAYDVQQDExVlLWZv
643
cm1hdGlvbi5lbnZhbS5vcmeCCQDzhJjtLLtQODAMBgNVHRMEBTADAQH/MA0GCSqG
644
SIb3DQEBBQUAA4IBAQB5C1OGiPpiYJIqXM7DIxeJexDdO3nZQkRlkqwRAI70Z87w
645
M0gg30lPU5Tjb8Pc7ZTsgwYrJy+q3IDUBWBmaivg4H9mmIMqoMidzWz/6W2zQKYT
646
5xGX7soz0O88knuy9TVi9pLLt7vf8bCSGzKuMzL5zN9rwkVkA5ba76qN/fa6U3z8
647
Ez4kgxiaOYMZEUWhQ1+gUX0iRsGZVAMI+PJfarNLYHgixLnH+h9aqvlO6Pk5XAbn
648
RvKyNYMpCYKqwkxz3bFfmAbiRUP+oN+v6ZFuKRhASY1FSLEvUPNgvAOumZEMJVWG
649
HydsiBIDl8sN+13qAuXz8wXTv66t6bo0b7w1fKom
650
					    </ds:X509Certificate>
651
					  </ds:X509Data>
652
					  
653
					</ds:KeyInfo>
654
				</md:KeyDescriptor>
655
		               
656
				<md:KeyDescriptor use="encryption">
657
                                   <ds:KeyInfo>
658
					  <ds:X509Data>
659
					    <ds:X509Certificate>
660
					      MIID2jCCAsKgAwIBAgIJAPOEmO0su1A4MA0GCSqGSIb3DQEBBQUAMFExCzAJBgNV
661
BAYTAkZSMSIwIAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMR4wHAYD
662
VQQDExVlLWZvcm1hdGlvbi5lbnZhbS5vcmcwHhcNMTQxMDI4MTE0MjMyWhcNMzQx
663
MDIzMTE0MjMyWjBRMQswCQYDVQQGEwJGUjEiMCAGA1UECgwZVW5pdmVyc2l0w4PC
664
qSBkZSBSZW5uZXMgMTEeMBwGA1UEAxMVZS1mb3JtYXRpb24uZW52YW0ub3JnMIIB
665
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtXZjaDb0WgpOjaQSeoYTh4X
666
bduxovf8UNkgW5KkRpgPhV/hwS/qQrOnPVn0kP7PK3UyFmFB3fZZL2Ei+qfeFpbM
667
3OV3LHK4FSYb0AmauWU1x4gSr/UEFodOd1d5TYVuKNdfhDjwAai3HqDJmnW27wW/
668
/M1iSzB3yX5jKy4d9o96irCK+0bXw6SoWmBQN75bOWVXwf7CxnpytIIAbEN+ErbB
669
TBw1tnHSRhwJ+S2DU7S/URuGHp4b7T+NuvMfTu+bOZc5SF3EQnA9oloplLP3M2q/
670
MGwoVsew4RJ2H3UwQeYRSAbMnUGEdyvsOrCrRqfq3jFUrDuFTMvdQ+ETEnA6AwID
671
AQABo4G0MIGxMB0GA1UdDgQWBBQR8USNXIl9hAjbLX0KQ/XUj3XPmzCBgQYDVR0j
672
BHoweIAUEfFEjVyJfYQI2y19CkP11I91z5uhVaRTMFExCzAJBgNVBAYTAkZSMSIw
673
IAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMR4wHAYDVQQDExVlLWZv
674
cm1hdGlvbi5lbnZhbS5vcmeCCQDzhJjtLLtQODAMBgNVHRMEBTADAQH/MA0GCSqG
675
SIb3DQEBBQUAA4IBAQB5C1OGiPpiYJIqXM7DIxeJexDdO3nZQkRlkqwRAI70Z87w
676
M0gg30lPU5Tjb8Pc7ZTsgwYrJy+q3IDUBWBmaivg4H9mmIMqoMidzWz/6W2zQKYT
677
5xGX7soz0O88knuy9TVi9pLLt7vf8bCSGzKuMzL5zN9rwkVkA5ba76qN/fa6U3z8
678
Ez4kgxiaOYMZEUWhQ1+gUX0iRsGZVAMI+PJfarNLYHgixLnH+h9aqvlO6Pk5XAbn
679
RvKyNYMpCYKqwkxz3bFfmAbiRUP+oN+v6ZFuKRhASY1FSLEvUPNgvAOumZEMJVWG
680
HydsiBIDl8sN+13qAuXz8wXTv66t6bo0b7w1fKom
681
					    </ds:X509Certificate>
682
					  </ds:X509Data>
683
					</ds:KeyInfo>
684
				</md:KeyDescriptor>
685
			       
686

  
687
				
688
				
689
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://e-formation.envam.org/auth/shibboleth/Shibboleth.sso/SAML/POST" index="0"/>
690
				
691
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://e-formation.envam.org/auth/shibboleth/Shibboleth.sso/SAML2/POST" index="0"/>
692
				
693
				
694

  
695
		       <md:AttributeConsumingService index="0">
696
			 <md:ServiceName xml:lang="fr">Moodle - ENVAM FC</md:ServiceName>
697
			 <md:ServiceName xml:lang="en">Moodle - ENVAM FC</md:ServiceName>
698
			 <md:ServiceDescription xml:lang="fr">Plate-forme dédiée à la télé-formation continue du consortium ENVAM.</md:ServiceDescription>
699
			 <md:ServiceDescription xml:lang="en">Moodle - ENVAM FC</md:ServiceDescription>
700
				         
701
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
702
			 </md:RequestedAttribute>
703
				         
704
			 <md:RequestedAttribute FriendlyName="eduPersonPrimaryAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
705
			 </md:RequestedAttribute>
706
				         
707
			 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
708
			 </md:RequestedAttribute>
709
				         
710
			 <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
711
			 </md:RequestedAttribute>
712
				         
713
			 <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
714
			 </md:RequestedAttribute>
715
		
716
		       </md:AttributeConsumingService>
717

  
718
			</md:SPSSODescriptor>
719

  
720

  
721
		<md:Organization>
722
			<md:OrganizationName xml:lang="en">Campus Numérique ENVAM</md:OrganizationName>
723
			<md:OrganizationDisplayName xml:lang="en">Campus Numérique ENVAM</md:OrganizationDisplayName>
724
			<md:OrganizationURL xml:lang="en">http://www.univ-rennes1.fr</md:OrganizationURL>
725
		</md:Organization>
726
		
727

  
728
			
729
			    <md:ContactPerson contactType="technical">
730
			     <md:EmailAddress>fed-admin@listes.univ-rennes1.fr</md:EmailAddress>
731
		        </md:ContactPerson>
732
		    	
733

  
734
			
735
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://ecm.univ-rennes1.fr">
736
			<md:Extensions>
737
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2011-08-22T10:55:13Z">
738
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
739
				</mdrpi:RegistrationInfo>
740
								
741
				<mdattr:EntityAttributes>
742
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
743
				 
744
				   <saml:AttributeValue>https://federation.renater.fr/category/collaboratif</saml:AttributeValue>
745
				 
746
				   <saml:AttributeValue>https://federation.renater.fr/scope/national</saml:AttributeValue>
747
				 
748
				 </saml:Attribute>
749
				</mdattr:EntityAttributes>
750
				
751
			</md:Extensions>
752
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
753
               <md:Extensions>
754
			    <mdui:UIInfo>  
755
          		      
756
			      <mdui:DisplayName xml:lang="en">Université de Rennes 1 - GED</mdui:DisplayName>
757
			      
758
			      			      
759
			      <mdui:InformationURL xml:lang="fr">https://ecm.univ-rennes1.fr/nuxeo</mdui:InformationURL>
760
          		      <mdui:Description xml:lang="en">ECM</mdui:Description>
761
          		      <mdui:DisplayName xml:lang="fr">Université de Rennes 1 - GED</mdui:DisplayName>
762
          		      <mdui:Description xml:lang="fr">Gestion électronique de documents</mdui:Description>
763
          		            			    </mdui:UIInfo>
764
    			  </md:Extensions>
765
				<md:KeyDescriptor use="signing">
766
                                   <ds:KeyInfo>
767
					  
768
					  <ds:X509Data>
769
					    <ds:X509Certificate>
770
					      MIID0zCCArugAwIBAgIJAN6XVIoa9GnBMA0GCSqGSIb3DQEBBQUAME8xCzAJBgNV
771
BAYTAkZSMSIwIAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMRwwGgYD
772
VQQDExNlY20udW5pdi1yZW5uZXMxLmZyMB4XDTE0MTAyODExMzMyMFoXDTM0MTAy
773
MzExMzMyMFowTzELMAkGA1UEBhMCRlIxIjAgBgNVBAoMGVVuaXZlcnNpdMODwqkg
774
ZGUgUmVubmVzIDExHDAaBgNVBAMTE2VjbS51bml2LXJlbm5lczEuZnIwggEiMA0G
775
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoxF1pXuW6hOr39/gAVKzlEBLboP3
776
O4R9Yc6PoRRh20J5PwN7VCe7BB+ol8x4G9cB/mkKPNAXdd+2DAn6GznCfS757fsu
777
QKb+ytNNwhV8Uki89dY9J9tsE2aePPCTbts077gSGZu9QHSvRy47lpI4+86vtlgw
778
I/MmR5dlIzVYTMN78fURlSpK+asfYJF2PreM4YFbh92FSX4Vvx3eWrI+5hQdDYAk
779
NyzbJP3094E1JFxrJQZe5w8JzEKpsr7j7w3lsHequ1kLDJBAb5dIM4y2LZKVP23e
780
RC7Ayb+2UYdnoNp7X0lwgAm9Ps9OMCz5UfIvACRxrrassnm2yEhEvRHxAgMBAAGj
781
gbEwga4wHQYDVR0OBBYEFEd3vbGtg3z3PpOztESZC1JtIMDhMH8GA1UdIwR4MHaA
782
FEd3vbGtg3z3PpOztESZC1JtIMDhoVOkUTBPMQswCQYDVQQGEwJGUjEiMCAGA1UE
783
CgwZVW5pdmVyc2l0w4PCqSBkZSBSZW5uZXMgMTEcMBoGA1UEAxMTZWNtLnVuaXYt
784
cmVubmVzMS5mcoIJAN6XVIoa9GnBMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
785
BQADggEBADf2LL4vFuw3hnqlK5KrCzlGPr9eD+NuZI0swrU8URgDtGvNvKTLXeNN
786
gXb/tXXyUtGYC7aiu+PkOqAp7nlwkns6W5HqdzvbBYLd0coV2SkOFGNgJXZzNiaF
787
pgZSAaaL7fW+oR+x5lZSFqLWsWhs9SzNOcJQ+eufs5KqBv18WVea7Ghmks0jbWtC
788
d8Rh3oseKn+Bu6RrMMx9KB5pFtvGyIhB6ixW5IPsCSR6HT/RNIwcwPMs/7wmxF8P
789
slm+zeXlZLXoSjxIQM0Gqbm50SsPRMSsmieGZcmuvieUI2oMD5TtgH2DC2u4tnIK
790
IywxwWHS39um0tK5CT/hRrkYggiL9n4=
791
					    </ds:X509Certificate>
792
					  </ds:X509Data>
793
					  
794
					</ds:KeyInfo>
795
				</md:KeyDescriptor>
796
		               
797
				<md:KeyDescriptor use="encryption">
798
                                   <ds:KeyInfo>
799
					  <ds:X509Data>
800
					    <ds:X509Certificate>
801
					      MIID0zCCArugAwIBAgIJAN6XVIoa9GnBMA0GCSqGSIb3DQEBBQUAME8xCzAJBgNV
802
BAYTAkZSMSIwIAYDVQQKDBlVbml2ZXJzaXTDg8KpIGRlIFJlbm5lcyAxMRwwGgYD
803
VQQDExNlY20udW5pdi1yZW5uZXMxLmZyMB4XDTE0MTAyODExMzMyMFoXDTM0MTAy
804
MzExMzMyMFowTzELMAkGA1UEBhMCRlIxIjAgBgNVBAoMGVVuaXZlcnNpdMODwqkg
805
ZGUgUmVubmVzIDExHDAaBgNVBAMTE2VjbS51bml2LXJlbm5lczEuZnIwggEiMA0G
806
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoxF1pXuW6hOr39/gAVKzlEBLboP3
807
O4R9Yc6PoRRh20J5PwN7VCe7BB+ol8x4G9cB/mkKPNAXdd+2DAn6GznCfS757fsu
808
QKb+ytNNwhV8Uki89dY9J9tsE2aePPCTbts077gSGZu9QHSvRy47lpI4+86vtlgw
809
I/MmR5dlIzVYTMN78fURlSpK+asfYJF2PreM4YFbh92FSX4Vvx3eWrI+5hQdDYAk
810
NyzbJP3094E1JFxrJQZe5w8JzEKpsr7j7w3lsHequ1kLDJBAb5dIM4y2LZKVP23e
811
RC7Ayb+2UYdnoNp7X0lwgAm9Ps9OMCz5UfIvACRxrrassnm2yEhEvRHxAgMBAAGj
812
gbEwga4wHQYDVR0OBBYEFEd3vbGtg3z3PpOztESZC1JtIMDhMH8GA1UdIwR4MHaA
813
FEd3vbGtg3z3PpOztESZC1JtIMDhoVOkUTBPMQswCQYDVQQGEwJGUjEiMCAGA1UE
814
CgwZVW5pdmVyc2l0w4PCqSBkZSBSZW5uZXMgMTEcMBoGA1UEAxMTZWNtLnVuaXYt
815
cmVubmVzMS5mcoIJAN6XVIoa9GnBMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
816
BQADggEBADf2LL4vFuw3hnqlK5KrCzlGPr9eD+NuZI0swrU8URgDtGvNvKTLXeNN
817
gXb/tXXyUtGYC7aiu+PkOqAp7nlwkns6W5HqdzvbBYLd0coV2SkOFGNgJXZzNiaF
818
pgZSAaaL7fW+oR+x5lZSFqLWsWhs9SzNOcJQ+eufs5KqBv18WVea7Ghmks0jbWtC
819
d8Rh3oseKn+Bu6RrMMx9KB5pFtvGyIhB6ixW5IPsCSR6HT/RNIwcwPMs/7wmxF8P
820
slm+zeXlZLXoSjxIQM0Gqbm50SsPRMSsmieGZcmuvieUI2oMD5TtgH2DC2u4tnIK
821
IywxwWHS39um0tK5CT/hRrkYggiL9n4=
822
					    </ds:X509Certificate>
823
					  </ds:X509Data>
824
					</ds:KeyInfo>
825
				</md:KeyDescriptor>
826
			       
827

  
828
				
829
				
830
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ecm.univ-rennes1.fr/Shibboleth.sso/SAML/POST" index="7"/>
831
				
832
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ecm.univ-rennes1.fr/Shibboleth.sso/SAML2/POST" index="10"/>
833
				
834
				
835

  
836
		       <md:AttributeConsumingService index="0">
837
			 <md:ServiceName xml:lang="fr">Université de Rennes 1 - GED</md:ServiceName>
838
			 <md:ServiceName xml:lang="en">Université de Rennes 1 - GED</md:ServiceName>
839
			 <md:ServiceDescription xml:lang="fr">Gestion électronique de documents</md:ServiceDescription>
840
			 <md:ServiceDescription xml:lang="en">ECM</md:ServiceDescription>
841
				         
842
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
843
			 </md:RequestedAttribute>
844
				         
845
			 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
846
			 </md:RequestedAttribute>
847
				         
848
			 <md:RequestedAttribute FriendlyName="supannOrganisme" Name="urn:oid:1.3.6.1.4.1.7135.1.2.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
849
			 </md:RequestedAttribute>
850
				         
851
			 <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
852
			 </md:RequestedAttribute>
853
				         
854
			 <md:RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
855
			 </md:RequestedAttribute>
856
		
857
		       </md:AttributeConsumingService>
858

  
859
			</md:SPSSODescriptor>
860

  
861

  
862
		<md:Organization>
863
			<md:OrganizationName xml:lang="en">Université de Rennes 1</md:OrganizationName>
864
			<md:OrganizationDisplayName xml:lang="en">Université de Rennes 1</md:OrganizationDisplayName>
865
			<md:OrganizationURL xml:lang="en">http://www.univ-rennes1.fr</md:OrganizationURL>
866
		</md:Organization>
867
		
868

  
869
			
870
			    <md:ContactPerson contactType="technical">
871
			     <md:EmailAddress>fed-admin@listes.univ-rennes1.fr</md:EmailAddress>
872
		        </md:ContactPerson>
873
		    	
874

  
875
			
876
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://ezproxy.ipb.fr">
877
			<md:Extensions>
878
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2011-11-08T13:56:57Z">
879
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
880
				</mdrpi:RegistrationInfo>
881
								
882
				<mdattr:EntityAttributes>
883
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
884
				 
885
				   <saml:AttributeValue>https://federation.renater.fr/category/documentation</saml:AttributeValue>
886
				 
887
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
888
				 
889
				 </saml:Attribute>
890
				</mdattr:EntityAttributes>
891
				
892
			</md:Extensions>
893
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
894
               <md:Extensions>
895
			    <mdui:UIInfo>  
896
          		      
897
			      <mdui:DisplayName xml:lang="en">Institut Politechnique de Bordeaux - Portail documentaire EZProxy</mdui:DisplayName>
898
			      
899
			      			      
900
			      <mdui:InformationURL xml:lang="fr">http://ezproxy.ipb.fr</mdui:InformationURL>
901
          		      
902
          		      <mdui:DisplayName xml:lang="fr">Institut Politechnique de Bordeaux - Portail documentaire EZProxy</mdui:DisplayName>
903
          		      <mdui:Description xml:lang="fr">ezProxy - Portail documentaire à l'attention des écoles de l'IPB.</mdui:Description>
904
          		            			    </mdui:UIInfo>
905
    			  </md:Extensions>
906
				<md:KeyDescriptor use="signing">
907
                                   <ds:KeyInfo>
908
					  
909
					  <ds:X509Data>
910
					    <ds:X509Certificate>
911
					      MIIIHzCCBwegAwIBAgIQBK9udT2hIeGSK8X4P5KzCjANBgkqhkiG9w0BAQsFADBz
912
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
913
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExJzAlBgNVBAMTHlRFUkVOQSBTU0wg
914
SGlnaCBBc3N1cmFuY2UgQ0EgMzAeFw0xNjExMDcwMDAwMDBaFw0xODExMTIxMjAw
915
MDBaMIHoMRowGAYDVQQPDBFHb3Zlcm5tZW50IEVudGl0eTETMBEGCysGAQQBgjc8
916
AgEDEwJGUjEaMBgGA1UEBRMRR292ZXJubWVudCBFbnRpdHkxHTAbBgNVBAkMFGF2
917
ZW51ZSBkZXMgRmFjdWx0w6lzMQ4wDAYDVQQREwUzMzQwMDELMAkGA1UEBhMCRlIx
918
EjAQBgNVBAgTCUFxdWl0YWluZTEQMA4GA1UEBxMHVGFsZW5jZTEVMBMGA1UEChMM
919
Qm9yZGVhdXggSU5QMSAwHgYDVQQDExdlenByb3h5LmJvcmRlYXV4LWlucC5mcjCC
920
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALo02ivCxwKu6ugGbwTZP1Hl
921
T6Ep2jAEPlTCb0jQH+RI2bMr1ISIRQobmubfZApdJYqiDzb+fhhNVZm4vgD1X+rI
922
wVnsYLyc10rHlJdreWGYkvxUjxe4I5wXlp7Pk2JaRLHKaNk55gbNF+EY0NRdHbHd
923
Qb0z2RwQH2GnP2Jb43b3H7/B3aJDy0IaLmzdmkHQL+pw0Pf+xf2GZPcHGt3kxzXd
924
PFRJcamlDbjPTN2fMlJrsbH0+gumS833bKR2oczPvFJtd9KhjmbIBpnhWHa+J+31
925
F/4bRYnX173YPkR1ct/5KCtvgcbdSw21/RPmUkR9N2ao6N3Una/l+xkoK4lfnZsC
926
AwEAAaOCBDcwggQzMB8GA1UdIwQYMBaAFMK4hdfhuRO90Ui8/V7cfZBCeoqpMB0G
927
A1UdDgQWBBRlDCBG4utxI7DD+Kiy0ZKW0ghPgTBnBgNVHREEYDBeghdlenByb3h5
928
LmJvcmRlYXV4LWlucC5mcoIOZXpwcm94eS5pcGIuZnKCFGxvZ2luLmV6cHJveHku
929
aXBiLmZygh1sb2dpbi5lenByb3h5LmJvcmRlYXV4LWlucC5mcjAOBgNVHQ8BAf8E
930
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGFBgNVHR8EfjB8
931
MDygOqA4hjZodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVEVSRU5BU1NMSGlnaEFz
932
c3VyYW5jZUNBMy5jcmwwPKA6oDiGNmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9U
933
RVJFTkFTU0xIaWdoQXNzdXJhbmNlQ0EzLmNybDBLBgNVHSAERDBCMDcGCWCGSAGG
934
/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT
935
MAcGBWeBDAEBMHsGCCsGAQUFBwEBBG8wbTAkBggrBgEFBQcwAYYYaHR0cDovL29j
936
c3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdp
937
Y2VydC5jb20vVEVSRU5BU1NMSGlnaEFzc3VyYW5jZUNBMy5jcnQwDAYDVR0TAQH/
938
BAIwADCCAfcGCisGAQQB1nkCBAIEggHnBIIB4wHhAHYApLkJkLQYWBSHuxOizGdw
939
Cjw1mAT5G9+443fNDsgN3BAAAAFYPaIkHgAABAMARzBFAiAb5Z3R19q0w+S8mmcm
940
EblH0+GAjt8O2zbJU0iXJehFAAIhAP3FwEWZ1w/4Oq/T8xptUd2w61kauP1dSNIS
941
AqO5OTc8AHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFYPaIj
942
8AAABAMARzBFAiAzDb11/p/NwcwBmCbCAU11m2BAEEkDqOZNEN3nV0jkZgIhAOvT
943
rnZtlWqbypiiFXf1LFX9qohKff0lIaswnb2l3yQaAHcAVhQGmi/XwuzT9eG9RLI+
944
x0Z2ubyZEVzA75SYVdaJ0N0AAAFYPaIkFwAABAMASDBGAiEA2Z+Z21GBAwxc1hAI
945
KYYdktN1E85TzHUTD3t/6CQcqIkCIQC8Z7srou4RiUyldZgaBXg1Fzs2jUZhSoRW
946
ND47F5BskQB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABWD2i
947
JjUAAAQDAEcwRQIhAIjUU11upW+5OAysUmShjB+Dt06y35Cn8cmNWb4McR0GAiBI
948
pRmrhHZVFKnAI3yHT28wixsmUkzkhkPnA0P8Ls0TczANBgkqhkiG9w0BAQsFAAOC
949
AQEAOgzyMmO4TKIa+uPdEi+2kexyt4OpKhHHkkpY6DwggWMRGqNbZxJq8FPEheK/
950
W3cxm3Uv/vQkR4loB6FWTzBnAz95KeAFmS17cSVzgWVmbO40PqOdWdOl/LywYqAd
951
BOKcFRuuA4np+fHNbpWOg097CfJH3iQTrHH/Wc7esWRSpioWNoh9VDBqi8lLRe4t
952
uvV69vHeqVfhdth6rv8EPQ63XpBhVuldIqJvTfvrt02EisD01WVETCdGmJE4VUYF
953
AfYHenp79CKqRKpzByW1yXyUACwOhz/jXdlPyMsziryKjQK2qkdvWNXt9Rmcc01F
954
20ikD/IKHlRnkJWen23xcUxiew==
955
					    </ds:X509Certificate>
956
					  </ds:X509Data>
957
					  
958
					</ds:KeyInfo>
959
				</md:KeyDescriptor>
960
		               
961
				<md:KeyDescriptor use="encryption">
962
                                   <ds:KeyInfo>
963
					  <ds:X509Data>
964
					    <ds:X509Certificate>
965
					      MIIIHzCCBwegAwIBAgIQBK9udT2hIeGSK8X4P5KzCjANBgkqhkiG9w0BAQsFADBz
966
MQswCQYDVQQGEwJOTDEWMBQGA1UECBMNTm9vcmQtSG9sbGFuZDESMBAGA1UEBxMJ
967
QW1zdGVyZGFtMQ8wDQYDVQQKEwZURVJFTkExJzAlBgNVBAMTHlRFUkVOQSBTU0wg
968
SGlnaCBBc3N1cmFuY2UgQ0EgMzAeFw0xNjExMDcwMDAwMDBaFw0xODExMTIxMjAw
969
MDBaMIHoMRowGAYDVQQPDBFHb3Zlcm5tZW50IEVudGl0eTETMBEGCysGAQQBgjc8
970
AgEDEwJGUjEaMBgGA1UEBRMRR292ZXJubWVudCBFbnRpdHkxHTAbBgNVBAkMFGF2
971
ZW51ZSBkZXMgRmFjdWx0w6lzMQ4wDAYDVQQREwUzMzQwMDELMAkGA1UEBhMCRlIx
972
EjAQBgNVBAgTCUFxdWl0YWluZTEQMA4GA1UEBxMHVGFsZW5jZTEVMBMGA1UEChMM
973
Qm9yZGVhdXggSU5QMSAwHgYDVQQDExdlenByb3h5LmJvcmRlYXV4LWlucC5mcjCC
974
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALo02ivCxwKu6ugGbwTZP1Hl
975
T6Ep2jAEPlTCb0jQH+RI2bMr1ISIRQobmubfZApdJYqiDzb+fhhNVZm4vgD1X+rI
976
wVnsYLyc10rHlJdreWGYkvxUjxe4I5wXlp7Pk2JaRLHKaNk55gbNF+EY0NRdHbHd
977
Qb0z2RwQH2GnP2Jb43b3H7/B3aJDy0IaLmzdmkHQL+pw0Pf+xf2GZPcHGt3kxzXd
978
PFRJcamlDbjPTN2fMlJrsbH0+gumS833bKR2oczPvFJtd9KhjmbIBpnhWHa+J+31
979
F/4bRYnX173YPkR1ct/5KCtvgcbdSw21/RPmUkR9N2ao6N3Una/l+xkoK4lfnZsC
980
AwEAAaOCBDcwggQzMB8GA1UdIwQYMBaAFMK4hdfhuRO90Ui8/V7cfZBCeoqpMB0G
981
A1UdDgQWBBRlDCBG4utxI7DD+Kiy0ZKW0ghPgTBnBgNVHREEYDBeghdlenByb3h5
982
LmJvcmRlYXV4LWlucC5mcoIOZXpwcm94eS5pcGIuZnKCFGxvZ2luLmV6cHJveHku
983
aXBiLmZygh1sb2dpbi5lenByb3h5LmJvcmRlYXV4LWlucC5mcjAOBgNVHQ8BAf8E
984
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGFBgNVHR8EfjB8
985
MDygOqA4hjZodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vVEVSRU5BU1NMSGlnaEFz
986
c3VyYW5jZUNBMy5jcmwwPKA6oDiGNmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9U
987
RVJFTkFTU0xIaWdoQXNzdXJhbmNlQ0EzLmNybDBLBgNVHSAERDBCMDcGCWCGSAGG
988
/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BT
989
MAcGBWeBDAEBMHsGCCsGAQUFBwEBBG8wbTAkBggrBgEFBQcwAYYYaHR0cDovL29j
990
c3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAChjlodHRwOi8vY2FjZXJ0cy5kaWdp
991
Y2VydC5jb20vVEVSRU5BU1NMSGlnaEFzc3VyYW5jZUNBMy5jcnQwDAYDVR0TAQH/
992
BAIwADCCAfcGCisGAQQB1nkCBAIEggHnBIIB4wHhAHYApLkJkLQYWBSHuxOizGdw
993
Cjw1mAT5G9+443fNDsgN3BAAAAFYPaIkHgAABAMARzBFAiAb5Z3R19q0w+S8mmcm
994
EblH0+GAjt8O2zbJU0iXJehFAAIhAP3FwEWZ1w/4Oq/T8xptUd2w61kauP1dSNIS
995
AqO5OTc8AHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFYPaIj
996
8AAABAMARzBFAiAzDb11/p/NwcwBmCbCAU11m2BAEEkDqOZNEN3nV0jkZgIhAOvT
997
rnZtlWqbypiiFXf1LFX9qohKff0lIaswnb2l3yQaAHcAVhQGmi/XwuzT9eG9RLI+
998
x0Z2ubyZEVzA75SYVdaJ0N0AAAFYPaIkFwAABAMASDBGAiEA2Z+Z21GBAwxc1hAI
999
KYYdktN1E85TzHUTD3t/6CQcqIkCIQC8Z7srou4RiUyldZgaBXg1Fzs2jUZhSoRW
1000
ND47F5BskQB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABWD2i
1001
JjUAAAQDAEcwRQIhAIjUU11upW+5OAysUmShjB+Dt06y35Cn8cmNWb4McR0GAiBI
1002
pRmrhHZVFKnAI3yHT28wixsmUkzkhkPnA0P8Ls0TczANBgkqhkiG9w0BAQsFAAOC
1003
AQEAOgzyMmO4TKIa+uPdEi+2kexyt4OpKhHHkkpY6DwggWMRGqNbZxJq8FPEheK/
1004
W3cxm3Uv/vQkR4loB6FWTzBnAz95KeAFmS17cSVzgWVmbO40PqOdWdOl/LywYqAd
1005
BOKcFRuuA4np+fHNbpWOg097CfJH3iQTrHH/Wc7esWRSpioWNoh9VDBqi8lLRe4t
1006
uvV69vHeqVfhdth6rv8EPQ63XpBhVuldIqJvTfvrt02EisD01WVETCdGmJE4VUYF
1007
AfYHenp79CKqRKpzByW1yXyUACwOhz/jXdlPyMsziryKjQK2qkdvWNXt9Rmcc01F
1008
20ikD/IKHlRnkJWen23xcUxiew==
1009
					    </ds:X509Certificate>
1010
					  </ds:X509Data>
1011
					</ds:KeyInfo>
1012
				</md:KeyDescriptor>
1013
			       
1014

  
1015
				
1016
				
1017
				<md:KeyDescriptor use="signing">
1018
				       <ds:KeyInfo>
1019
					  <ds:X509Data>
1020
					    <ds:X509Certificate>
1021
					      MIIEfDCCA2SgAwIBAgIQD6V8DaVNh8CmjMXvyLIlmzANBgkqhkiG9w0BAQUFADA2
1022
MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
1023
U1NMIENBMB4XDTExMDkzMDAwMDAwMFoXDTE0MDkyOTIzNTk1OVowWTELMAkGA1UE
1024
BhMCRlIxMTAvBgNVBAoTKEluc3RpdHV0IFBvbHl0ZWNobmlxdWUgZGUgQm9yZGVh
1025
dXggLSBJUEIxFzAVBgNVBAMTDmV6cHJveHkuaXBiLmZyMIIBIjANBgkqhkiG9w0B
1026
AQEFAAOCAQ8AMIIBCgKCAQEAytidGc0lEUCNvS82OKZxRE4c1kDwNIrUPyhYtsKL
1027
PDiYjvfVtCQ3kRPuMNdnVAMu2O7ysp8crCJM4kBCBOTJ5o+1wo+HmjSKumAya1F0
1028
jhJNZJ7epGHRPi1nncVm6fpPMZn21M/AaBhXjMQWMgpW7h/KtMvoThi90kC4WicD
1029
sQ9fGHxtX7uHM0MMIs7eD+MiH9/hgK83349ycyrfkWexoa51qJKkZTPFDAkhDdym
1030
vN82FDCV8q63K8fRmVlfP/0IGsQurNUSS2GLRCJt81Xd4afgu57wKKvv6R0YMai5
1031
/KSK8PsdxqPkH5qImaysLLE8H/K0ufEAMP+vYR60mR2eaQIDAQABo4IBYTCCAV0w
1032
HwYDVR0jBBgwFoAUDL2TaAzz3qujSWsrN1dH6pDjue0wHQYDVR0OBBYEFGLdsx9p
1033
qhjM32VLIjsW8Za/6QvNMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
1034
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAYBgNVHSAEETAPMA0GCysGAQQB
1035
sjEBAgIdMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwudGNzLnRlcmVuYS5v
1036
cmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUFBwEBBGEwXzA1BggrBgEFBQcwAoYp
1037
aHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5jcnQwJgYIKwYB
1038
BQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJlbmEub3JnMBkGA1UdEQQSMBCCDmV6
1039
cHJveHkuaXBiLmZyMA0GCSqGSIb3DQEBBQUAA4IBAQC1mTxVGzA4gZkh+EFjTNVb
1040
us42OJWG2GNPAI/S69zMZeAXGqfq0YNyB/01YFnp4waP3gm7DZMVcukp3ySFGAf4
1041
C/EhXg4Cnw+ITRlJuIEnlLYdAGN084r8/V3Qwchxjnf0FCIlyb7XieV5Kik71z9N
1042
jz0DRneDYDmTduSecfYyJjHU9Zq0iDlf6PMF7PRQVzYMyU/jUQBTStUw51zawx6k
1043
Mmcx+wxCgllxpBpCPJZichb76RV8+YjSk7+C9S8o7t1XSH09KjFqR7hXJIJtsRn9
1044
F+1Anv+mUILwjc/WFskOqAACtFeptKLkkPWT6BiWxUCelX9K3b+2DB0czTuDzsf/
1045
					    </ds:X509Certificate>
1046
					  </ds:X509Data>
1047
					</ds:KeyInfo>
1048
				</md:KeyDescriptor>
1049
				
1050
				
1051
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ezproxy.ipb.fr/Shibboleth.sso/SAML/POST" index="0"/>
1052
				
1053
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ezproxy.ipb.fr/Shibboleth.sso/SAML2/POST" index="0"/>
1054
				
1055
				
1056

  
1057
		       <md:AttributeConsumingService index="0">
1058
			 <md:ServiceName xml:lang="fr">Institut Politechnique de Bordeaux - Portail documentaire EZProxy</md:ServiceName>
1059
			 
1060
			 <md:ServiceDescription xml:lang="fr">ezProxy - Portail documentaire à l'attention des écoles de l'IPB.</md:ServiceDescription>
1061
			 
1062
				         
1063
			 <md:RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1064
			 </md:RequestedAttribute>
1065
				         
1066
			 <md:RequestedAttribute FriendlyName="supannEntiteAffectation" Name="urn:oid:1.3.6.1.4.1.7135.1.2.1.8" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1067
			 </md:RequestedAttribute>
1068
		
1069
		       </md:AttributeConsumingService>
1070

  
1071
			</md:SPSSODescriptor>
1072

  
1073

  
1074
		<md:Organization>
1075
			<md:OrganizationName xml:lang="en">Institut Polytechnique de Bordeaux</md:OrganizationName>
1076
			<md:OrganizationDisplayName xml:lang="en">Institut Polytechnique de Bordeaux</md:OrganizationDisplayName>
1077
			<md:OrganizationURL xml:lang="en">https://www.bordeaux-inp.fr/</md:OrganizationURL>
1078
		</md:Organization>
1079
		
1080

  
1081
			
1082
		    	
1083
			    <md:ContactPerson contactType="technical">
1084
				 <md:SurName>Pallard</md:SurName>
1085
				 <md:EmailAddress>michel.pallard@bordeaux-inp.fr</md:EmailAddress>
1086
		        </md:ContactPerson>
1087
			    	
1088

  
1089
		    	
1090
			    <md:ContactPerson contactType="technical">
1091
				 <md:SurName>Moniez</md:SurName>
1092
				 <md:EmailAddress>philippe.moniez@bordeaux-inp.fr</md:EmailAddress>
1093
		        </md:ContactPerson>
1094
			    	
1095

  
1096
				
1097

  
1098
			
1099
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://fitest.univ-fcomte.fr">
1100
			<md:Extensions>
1101
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2016-02-10T09:56:00Z">
1102
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
1103
				</mdrpi:RegistrationInfo>
1104
								
1105
				<mdattr:EntityAttributes>
1106
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1107
				 
1108
				   <saml:AttributeValue>https://federation.renater.fr/category/elearning</saml:AttributeValue>
1109
				 
1110
				   <saml:AttributeValue>https://federation.renater.fr/scope/national</saml:AttributeValue>
1111
				 
1112
				 </saml:Attribute>
1113
				</mdattr:EntityAttributes>
1114
				
1115
			</md:Extensions>
1116
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
1117
               <md:Extensions>
1118
			    <mdui:UIInfo>  
1119
          		      
1120
			      <mdui:DisplayName xml:lang="en">Gestion de la Fitest</mdui:DisplayName>
1121
			      
1122
			      <mdui:Logo height="268" width="373">http://fitest.univ-fcomte.fr/static/logo.png</mdui:Logo>			      
1123
			      <mdui:InformationURL xml:lang="fr">http://fitest.univ-fcomte.fr</mdui:InformationURL>
1124
          		      <mdui:Description xml:lang="en">Application permettant la gestion des étudiants du Grand EST (Fitest)</mdui:Description>
1125
          		      <mdui:DisplayName xml:lang="fr">Gestion de la Fitest</mdui:DisplayName>
1126
          		      <mdui:Description xml:lang="fr">Application permettant la gestion des étudiants du Grand EST (Fitest)</mdui:Description>
1127
          		            			    </mdui:UIInfo>
1128
    			  </md:Extensions>
1129
				<md:KeyDescriptor use="signing">
1130
                                   <ds:KeyInfo>
1131
					  
1132
					  <ds:X509Data>
1133
					    <ds:X509Certificate>
1134
					      MIIDLzCCAhegAwIBAgIJAJ/1bBOG9WncMA0GCSqGSIb3DQEBBQUAMCAxHjAcBgNV
1135
BAMTFWZpdGVzdC51bml2LWZjb210ZS5mcjAeFw0xNjAyMDkxNTIxMDVaFw0zMTAy
1136
MDUxNTIxMDVaMCAxHjAcBgNVBAMTFWZpdGVzdC51bml2LWZjb210ZS5mcjCCASIw
1137
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMBdimzi45B9W0CYBcCJnKS14EI6
1138
ZoEKB1Vvl2uT7v6tOSP/DNu/OPGwO3hzqGscAqIrbro+fX4C5xV+jNa5BM2UwCp6
1139
WV9mRZJjnQkjyxAjiBQQY+RhK5YswJvIbHUam9YPOGBmgztfGTayMazG77Myl8U6
1140
5DCONELhIyGRPmMygMTb0qt7IZoakou1hKHtRt5QPm8G2/UzaDT7kG8PS0zGkBvJ
1141
TVyJQHHMiGM9Crj/GLpFcoQr76Ax0hgMKH11so8o9KP47tw+izP11iUTnEPSnlHV
1142
Xqmy77jJA8D9aG3RyPs4xWHoU0Tu5HDCGGMDRsMB6FxKg+UAo1rZhcI5D+UCAwEA
1143
AaNsMGowSQYDVR0RBEIwQIIVZml0ZXN0LnVuaXYtZmNvbXRlLmZyhidodHRwOi8v
1144
Zml0ZXN0LnVuaXYtZmNvbXRlLmZyL3NoaWJib2xldGgwHQYDVR0OBBYEFNPRrnJx
1145
yCF4a5lCfoeloKgkmCRjMA0GCSqGSIb3DQEBBQUAA4IBAQAgH5NaNNzG64mf5vpd
1146
rFGLEHVzvg8PsnmC8eR/eRM8TggmTRv9ysmixpsi1RGFGhCqHIWSJT/lQIGus3jg
1147
elAvGF3wK6vegSjykprQDs1ZNRlrtWiQ26RkJ6sBPg2n63CAp8374INz2gNENkMp
1148
V0OlizMWpO1eH2pHpK2weBfxrcyQ8JqbvCBef1O33RKlD7KtnHLfLwWWrtUvo8y5
1149
8j31UOoGCDObYbdfVVw5E+iIVgn+ze3+7cG4PhXaiT0avQmprA4dyQ3UIhf6mg9D
1150
qe2bnPEqd4+xjlq1jSmDWEZDE2+4XOrRfPcHFjMEAfi48NQUNKyQAd9/INn7ihlr
1151
ZJFz
1152

  
1153
					    </ds:X509Certificate>
1154
					  </ds:X509Data>
1155
					  
1156
					</ds:KeyInfo>
1157
				</md:KeyDescriptor>
1158
		               
1159
				<md:KeyDescriptor use="encryption">
1160
                                   <ds:KeyInfo>
1161
					  <ds:X509Data>
1162
					    <ds:X509Certificate>
1163
					      MIIDLzCCAhegAwIBAgIJAJ/1bBOG9WncMA0GCSqGSIb3DQEBBQUAMCAxHjAcBgNV
1164
BAMTFWZpdGVzdC51bml2LWZjb210ZS5mcjAeFw0xNjAyMDkxNTIxMDVaFw0zMTAy
1165
MDUxNTIxMDVaMCAxHjAcBgNVBAMTFWZpdGVzdC51bml2LWZjb210ZS5mcjCCASIw
1166
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMBdimzi45B9W0CYBcCJnKS14EI6
1167
ZoEKB1Vvl2uT7v6tOSP/DNu/OPGwO3hzqGscAqIrbro+fX4C5xV+jNa5BM2UwCp6
1168
WV9mRZJjnQkjyxAjiBQQY+RhK5YswJvIbHUam9YPOGBmgztfGTayMazG77Myl8U6
1169
5DCONELhIyGRPmMygMTb0qt7IZoakou1hKHtRt5QPm8G2/UzaDT7kG8PS0zGkBvJ
1170
TVyJQHHMiGM9Crj/GLpFcoQr76Ax0hgMKH11so8o9KP47tw+izP11iUTnEPSnlHV
1171
Xqmy77jJA8D9aG3RyPs4xWHoU0Tu5HDCGGMDRsMB6FxKg+UAo1rZhcI5D+UCAwEA
1172
AaNsMGowSQYDVR0RBEIwQIIVZml0ZXN0LnVuaXYtZmNvbXRlLmZyhidodHRwOi8v
1173
Zml0ZXN0LnVuaXYtZmNvbXRlLmZyL3NoaWJib2xldGgwHQYDVR0OBBYEFNPRrnJx
1174
yCF4a5lCfoeloKgkmCRjMA0GCSqGSIb3DQEBBQUAA4IBAQAgH5NaNNzG64mf5vpd
1175
rFGLEHVzvg8PsnmC8eR/eRM8TggmTRv9ysmixpsi1RGFGhCqHIWSJT/lQIGus3jg
1176
elAvGF3wK6vegSjykprQDs1ZNRlrtWiQ26RkJ6sBPg2n63CAp8374INz2gNENkMp
1177
V0OlizMWpO1eH2pHpK2weBfxrcyQ8JqbvCBef1O33RKlD7KtnHLfLwWWrtUvo8y5
1178
8j31UOoGCDObYbdfVVw5E+iIVgn+ze3+7cG4PhXaiT0avQmprA4dyQ3UIhf6mg9D
1179
qe2bnPEqd4+xjlq1jSmDWEZDE2+4XOrRfPcHFjMEAfi48NQUNKyQAd9/INn7ihlr
1180
ZJFz
1181

  
1182
					    </ds:X509Certificate>
1183
					  </ds:X509Data>
1184
					</ds:KeyInfo>
1185
				</md:KeyDescriptor>
1186
			       
1187

  
1188
				
1189
				
1190
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://fitest.univ-fcomte.fr/Shibboleth.sso/SAML2/POST" index="1"/>
1191
				
1192
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://fitest.univ-fcomte.fr/Shibboleth.sso/SAML/POST" index="5"/>
1193
				
1194
				
1195

  
1196
		       <md:AttributeConsumingService index="0">
1197
			 <md:ServiceName xml:lang="fr">Gestion de la Fitest</md:ServiceName>
1198
			 <md:ServiceName xml:lang="en">Gestion de la Fitest</md:ServiceName>
1199
			 <md:ServiceDescription xml:lang="fr">Application permettant la gestion des étudiants du Grand EST (Fitest)</md:ServiceDescription>
1200
			 <md:ServiceDescription xml:lang="en">Application permettant la gestion des étudiants du Grand EST (Fitest)</md:ServiceDescription>
1201
				         
1202
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1203
			 </md:RequestedAttribute>
1204
				         
1205
			 <md:RequestedAttribute FriendlyName="eduPersonPrimaryAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1206
			 </md:RequestedAttribute>
1207
				         
1208
			 <md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1209
			 </md:RequestedAttribute>
1210
		
1211
		       </md:AttributeConsumingService>
1212

  
1213
			</md:SPSSODescriptor>
1214

  
1215

  
1216
		<md:Organization>
1217
			<md:OrganizationName xml:lang="en">Université de Besancon Franche-Comté</md:OrganizationName>
1218
			<md:OrganizationDisplayName xml:lang="en">Université de Besancon Franche-Comté</md:OrganizationDisplayName>
1219
			<md:OrganizationURL xml:lang="en">http://univ-fcomte.fr/</md:OrganizationURL>
1220
		</md:Organization>
1221
		
1222

  
1223
			
1224
			    <md:ContactPerson contactType="technical">
1225
			     <md:EmailAddress>ctu-support@univ-fcomte.fr</md:EmailAddress>
1226
		        </md:ContactPerson>
1227
		    	
1228

  
1229
			
1230
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://gedoc.univ-nantes.fr/sp">
1231
			<md:Extensions>
1232
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2011-06-07T09:48:28Z">
1233
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
1234
				</mdrpi:RegistrationInfo>
1235
								
1236
				<mdattr:EntityAttributes>
1237
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1238
				 
1239
				   <saml:AttributeValue>https://federation.renater.fr/category/metier</saml:AttributeValue>
1240
				 
1241
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
1242
				 
1243
				 </saml:Attribute>
1244
				</mdattr:EntityAttributes>
1245
				
1246
			</md:Extensions>
1247
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
1248
               <md:Extensions>
1249
			    <mdui:UIInfo>  
1250
          		      
1251
			      <mdui:DisplayName xml:lang="en">LUNAM - Outil de gestion des doctorants (LunamDocteur)</mdui:DisplayName>
1252
			      
1253
			      			      
1254
			      <mdui:InformationURL xml:lang="fr">http://gedoc.univ-nantes.fr</mdui:InformationURL>
1255
          		      
1256
          		      <mdui:DisplayName xml:lang="fr">LUNAM - Outil de gestion des doctorants (LunamDocteur)</mdui:DisplayName>
1257
          		      <mdui:Description xml:lang="fr">Application de gestion de la formation doctorale à destination des établissements membres du PRES des Pays de la Loire (LUNAM).</mdui:Description>
1258
          		            			    </mdui:UIInfo>
1259
    			  </md:Extensions>
1260
				<md:KeyDescriptor use="signing">
1261
                                   <ds:KeyInfo>
1262
					  
1263
					  <ds:X509Data>
1264
					    <ds:X509Certificate>
1265
					      MIIDIzCCAgugAwIBAgIJALtrjlZcIB/1MA0GCSqGSIb3DQEBBQUAMB8xHTAbBgNV
1266
BAMTFGdlZG9jLnVuaXYtbmFudGVzLmZyMB4XDTEwMTIyMDE1MjAwNloXDTIwMTIx
1267
NzE1MjAwNlowHzEdMBsGA1UEAxMUZ2Vkb2MudW5pdi1uYW50ZXMuZnIwggEiMA0G
1268
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VQkiGbOQ2yBwCQP8Y/3tjeWh8zn9
1269
nz0reSh8rpyQmo2XuoIOeDOEadbFn1G1ECReI45+N4QAITEP7x5gyVfITfkCq8Z0
1270
6C51yPjh+p6FuYwTugyGMZXcbPY6oAUV+c9tZAaiLvObp8LpYbQgirAI8yUjvJSI
1271
XIn6CK+8jS9jC/oXy1GTab4WvK2Xlniwob7ggeipM1hbPwNymcvD/+LbAxNXyVBM
1272
C/h2CJoaST1XOeod4DRVhu653WGroeNoS3KaeFwDNwp155vN5r5Y74ViMNKp3Ay3
1273
QuaO7h49awg47ctvea9TBkubSeA/VrbeTs6CqKLxp4+jnyqpW4FhrWgbAgMBAAGj
1274
YjBgMD8GA1UdEQQ4MDaCFGdlZG9jLnVuaXYtbmFudGVzLmZyhh5odHRwOi8vZ2Vk
1275
b2MudW5pdi1uYW50ZXMuZnIvc3AwHQYDVR0OBBYEFLytY9C+yoVH3D3ei5qoI3H3
1276
maW9MA0GCSqGSIb3DQEBBQUAA4IBAQC0uNFM+t3Iw3WP7yImZnaW6N3rvr9I22Uw
1277
8TzW+g4PtA1cHqb3l6rBbxKBlZbfJ2ZJIyUzgDTPWqpKBpE3smvW5tK3aRZVdZyQ
1278
Dl/au85eMOQvPC+yGdyvDQyPLr6F8r0zD509ul9pwNM/dchiewxqRGtPK4Dp7wO4
1279
S41u0ecPGkOsxf5AUu3/6OZKUMUAIJLd9IoBEq8fJDHKb1F6NM6HM/D0wdTCN+42
1280
qdYpzb5wtxVpAuI9Y/Wjk/pIzi85ckTXFoOEY8rH9Kh720a+my3o80Ah3xug328x
1281
ekcitAAOKMjiAlOfSCCqy0LEsakDXZ8n6//pEbv2E0pp0Uv5yeEm
1282
					    </ds:X509Certificate>
1283
					  </ds:X509Data>
1284
					  
1285
					</ds:KeyInfo>
1286
				</md:KeyDescriptor>
1287
		               
1288
				<md:KeyDescriptor use="encryption">
1289
                                   <ds:KeyInfo>
1290
					  <ds:X509Data>
1291
					    <ds:X509Certificate>
1292
					      MIIDIzCCAgugAwIBAgIJALtrjlZcIB/1MA0GCSqGSIb3DQEBBQUAMB8xHTAbBgNV
1293
BAMTFGdlZG9jLnVuaXYtbmFudGVzLmZyMB4XDTEwMTIyMDE1MjAwNloXDTIwMTIx
1294
NzE1MjAwNlowHzEdMBsGA1UEAxMUZ2Vkb2MudW5pdi1uYW50ZXMuZnIwggEiMA0G
1295
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VQkiGbOQ2yBwCQP8Y/3tjeWh8zn9
1296
nz0reSh8rpyQmo2XuoIOeDOEadbFn1G1ECReI45+N4QAITEP7x5gyVfITfkCq8Z0
1297
6C51yPjh+p6FuYwTugyGMZXcbPY6oAUV+c9tZAaiLvObp8LpYbQgirAI8yUjvJSI
1298
XIn6CK+8jS9jC/oXy1GTab4WvK2Xlniwob7ggeipM1hbPwNymcvD/+LbAxNXyVBM
1299
C/h2CJoaST1XOeod4DRVhu653WGroeNoS3KaeFwDNwp155vN5r5Y74ViMNKp3Ay3
1300
QuaO7h49awg47ctvea9TBkubSeA/VrbeTs6CqKLxp4+jnyqpW4FhrWgbAgMBAAGj
1301
YjBgMD8GA1UdEQQ4MDaCFGdlZG9jLnVuaXYtbmFudGVzLmZyhh5odHRwOi8vZ2Vk
1302
b2MudW5pdi1uYW50ZXMuZnIvc3AwHQYDVR0OBBYEFLytY9C+yoVH3D3ei5qoI3H3
1303
maW9MA0GCSqGSIb3DQEBBQUAA4IBAQC0uNFM+t3Iw3WP7yImZnaW6N3rvr9I22Uw
1304
8TzW+g4PtA1cHqb3l6rBbxKBlZbfJ2ZJIyUzgDTPWqpKBpE3smvW5tK3aRZVdZyQ
1305
Dl/au85eMOQvPC+yGdyvDQyPLr6F8r0zD509ul9pwNM/dchiewxqRGtPK4Dp7wO4
1306
S41u0ecPGkOsxf5AUu3/6OZKUMUAIJLd9IoBEq8fJDHKb1F6NM6HM/D0wdTCN+42
1307
qdYpzb5wtxVpAuI9Y/Wjk/pIzi85ckTXFoOEY8rH9Kh720a+my3o80Ah3xug328x
1308
ekcitAAOKMjiAlOfSCCqy0LEsakDXZ8n6//pEbv2E0pp0Uv5yeEm
1309
					    </ds:X509Certificate>
1310
					  </ds:X509Data>
1311
					</ds:KeyInfo>
1312
				</md:KeyDescriptor>
1313
			       
1314

  
1315
				
1316
				
1317
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://gedoc.univ-nantes.fr/Shibboleth.sso/SAML/POST" index="5"/>
1318
				
1319
				
1320

  
1321
		       <md:AttributeConsumingService index="0">
1322
			 <md:ServiceName xml:lang="fr">LUNAM - Outil de gestion des doctorants (LunamDocteur)</md:ServiceName>
1323
			 
1324
			 <md:ServiceDescription xml:lang="fr">Application de gestion de la formation doctorale à destination des établissements membres du PRES des Pays de la Loire (LUNAM).</md:ServiceDescription>
1325
			 
1326
				         
1327
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1328
			 </md:RequestedAttribute>
1329
		
1330
		       </md:AttributeConsumingService>
1331

  
1332
			</md:SPSSODescriptor>
1333

  
1334

  
1335
		<md:Organization>
1336
			<md:OrganizationName xml:lang="en">Université de Nantes</md:OrganizationName>
1337
			<md:OrganizationDisplayName xml:lang="en">Université de Nantes</md:OrganizationDisplayName>
1338
			<md:OrganizationURL xml:lang="en">http://www.univ-nantes.fr</md:OrganizationURL>
1339
		</md:Organization>
1340
		
1341

  
1342
			
1343
		    	
1344
			    <md:ContactPerson contactType="technical">
1345
				 <md:SurName>GINDRE Eric</md:SurName>
1346
				 <md:EmailAddress>eric.gindre@univ-nantes.fr</md:EmailAddress>
1347
		        </md:ContactPerson>
1348
			    	
1349

  
1350
		    	
1351
			    <md:ContactPerson contactType="technical">
1352
				 <md:SurName>AYIKA Ekoué</md:SurName>
1353
				 <md:EmailAddress>ekoue.ayika@univ-nantes.fr</md:EmailAddress>
1354
		        </md:ContactPerson>
1355
			    	
1356

  
1357
				
1358

  
1359
			
1360
		</md:EntityDescriptor><md:EntityDescriptor entityID="http://h3.crous-reims.fr">
1361
			<md:Extensions>
1362
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2015-10-21T15:44:51Z">
1363
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
1364
				</mdrpi:RegistrationInfo>
1365
								
1366
				<mdattr:EntityAttributes>
1367
				 <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1368
				 
1369
				   <saml:AttributeValue>https://federation.renater.fr/category/metier</saml:AttributeValue>
1370
				 
1371
				   <saml:AttributeValue>https://federation.renater.fr/scope/local</saml:AttributeValue>
1372
				 
1373
				 </saml:Attribute>
1374
				</mdattr:EntityAttributes>
1375
				
1376
			</md:Extensions>
1377
			<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol urn:oasis:names:tc:SAML:2.0:protocol">
1378
               <md:Extensions>
1379
			    <mdui:UIInfo>  
1380
          		      
1381
			      <mdui:DisplayName xml:lang="en">Heberg3 of Crous de Reims</mdui:DisplayName>
1382
			      
1383
			      <mdui:Logo height="110" width="110">http://share.crous-reims.fr/LOGOCROUSREIMS.png</mdui:Logo>			      
1384
			      <mdui:InformationURL xml:lang="fr">http://h3.crous-reims.fr/H3</mdui:InformationURL>
1385
          		      <mdui:Description xml:lang="en">Heberg3 du Crous de Reims</mdui:Description>
1386
          		      <mdui:DisplayName xml:lang="fr">Heberg3 du Crous de Reims</mdui:DisplayName>
1387
          		      <mdui:Description xml:lang="fr">Heberg3 du Crous de Reims</mdui:Description>
1388
          		            			    </mdui:UIInfo>
1389
    			  </md:Extensions>
1390
				<md:KeyDescriptor use="signing">
1391
                                   <ds:KeyInfo>
1392
					  
1393
					  <ds:X509Data>
1394
					    <ds:X509Certificate>
1395
					      MIIDPDCCAiSgAwIBAgIJAKVdKInpdhd7MA0GCSqGSIb3DQEBBQUAMCMxITAfBgNV
1396
BAMTGGh0dHA6Ly9oMy5jcm91cy1yZWltcy5mcjAeFw0xNjAxMTUxMzE4MjBaFw0x
1397
OTAxMTQxMzE4MjBaMCMxITAfBgNVBAMTGGh0dHA6Ly9oMy5jcm91cy1yZWltcy5m
1398
cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANqr3PGpTU01nxkrC9eW
1399
IEXM5rog6h7ihPatQ6jsTo2BX0yeQ1UHtZnzFcFlHUSOZIt1SxoZjLd0FEYqYEnb
1400
c+7D2UYdFKsG/S3m8WMBvTY8+z3rZroL7EE/TrGYPMzhsvEgC0FQhfKRpnrKJQX/
1401
LE7FRSRXPU9mEk/dC6g36ncI9WlA2zZu0tarwmUsMoqGIYxVRaCM7yit89XDB7Pi
1402
VC8ZbvMDq/TfM1Vb7AP/RB5MgTYk/W4RFDZHUfXD/5SUokVMltsHKKn1J2rHaruc
1403
e14QNRxJIGJq6Ujm+M186tv4/np4NFe/kz7tSOQOGVuo7dDNUHtUpCgazFWVOZOc
1404
o00CAwEAAaNzMHEwUAYDVR0RBEkwR4IYaHR0cDovL2gzLmNyb3VzLXJlaW1zLmZy
1405
hitodHRwczovL2h0dHA6Ly9oMy5jcm91cy1yZWltcy5mci9zaGliYm9sZXRoMB0G
1406
A1UdDgQWBBQds+soOqsTNpV7m1MaOhscML4ieTANBgkqhkiG9w0BAQUFAAOCAQEA
1407
boGJLLkpeHRP5HX2OqkVeRDfFqVknh8XKG/LDHCs58nhWxjLlYNqtyoS2qIyBAMG
1408
T7FDZeKito/B105f1/Bo1eLA2iPmgjSsnVjUADXKZ+M9V9A/y1LcNgikF4+BO7g8
1409
zOQLTFxsE4JqJ69bZlQuRfK6RmUUXQhIMGUSJnEu678g9UL803qfpDQ1pAoASOpY
1410
5pfO6DoiQ6JWGOO/xjZHG2ZMpKxVc9MG/AUJMkGjtXyiziJtOqbJbz24cfRJoGU5
1411
5y+y3nUUmOiDiewOU5ckoSpZM1W8737nY90HwWYOOvdU/uGtRX2XWiD5oUtoEdUM
1412
DtEsD8zjX/AvRhMrb2Q+tA==
1413
					    </ds:X509Certificate>
1414
					  </ds:X509Data>
1415
					  
1416
					</ds:KeyInfo>
1417
				</md:KeyDescriptor>
1418
		               
1419
				<md:KeyDescriptor use="encryption">
1420
                                   <ds:KeyInfo>
1421
					  <ds:X509Data>
1422
					    <ds:X509Certificate>
1423
					      MIIDPDCCAiSgAwIBAgIJAKVdKInpdhd7MA0GCSqGSIb3DQEBBQUAMCMxITAfBgNV
1424
BAMTGGh0dHA6Ly9oMy5jcm91cy1yZWltcy5mcjAeFw0xNjAxMTUxMzE4MjBaFw0x
1425
OTAxMTQxMzE4MjBaMCMxITAfBgNVBAMTGGh0dHA6Ly9oMy5jcm91cy1yZWltcy5m
1426
cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANqr3PGpTU01nxkrC9eW
1427
IEXM5rog6h7ihPatQ6jsTo2BX0yeQ1UHtZnzFcFlHUSOZIt1SxoZjLd0FEYqYEnb
1428
c+7D2UYdFKsG/S3m8WMBvTY8+z3rZroL7EE/TrGYPMzhsvEgC0FQhfKRpnrKJQX/
1429
LE7FRSRXPU9mEk/dC6g36ncI9WlA2zZu0tarwmUsMoqGIYxVRaCM7yit89XDB7Pi
1430
VC8ZbvMDq/TfM1Vb7AP/RB5MgTYk/W4RFDZHUfXD/5SUokVMltsHKKn1J2rHaruc
1431
e14QNRxJIGJq6Ujm+M186tv4/np4NFe/kz7tSOQOGVuo7dDNUHtUpCgazFWVOZOc
1432
o00CAwEAAaNzMHEwUAYDVR0RBEkwR4IYaHR0cDovL2gzLmNyb3VzLXJlaW1zLmZy
1433
hitodHRwczovL2h0dHA6Ly9oMy5jcm91cy1yZWltcy5mci9zaGliYm9sZXRoMB0G
1434
A1UdDgQWBBQds+soOqsTNpV7m1MaOhscML4ieTANBgkqhkiG9w0BAQUFAAOCAQEA
1435
boGJLLkpeHRP5HX2OqkVeRDfFqVknh8XKG/LDHCs58nhWxjLlYNqtyoS2qIyBAMG
1436
T7FDZeKito/B105f1/Bo1eLA2iPmgjSsnVjUADXKZ+M9V9A/y1LcNgikF4+BO7g8
1437
zOQLTFxsE4JqJ69bZlQuRfK6RmUUXQhIMGUSJnEu678g9UL803qfpDQ1pAoASOpY
1438
5pfO6DoiQ6JWGOO/xjZHG2ZMpKxVc9MG/AUJMkGjtXyiziJtOqbJbz24cfRJoGU5
1439
5y+y3nUUmOiDiewOU5ckoSpZM1W8737nY90HwWYOOvdU/uGtRX2XWiD5oUtoEdUM
1440
DtEsD8zjX/AvRhMrb2Q+tA==
1441
					    </ds:X509Certificate>
1442
					  </ds:X509Data>
1443
					</ds:KeyInfo>
1444
				</md:KeyDescriptor>
1445
			       
1446

  
1447
				
1448
				
1449
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://h3.crous-reims.fr/Shibboleth.sso/SAML/POST" index="0"/>
1450
				
1451
				  <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://h3.crous-reims.fr/Shibboleth.sso/SAML2/POST" index="0"/>
1452
				
1453
				
1454

  
1455
		       <md:AttributeConsumingService index="0">
1456
			 <md:ServiceName xml:lang="fr">Heberg3 du Crous de Reims</md:ServiceName>
1457
			 <md:ServiceName xml:lang="en">Heberg3 of Crous de Reims</md:ServiceName>
1458
			 <md:ServiceDescription xml:lang="fr">Heberg3 du Crous de Reims</md:ServiceDescription>
1459
			 <md:ServiceDescription xml:lang="en">Heberg3 du Crous de Reims</md:ServiceDescription>
1460
				         
1461
			 <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1462
			 </md:RequestedAttribute>
1463
				         
1464
			 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
1465
			 </md:RequestedAttribute>
1466
				         
1467
			 <md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1468
			 </md:RequestedAttribute>
1469
				         
1470
			 <md:RequestedAttribute FriendlyName="cn" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1471
			 </md:RequestedAttribute>
1472
				         
1473
			 <md:RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
1474
			 </md:RequestedAttribute>
1475
		
1476
		       </md:AttributeConsumingService>
1477

  
1478
			</md:SPSSODescriptor>
1479

  
1480

  
1481
		<md:Organization>
1482
			<md:OrganizationName xml:lang="en">CROUS de Reims</md:OrganizationName>
1483
			<md:OrganizationDisplayName xml:lang="en">CROUS de Reims</md:OrganizationDisplayName>
1484
			<md:OrganizationURL xml:lang="en">http://www.crous-reims.fr</md:OrganizationURL>
1485
		</md:Organization>
1486
		
1487

  
1488
			
1489
			    <md:ContactPerson contactType="technical">
1490
			     <md:EmailAddress>informatique@crous-reims.fr</md:EmailAddress>
1491
		        </md:ContactPerson>
1492
		    	
1493

  
1494
		
1495
		</md:EntityDescriptor></md:EntitiesDescriptor>
tests/federation-sample.xml
1
<?xml version="1.0" encoding="UTF-8" standalone="no"?><md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:pyff="http://pyff.io/NS" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="_20171018T113001Z" Name="https://federation.renater.fr/" cacheDuration="PT1H" validUntil="2017-10-27T11:30:01Z"><ds:Signature>
2
<ds:SignedInfo>
3
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
4
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
5
<ds:Reference URI="">
6
<ds:Transforms>
7
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
8
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
9
</ds:Transforms>
10
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
11
<ds:DigestValue>JKdLdd5yGvkFdb1fCAByMMnurIKYhZepRouZfOjIUrg=</ds:DigestValue>
12
</ds:Reference>
13
</ds:SignedInfo>
14
<ds:SignatureValue>
15
OTexfi8c63TsP1V9j5m6digA2NomUfqBtT8pPKhwdqEDQS5qLh6fxvT+wWkP6JaIhkP8nxwpbArl
16
7cUHkRv5ibZzcknIAjXYMhsSTtFQUq89OMcDHtZHG54jiKyHPhu2+XEbvv6DsAYanYC6SHEnGjNG
17
opnOEUB2XqeycsvvTQQIuWZEoABTVcKYyk2CW7Ij5EUmPOAPiidtbt8lzrtkV6dwLbkyoEbChAyj
18
emrL/oS01aJgT9sQoJxR8lyRMGiZ/BwQqYTareiKwOXLPdGThzsfZXD8de9T1xuysILaAM7sHPJV
19
QfrQJm80Zo2MM/GnhJTO9rc4m3kRnRhqmA6qMw==
20
</ds:SignatureValue>
21
<ds:KeyInfo>
22
<ds:KeyValue>
23
<ds:RSAKeyValue>
24
<ds:Modulus>
25
71+vTf66BPgYUF7sm4T++W69qMVyGQn9wNqpBLc6sp53eq/JRTOUD26Yehjsld5qN52Bv2r5QG7o
26
4VU123akXUYzupvq1f+tmF9NwYa7MPEPFzCzJHhNXjZNRxcsW1WLW34fhQCm0oak3oSPoNo5qeGi
27
jNsTSkgSt1mPH0P8d95af2VJnT6zbrclxvH4emqpT9oGLsWqKWLlIbZ7u1PUjuNVwLHuj909/apm
28
C13RBIpV52fey4qey34bnRHdCTknZeN/TJLTJ9hMWzz9TbdjfIFaiF7MeY+OYRXzUJeQuHHMu/2I
29
emkoR26mYi6irvmx8AdPcPCwcRKw2Ca4xLhbNw==
30
</ds:Modulus>
31
<ds:Exponent>AQAB</ds:Exponent>
32
</ds:RSAKeyValue>
33
</ds:KeyValue>
34
<ds:X509Data>
35
<ds:X509Certificate>
36
MIIC9zCCAd+gAwIBAgIEfe6j3jANBgkqhkiG9w0BAQsFADAsMSowKAYDVQQDEyFTQU1MIE1ldGFk
37
YXRhIFNpZ25pbmcgQ2VydGlmaWNhdGUwHhcNMTYwNzI5MDczNjM4WhcNMjYwNjA3MDczNjM4WjAs
38
MSowKAYDVQQDEyFTQU1MIE1ldGFkYXRhIFNpZ25pbmcgQ2VydGlmaWNhdGUwggEiMA0GCSqGSIb3
39
DQEBAQUAA4IBDwAwggEKAoIBAQDvX69N/roE+BhQXuybhP75br2oxXIZCf3A2qkEtzqynnd6r8lF
40
M5QPbph6GOyV3mo3nYG/avlAbujhVTXbdqRdRjO6m+rV/62YX03Bhrsw8Q8XMLMkeE1eNk1HFyxb
41
VYtbfh+FAKbShqTehI+g2jmp4aKM2xNKSBK3WY8fQ/x33lp/ZUmdPrNutyXG8fh6aqlP2gYuxaop
42
YuUhtnu7U9SO41XAse6P3T39qmYLXdEEilXnZ97Lip7LfhudEd0JOSdl439MktMn2ExbPP1Nt2N8
43
gVqIXsx5j45hFfNQl5C4ccy7/Yh6aShHbqZiLqKu+bHwB09w8LBxErDYJrjEuFs3AgMBAAGjITAf
44
MB0GA1UdDgQWBBTT88iZzWO+hN9SBUkpx871lmTuLTANBgkqhkiG9w0BAQsFAAOCAQEABoPpODry
45
XwiM5jjtqk6veR02FevCKHpZP6Od7Kqcfs6lg5LcQmGUOgpmW3Gg4UMjBYkgARsT2Nsnah1CJqa8
46
cjvv8p5KEIhY0hVS8iMJnrb3PDeiFSeP4xSfct/6z/ebV4+QFl22bsm2zpAC6BpFz8+IJ/jAmQzT
47
Vob4MAUeQPnwwzm3xz6yanLZx7BK5cfrTCa+hrarNQCboRjXPwiejF8WRCxpgRHH6yNs5QH/Z6o5
48
e3tUP7uEpn2Ob+kcLsEMGb9DghkoDAgkHCOZeTy+7hgxt+/T94cLTa58gVtvEOnd0GuL7Vfd+IVd
49
XgSard8RfR3OyZlf6M4aSGQA73sskQ==
50
</ds:X509Certificate>
51
</ds:X509Data>
52
</ds:KeyInfo>
53
</ds:Signature><md:EntityDescriptor entityID="https://access-check.edugain.org/simplesaml/saml2/idp/metadata.php">
54
			<md:Extensions>
55
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2015-01-30T15:32:58Z">
56
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
57
				</mdrpi:RegistrationInfo>
58
			</md:Extensions>
59
		<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
60
			<md:Extensions>
61
    				<shibmd:Scope regexp="false">access-check.edugain.org</shibmd:Scope>
62

  
63
			    <mdui:UIInfo>
64

  
65
			      <mdui:DisplayName xml:lang="en">eduGAIN Access Check</mdui:DisplayName>
66

  
67
			      <mdui:Logo height="16" width="16">data:image/png;base64,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</mdui:Logo>
68
			      <mdui:InformationURL xml:lang="fr">http://www.renater.fr</mdui:InformationURL>
69
			      <mdui:Description xml:lang="en">eduGAIN Access Check allows administrators of a Service Provider (SP) registered in eduGAIN to create test accounts with different profiles to validate the behaviour and test federated login. The test accounts can only be used to access own services.</mdui:Description>
70
          		      <mdui:DisplayName xml:lang="fr">eduGAIN Access Check</mdui:DisplayName>
71
          		      <mdui:Description xml:lang="fr">eduGAIN Access Check allows administrators of a Service Provider (SP) registered in eduGAIN to create test accounts with different profiles to validate the behaviour and test federated login. The test accounts can only be used to access own services.</mdui:Description>
72
      			    </mdui:UIInfo>
73
			</md:Extensions>
74
				<md:KeyDescriptor use="signing">
75
<ds:KeyInfo>
76

  
77
					  <ds:X509Data>
78
					    <ds:X509Certificate>
79
					      MIID2zCCAsOgAwIBAgIJAJpdV2MFitUqMA0GCSqGSIb3DQEBBQUAMIGDMQswCQYD
80
VQQGEwJGUjEVMBMGA1UEBwwMRGVmYXVsdCBDaXR5MQ4wDAYDVQQKDAVHRUFOVDEd
81
MBsGA1UEAwwUdGVzdC1pZHAuZWR1Z2Fpbi5vcmcxLjAsBgkqhkiG9w0BCQEWH3Rl
82
c3RpZHBhY2NvdW50bWFuYWdlckBnZWFudC5uZXQwHhcNMTQxMjE4MTAxODU5WhcN
83
MjQxMjE3MTAxODU5WjCBgzELMAkGA1UEBhMCRlIxFTATBgNVBAcMDERlZmF1bHQg
84
Q2l0eTEOMAwGA1UECgwFR0VBTlQxHTAbBgNVBAMMFHRlc3QtaWRwLmVkdWdhaW4u
85
b3JnMS4wLAYJKoZIhvcNAQkBFh90ZXN0aWRwYWNjb3VudG1hbmFnZXJAZ2VhbnQu
86
bmV0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo48FFP0P/81e3WHb
87
U91F/TYDZC/JypEqO2XQNH50baXpk2JrJFVFOWdgdK6qWHsLznuxngRsfOasAaVA
88
Ob1Bf3g2xgPUd2htSLxds+o/Y24DOM6ZairxbWJk2rOvLhJFchlrcNWCpMtUCkfJ
89
xmqGmeo93XAud5byj3wQ1NuH2o8rjTPAkMgQdr8D2b8EG1NYEH00AqRlXZTFCWGL
90
KDEuZwyta6vgMQYT4K6UF/F+HWF2wzbmVgRTHguJ0rzNqz6t+9CtLkhyZO+/57Ro
91
4U0ikshVWkUOENPKCnB1t+ebs/AsNozbIGA/HcdtwUwDgIowv/K0hdnLDC1vz6/S
92
F3rnGQIDAQABo1AwTjAdBgNVHQ4EFgQUgWN9jmJxOEHYU5m8D0atl895HxowHwYD
93
VR0jBBgwFoAUgWN9jmJxOEHYU5m8D0atl895HxowDAYDVR0TBAUwAwEB/zANBgkq
94
hkiG9w0BAQUFAAOCAQEAXvlBHMaBK6m0PQNanTqGBRdRAFt8Xkr5texD5mPTmS/7
95
nqnxlN0orqYWGCaARmQE+T77EB2a2n9g2s130pUXwJxcbUwIOdPKH6CMKEHT/512
96
bndJXQ3DyhkuVSLtRFOdfleIhi8qUkNC9FWxM4jDHDTTQtNEHnCjFxlhxw+ri5QJ
97
AVKpH9MkcuIkM6Jx+QhNwTDwCRIJffoDOH420yR5EWx/sQ4tjKQGiFOPv/WHFjXd
98
LqHU+X8ErzxeNmUHHST6pHePWRCMtoPTdCPhEroJhou6NMHh8ylQOIVHt6gggc7r
99
kUWMUybDUxPp49qMeNkdKqFPby2aW7ouKRoOXuxZhg==
100
					    </ds:X509Certificate>
101
					  </ds:X509Data>
102

  
103
					</ds:KeyInfo>
104
				</md:KeyDescriptor>
105

  
106

  
107

  
108

  
109

  
110

  
111
			<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
112

  
113

  
114

  
115
	        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://access-check.edugain.org/simplesaml/saml2/idp/SSOService.php"/>
116

  
117

  
118

  
119
		</md:IDPSSODescriptor>
120

  
121

  
122

  
123
		<md:Organization>
124

  
125
			<md:OrganizationName xml:lang="en">eduGAIN Access Check</md:OrganizationName>
126
			<md:OrganizationDisplayName xml:lang="en">eduGAIN Access Check</md:OrganizationDisplayName>
127
			<md:OrganizationURL xml:lang="en">http://www.renater.fr</md:OrganizationURL>
128

  
129
		</md:Organization>
130

  
131

  
132
			    <md:ContactPerson contactType="technical">
133
			     <md:EmailAddress>edugain-integration@geant.net</md:EmailAddress>
134
		        </md:ContactPerson>
135

  
136

  
137
	</md:EntityDescriptor><md:EntityDescriptor entityID="https://aishib.agropolis.fr/idp/shibboleth">
138
			<md:Extensions>
139
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2013-06-06T11:49:20Z">
140
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
141
				</mdrpi:RegistrationInfo>
142
			</md:Extensions>
143
		<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
144
			<md:Extensions>
145
    				<shibmd:Scope regexp="false">agropolis.fr</shibmd:Scope>
146

  
147
			    <mdui:UIInfo>
148

  
149
			      <mdui:DisplayName xml:lang="en">Agropolis International</mdui:DisplayName>
150

  
151
			      <mdui:Logo height="16" width="16">data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAIAAACQkWg2AAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAAAQAAAAEABcxq3DAAACPUlEQVQoz21SPW8TQRR8u7d3ju34Er6UCHACRqK4Bjk0oDSEjiYSBQVS8k9AkWgp+AuUASGEaCASkoPcgARVMF8iTnxJwMFJfL47397u3u6jsGVFwLzmFTN6ozdDEBEAAOD4kiRJsVgkhMA/YMfZzc3NVstnzGq1/KXlJfgf2Ii9XquVZ2YWbi5Io4MsbfPeZK4wRm0AOH6KICIivq2tV6/O5cYLHztbW9FvYTKuZaLk7PjpW+UrJXtspCHGmGazCQBnZ8svtj/0tbAINYhcy1DyThpRhHtztyedwkBDAWBnZ6dSqbzZ+7THu0IraTJplDSZ0JnQ2Y+482jj1cgSRUTHdrhW9fa3SKaxErFKIyUiKaIsjVQaKf5s631HxP1+X2vNwjB0J9zd+OgnD044Ra4lI5ZBw7XqyeRQREciaqe9xoE/K/OFfIENnqBM1uZBqlWBOYxQjYZnqieTThru8zCU3AASIAjIXNellGLePkjCUPICy1mEDAShSg7SqCsTBtQ7WfY3vlarVUYpdUsuAs5PXV7dfpe3HEYtjSbNZJwJoRUi3rl4fSrvfufctm0ySA0RD0V84+WDL1EbCCDCYIDApeKZ+uKK6faDIPA8jw7jIORUbry2eH+5Mu8ARTSAkCPW3QvX6osrE+B8bjQ8zxu2aACDaIwxxuzzsLbbePj88a8k0Mb4vr/2ei3LMoOIiGRU0iGGVuDp6pNz5fNSiKnpac/zgAABMuzSXwIggIjdbrdUKjHGYGQaAAD+AJBJecXxnEvWAAAAJXRFWHRkYXRlOmNyZWF0ZQAyMDE1LTA3LTIwVDEwOjQ4OjE1KzAyOjAwpWiGMQAAACV0RVh0ZGF0ZTptb2RpZnkAMjAxNS0wNy0yMFQxMDo0ODoxNSswMjowMNQ1Po0AAAAASUVORK5CYII=</mdui:Logo>
152
			      <mdui:InformationURL xml:lang="fr">http://www.agropolis.fr</mdui:InformationURL>
153

  
154
          		      <mdui:DisplayName xml:lang="fr">Agropolis International</mdui:DisplayName>
155

  
156
      			    </mdui:UIInfo>
157
			</md:Extensions>
158
				<md:KeyDescriptor use="signing">
159
<ds:KeyInfo>
160

  
161
					  <ds:X509Data>
162
					    <ds:X509Certificate>
163
					      MIIDNzCCAh+gAwIBAgIUYY3sGXwChkj2CRy6QFDvkdj2zlAwDQYJKoZIhvcNAQEF
164
BQAwHjEcMBoGA1UEAxMTYWlzaGliLmFncm9wb2xpcy5mcjAeFw0xMzA1MTUxMzM3
165
MTJaFw0zMzA1MTUxMzM3MTJaMB4xHDAaBgNVBAMTE2Fpc2hpYi5hZ3JvcG9saXMu
166
ZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrDy6lrhIBjcxv16n
167
4UJ2cEMYPO4wSmfDwhO6feoSIEuIblYRHE2nQKirMokwD6seF4rbDHyxLXg/ColL
168
VLv+0CJteIOZjSCgSN90WzQRrC1Ex5sJfPu6yPEXvW8H1906gEg6ok8rlCIHRGfE
169
15pHK5eqxQS5f2n8c2t/Uk33/FBj79/hb3Cd7vE4mdlvReD3AFswC0lV4bPmj3Ka
170
KUuMj9xwipwnfWCu6p2/ZJF4M3ADU5grXHJ2Vqmd8DWm5raaObKjYwJddbRBByI8
171
bJJLIwAQQmX4Dh4hf1QKlf2oqWPWVQxLQp0erL1U8IWmj1RG8TTH9xOJl6kkEhYq
172
Z2gfAgMBAAGjbTBrMEoGA1UdEQRDMEGCE2Fpc2hpYi5hZ3JvcG9saXMuZnKGKmh0
173
dHBzOi8vYWlzaGliLmFncm9wb2xpcy5mci9pZHAvc2hpYmJvbGV0aDAdBgNVHQ4E
174
FgQU9A7iQ8Qo+t2JCpKuOOV9YBoYs4MwDQYJKoZIhvcNAQEFBQADggEBAG0LOW6I
175
F+M8n2NpzyQjfVCJCA6QhWjbXrfemiPJFZGZZb2dVmHof4yCpCUYgHOBoZaXPOlB
176
nLYsUWvFZ6V2GELZpLHzHSSrYidieW07qQkh1DwcIYpvtZgLviOtT/tCEGsk925f
177
DUoGdeIqpqt54WZcW9+TbKicvjg3JT4BFOQ17bFNwPW+YjTbvsWYxen+e0mRp4vM
178
V0yMu2f3bccVhePASSZGL3yod3sJ1dPvlrJO9c35BekhtirolVjZqMQ0AYPVifua
179
yIU0dWXsZkAOcBL9kZFbJcYRUIxMgvp8U2Zdv1+ZlwOyXnnWDOOh9wjuT7FAyObU
180
ChvjHlgZHkvLwJI=
181
					    </ds:X509Certificate>
182
					  </ds:X509Data>
183

  
184
					</ds:KeyInfo>
185
				</md:KeyDescriptor>
186

  
187

  
188

  
189

  
190

  
191
			<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
192
			<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
193

  
194

  
195
			<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aishib.agropolis.fr/idp/profile/SAML2/POST/SSO"/>
196

  
197
	        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aishib.agropolis.fr/idp/profile/SAML2/Redirect/SSO"/>
198

  
199

  
200
			<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aishib.agropolis.fr/idp/profile/Shibboleth/SSO"/>
201

  
202

  
203
		</md:IDPSSODescriptor>
204

  
205

  
206

  
207
		<md:Organization>
208

  
209
			<md:OrganizationName xml:lang="en">Agropolis International</md:OrganizationName>
210
			<md:OrganizationDisplayName xml:lang="en">Agropolis International</md:OrganizationDisplayName>
211
			<md:OrganizationURL xml:lang="en">http://www.agropolis.fr</md:OrganizationURL>
212

  
213
		</md:Organization>
214

  
215

  
216

  
217
			    <md:ContactPerson contactType="technical">
218
				 <md:SurName>Jean Cerda</md:SurName>
219
				 <md:EmailAddress>cerda@agropolis.fr</md:EmailAddress>
220
		        </md:ContactPerson>
221

  
222

  
223

  
224
			    <md:ContactPerson contactType="technical">
225
				 <md:SurName>Jean-Pierre  Allano</md:SurName>
226
				 <md:EmailAddress>allano@agropolis.fr</md:EmailAddress>
227
		        </md:ContactPerson>
228

  
229

  
230

  
231

  
232
	</md:EntityDescriptor><md:EntityDescriptor entityID="https://ambre.vetagro-sup.fr/idp/shibboleth">
233
			<md:Extensions>
234
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2013-01-14T16:11:53Z">
235
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
236
				</mdrpi:RegistrationInfo>
237
			</md:Extensions>
238
		<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
239
			<md:Extensions>
240
    				<shibmd:Scope regexp="false">vetagro-sup.fr</shibmd:Scope>
241

  
242
			    <mdui:UIInfo>
243

  
244
			      <mdui:DisplayName xml:lang="en">Vetagro Sup</mdui:DisplayName>
245

  
246
			      <mdui:Logo height="16" width="16">data:image/png;base64,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</mdui:Logo>
247
			      <mdui:InformationURL xml:lang="fr">http://www.vetagro-sup.fr</mdui:InformationURL>
248

  
249
          		      <mdui:DisplayName xml:lang="fr">Vetagro Sup</mdui:DisplayName>
250

  
251
      			    </mdui:UIInfo>
252
			</md:Extensions>
253
				<md:KeyDescriptor use="signing">
254
<ds:KeyInfo>
255

  
256
					  <ds:X509Data>
257
					    <ds:X509Certificate>
258
					      MIIDPDCCAiSgAwIBAgIVAL9PsuadPSIZcMHNxlK/oevezmzWMA0GCSqGSIb3DQEB
259
BQUAMB8xHTAbBgNVBAMTFGFtYnJlLnZldGFncm8tc3VwLmZyMB4XDTEyMTEwODEw
260
MTQwNFoXDTMyMTEwODEwMTQwNFowHzEdMBsGA1UEAxMUYW1icmUudmV0YWdyby1z
261
dXAuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/ptfpmkomwmT
262
4RsID+1Ce1dX0eUjcLgSOZN8hVpHWLag2ERWkpmvB5aK7BAFcI5i//Gk80tAiasu
263
JtlZhBnEw54aTJRGpyL2CVkHyl6SMRxprIi1Ji67IoGqEgUeGaheAxo+tG5e1WSc
264
bIbldcSKdwvjAV+7HSB4C6NqLsAzJH25++yaRH2uf2LTD0TDzNR9Q2hVj/VyYWR+
265
K3HWI1Snjn/i7aFfZZhYmBkwHuQOaPhwCM+khikg5XicMsxUhHCMi93UgHGIsdkr
266
IEGj4xydBTUKsLaykeuFS8EgXbWwCLGkeX76w8xDoFIpnppU/yFd9v7Zg3EBfn4p
267
kTW3GdIjAgMBAAGjbzBtMEwGA1UdEQRFMEOCFGFtYnJlLnZldGFncm8tc3VwLmZy
268
hitodHRwczovL2FtYnJlLnZldGFncm8tc3VwLmZyL2lkcC9zaGliYm9sZXRoMB0G
269
A1UdDgQWBBTPTqWkVHrHXFjmxMWkNt/sp2h5ozANBgkqhkiG9w0BAQUFAAOCAQEA
270
FvXMtfBUmRZCzz8CjanGzr1TBUPmnkrKci5AtkseKw9YlfUmBXTHB01y697nYq6m
271
RB6KhvfW212h9CF0IOEEjoadgDhXqGYhq8PnAOtT4Ty3XDy8SbRh8aQWfvnfSngv
272
FdpHRiSpj5UXXuT5zTtkf59h58XKtEfCkMbUzvdOgUobJzpD0WISmQHPQnx+Neg6
273
9j7oMRrDiZjS39Om8Imu9xvsnddDM3PlsDBIsvrr1o7K5iLkEdR1YYX0ZNDbiFuw
274
QXXl2dwQPB8KrScPUvCe57slU2gFQvvIBzjQysxC6V6TPSuM3A/ee56lACuB3jKj
275
oYkHQc5Gj/1rSMLmu9aLMg==
276
					    </ds:X509Certificate>
277
					  </ds:X509Data>
278

  
279
					</ds:KeyInfo>
280
				</md:KeyDescriptor>
281

  
282

  
283

  
284

  
285

  
286
			<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
287
			<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
288

  
289

  
290
			<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ambre.vetagro-sup.fr/idp/profile/SAML2/POST/SSO"/>
291

  
292
	        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ambre.vetagro-sup.fr/idp/profile/SAML2/Redirect/SSO"/>
293

  
294

  
295
			<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://ambre.vetagro-sup.fr/idp/profile/Shibboleth/SSO"/>
296

  
297

  
298
		</md:IDPSSODescriptor>
299

  
300

  
301

  
302
		<md:Organization>
303

  
304
			<md:OrganizationName xml:lang="en">Vetagro Sup</md:OrganizationName>
305
			<md:OrganizationDisplayName xml:lang="en">Vetagro Sup</md:OrganizationDisplayName>
306
			<md:OrganizationURL xml:lang="en">http://www.vetagro-sup.fr</md:OrganizationURL>
307

  
308
		</md:Organization>
309

  
310

  
311

  
312
			    <md:ContactPerson contactType="technical">
313
				 <md:SurName>Nicolas Aulas</md:SurName>
314
				 <md:EmailAddress>nicolas.aulas@vetagro-sup.fr</md:EmailAddress>
315
		        </md:ContactPerson>
316

  
317

  
318

  
319

  
320

  
321

  
322
	</md:EntityDescriptor><md:EntityDescriptor entityID="https://antimoine.insa-strasbourg.fr/idp/shibboleth">
323
			<md:Extensions>
324
				<mdrpi:RegistrationInfo registrationAuthority="https://federation.renater.fr/" registrationInstant="2014-02-11T08:44:08Z">
325
					<mdrpi:RegistrationPolicy xml:lang="en">https://services.renater.fr/federation/en/metadata_registration_practice_statement</mdrpi:RegistrationPolicy>
326
				</mdrpi:RegistrationInfo>
327
			</md:Extensions>
328
		<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
329
			<md:Extensions>
330
    				<shibmd:Scope regexp="false">insa-strasbourg.fr</shibmd:Scope>
331

  
332
			    <mdui:UIInfo>
333

  
334
			      <mdui:DisplayName xml:lang="en">INSA Strasbourg</mdui:DisplayName>
335

  
336
			      <mdui:Logo height="16" width="16">data:image/png;base64,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</mdui:Logo>
337
			      <mdui:InformationURL xml:lang="fr">http://www.insa-strasbourg.fr</mdui:InformationURL>
338

  
339
          		      <mdui:DisplayName xml:lang="fr">INSA Strasbourg</mdui:DisplayName>
340

  
341
      			    </mdui:UIInfo>
342
			</md:Extensions>
343
				<md:KeyDescriptor use="signing">
344
<ds:KeyInfo>
345

  
346
					  <ds:X509Data>
347
					    <ds:X509Certificate>
348
					      MIIDUDCCAjigAwIBAgIVAIbX8U0uAqAhuXm1jWxiFpggtDTDMA0GCSqGSIb3DQEB
349
CwUAMCQxIjAgBgNVBAMMGXNvdWZyZS5pbnNhLXN0cmFzYm91cmcuZnIwHhcNMTYw
350
OTI3MTIzNjIxWhcNMzYwOTI3MTIzNjIxWjAkMSIwIAYDVQQDDBlzb3VmcmUuaW5z
351
YS1zdHJhc2JvdXJnLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
352
sEE02sLRPAG5N81DMHEeGpI2MYF8yG/RiwH07cFIlLqgV80ewOmi0FWPYijxMb8A
353
bmx0RwUMvJBVI6WMxtT9fykhID20k8rWOuYOzvaynzVqCktqVgKoEAxP1PFE9b0n
354
iGKFprjjNl9ZD90GOUsxbAO7yXG9Q4WBa/eThl6XkUvNkSaZp5hcdWrgcAdsae3q
355
iD/uxFa38NXNNeRLGyfxjd2K5qYSzbwBza9s9TOq1+pfw7sxu3/4BnfQ0RLGO6co
356
4tH4Mufh0ome4cyYk4pvW5DOd1AznxDb8HpqvE0zwEsa69c/FDX0akgFZydmc77a
357
j6USn6JKjjbO49yGtG1gVQIDAQABo3kwdzAdBgNVHQ4EFgQUjzMsxZYiokPYxper
358
9zadM8J0F0kwVgYDVR0RBE8wTYIZc291ZnJlLmluc2Etc3RyYXNib3VyZy5mcoYw
359
aHR0cHM6Ly9zb3VmcmUuaW5zYS1zdHJhc2JvdXJnLmZyL2lkcC9zaGliYm9sZXRo
360
MA0GCSqGSIb3DQEBCwUAA4IBAQBFJKsiS3yfWuDB/E+iqQ0TuQJzL5+JIcloN0dw
361
BFxW3VZOju15zeQ7LwRBg9S4SGLMPJU+LM1lvr68cK9brut/FjF51SETIXEeCWo3
362
7+PIqgOCzraLNinmpU/OtN8ENalOPvpS6Jvbd23qB2t+IqOtZ+j15b0Yq4/on1E3
363
W2F9CVzKpe4EwmmtCPQbe7U1wvhgFylEx797pex8veWs79YSYwqvcKMh79dzl8Fo
364
/CgsO5pDrfKmc6SGMkByq75dZj+PqhZDzZ9EFTxbrXOTaS08VRN6a5Rh2iYRnGxq
365
yZl66tPcaIm5PHgOEmu5X4lPkUoY+Jt36Gj3SGCbYt8qH5S0
366
					    </ds:X509Certificate>
367
					  </ds:X509Data>
368

  
369
					</ds:KeyInfo>
370
				</md:KeyDescriptor>
371

  
372

  
373

  
374
				<md:KeyDescriptor use="signing">
375
				       <ds:KeyInfo>
376
					  <ds:X509Data>
377
					    <ds:X509Certificate>
378
					      MIIDXDCCAkSgAwIBAgIVAKI+qiqDCk9wTTqn7OVAoZrvj/CpMA0GCSqGSIb3DQEB
379
BQUAMCcxJTAjBgNVBAMTHGFudGltb2luZS5pbnNhLXN0cmFzYm91cmcuZnIwHhcN
380
MTQwMTEzMTAzOTU4WhcNMzQwMTEzMTAzOTU4WjAnMSUwIwYDVQQDExxhbnRpbW9p
381
bmUuaW5zYS1zdHJhc2JvdXJnLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
382
CgKCAQEAtuM8lRjlVjjmrHq9VtguaOMQL+Wd99BiOs56kL3Mbctg1FwH69LYThCW
383
6dOz6WJg/jU/naF7jEikXKc71xGyu7Ph7Iqa9S5hoXXAT8u/0q2nZDeTOraJqKe1
384
FMF2RzXhEEMyQO3CiKNK9b+tbKoNZS7FQCixMZklWZPt4EcEKd6jyRq1WYX3dpnb
385
r9I/aCdhtK/PGvGe5gKTDoTR2HKyWKJTc/obf8x/vlYIEwiaGgdlqI2KiBE0x48n
386
zQdP6XVi3T8ZWbnkLmCfgJtP2C8PtEJuwDRAy0Z9N4DSwvxn5YCVYgBLSi0TLa10
387
B/lUqqBezZrTrA9p9Lt8JtGXW5YGHwIDAQABo38wfTBcBgNVHREEVTBTghxhbnRp
388
bW9pbmUuaW5zYS1zdHJhc2JvdXJnLmZyhjNodHRwczovL2FudGltb2luZS5pbnNh
389
LXN0cmFzYm91cmcuZnIvaWRwL3NoaWJib2xldGgwHQYDVR0OBBYEFLFkjPZUc9JY
390
qrWjldJ/iGGkKAt4MA0GCSqGSIb3DQEBBQUAA4IBAQBSk/wU1mRn4VF2ifmy261K
391
DK7uX+t1H1hh8S38fKSFU7HoNXJTV3vQnmBOpYIGC1gtvmb+qjqpNtikU2zO84Gq
392
Q0bXHxYF2d9RUP89mKaFxE5uNcXFmlOA3ChZY3pMT5zwAPI/T60tGrex7zci7OLn
393
JDAQj/q4Yk9ejx6JTFggQSCCVh+oV/SDIMd2p5AY6H3mto3b6XCk7Lssa8a/D30k
394
pEkZnhTKdN82eRyynuOR7UDU4tasV4d7Mi/j53f5ihnRcsvwh/pYodjoVYY8cEcZ
395
JLnAXYF8coSwh8UN4D/0NHsvTuSOFQc85hGrqacMsvxiQiw9mv01AX5+A5YLEbVQ
396
					    </ds:X509Certificate>
397
					  </ds:X509Data>
398
					</ds:KeyInfo>
399
				</md:KeyDescriptor>
400

  
401

  
402

  
403
			   <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://antimoine.insa-strasbourg.fr/idp/profile/SAML2/Redirect/SLO"/>
404

  
405
			   <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://antimoine.insa-strasbourg.fr/idp/profile/SAML2/POST/SLO"/>
406

  
407
			   <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://antimoine.insa-strasbourg.fr/idp/profile/SAML2/SOAP/SLO"/>
408

  
409

  
410
			<md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
411
			<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
412

  
413

  
414
			<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://antimoine.insa-strasbourg.fr/idp/profile/SAML2/POST/SSO"/>
415

  
416
	        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://antimoine.insa-strasbourg.fr/idp/profile/SAML2/Redirect/SSO"/>
417

  
418

  
419
			<md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://antimoine.insa-strasbourg.fr/idp/profile/Shibboleth/SSO"/>
420

  
421

  
422
		</md:IDPSSODescriptor>
423

  
424

  
425

  
426
		<md:Organization>
427

  
428
			<md:OrganizationName xml:lang="en">INSA Strasbourg</md:OrganizationName>
429
			<md:OrganizationDisplayName xml:lang="en">INSA Strasbourg</md:OrganizationDisplayName>
430
			<md:OrganizationURL xml:lang="en">http://www.insa-strasbourg.fr</md:OrganizationURL>
431

  
432
		</md:Organization>
433

  
434

  
435

  
436
			    <md:ContactPerson contactType="technical">
437
				 <md:SurName>Lahsen BOUZID</md:SurName>
438
				 <md:EmailAddress>lahsen.bouzid@insa-strasbourg.fr</md:EmailAddress>
439
		        </md:ContactPerson>
440

  
441

  
442

  
443
			    <md:ContactPerson contactType="technical">
444
				 <md:SurName>Simon SCHERRER</md:SurName>
445
				 <md:EmailAddress>simon.scherrer@insa-strasbourg.fr</md:EmailAddress>
446
		        </md:ContactPerson>
447

  
448

  
449

  
450

  
451
	</md:EntityDescriptor></md:EntitiesDescriptor>
tests/test_federations_utils.py
1
import os
2
import time
3

  
4
from django.utils.text import slugify
5
from httmock import HTTMock
6

  
7
from mellon.federation_utils import get_federation_from_url, truncate_unique
8
from utils import sample_federation_response
9

  
10

  
11
def test_mock_fedmd_caching():
12
    url = u'https://dummy.mdserver/metadata.xml'
13
    filepath = os.path.join('metadata-cache/', truncate_unique(slugify(url)))
14

  
15
    if os.path.isfile(filepath):
16
        os.remove(filepath)
17

  
18
    with HTTMock(sample_federation_response):
19
        tmp = get_federation_from_url(url)
20

  
21
    assert tmp == filepath
22

  
23
    st = os.stat(filepath)
24

  
25
    assert os.path.isfile(filepath)
26
    assert st.st_mtime < time.time() + 3600
27

  
28
    with HTTMock(sample_federation_response):
29
        get_federation_from_url(url)
30
    stnew = os.stat(filepath)
31

  
32
    assert stnew.st_ctime == st.st_ctime
33
    assert stnew.st_mtime == st.st_mtime
34

  
35
    storig = os.stat(os.path.join('tests', 'federation-sample.xml'))
36

  
37
    assert storig.st_size == st.st_size
38

  
39
    os.remove(filepath)
tests/test_utils.py
1
import os
1 2
import re
2 3
import datetime
3 4

  
......
10 11
import mellon.utils
11 12
from xml_utils import assert_xml_constraints
12 13

  
13
from utils import error_500, metadata_response
14
from utils import error_500, metadata_response, sample_federation_response, \
15
        html_response
14 16

  
15 17

  
16 18
def test_create_server_connection_error(mocker, rf, private_settings, caplog):
......
39 41
    assert 'failed with error' in caplog.text
40 42

  
41 43

  
44
def test_load_federation(mocker, rf, private_settings, caplog, tmpdir):
45
    private_settings.MELLON_FEDERATIONS = [
46
            'tests/dummy_md.xml',
47
            'https://dummy.server/metadata.xml',
48
            # ('tests/dummy_md.xml', 'tests/dummy_cert.pem')
49
    ]
50
    request = rf.get('/')
51
    assert 'failed with error' not in caplog.text
52
    with HTTMock(sample_federation_response):
53
        server = create_server(request)
54
    assert len(server.providers) == 14
55

  
56

  
42 57
def test_create_server_invalid_metadata(mocker, rf, private_settings, caplog):
43 58
    private_settings.MELLON_IDENTITY_PROVIDERS = [
44 59
        {
tests/utils.py
16 16
    return response(200, content=file('tests/metadata.xml').read())
17 17

  
18 18

  
19
@all_requests
20
def sample_federation_response(url, request):
21
    return response(200, content=file('tests/federation-sample.xml').read())
22

  
23

  
19 24
def reset_caplog(cap):
20 25
    cap.handler.stream.truncate(0)
21 26
    cap.handler.records = []
22
-