<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style>
</head>
<body style="word-wrap:break-word" fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<font face="Tahoma" size="2" color="#000000"><b>From:</b> users-bounces@shibboleth.net [users-bounces@shibboleth.net] on behalf of Nate Klingenstein [ndk@internet2.edu]<br>
<b>Sent:</b> Thursday, June 06, 2013 8:37 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: SAML metadata validation try two</font></div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
> because <a href="http://www.w3.org" target="_blank">www.w3.org</a> is timing out on your schema download requests(see first 8 lines of the error log you posted) </div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
Okay; .xsd validation seems to work fine using xerces-j java -classpath ... sax.Counter -n -np -s -v {$filename}-- but I can't get it to work with the xmllint command I found at <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness</a> .
I tried the xmllint command on three unrelated systems and all gave me that error.</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
> <span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; ">The surefire way to debug those is to just try loading the file into an IdP or an SP and seeing whether it complains.</span><span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; "> </span></div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; "><br>
</span></div>
<div id="divRpF577447" style="direction: ltr; "><font face="Segoe UI, Helvetica, Arial, sans-serif" size="3">I'm not sure how to do that. I just have a test SP, UCOP will be my IdP. I just figured out how to get my metadata out of /Shibboleth.sso/Metadata
-- are you saying I should have </font><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; white-space: pre-wrap; "><</code><code class="xml keyword" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-weight: bold !important; min-height: inherit !important; color: rgb(51, 102, 153) !important; white-space: pre-wrap; ">MetadataProvider</code><span style="color: rgb(51, 51, 51); font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; line-height: 15px; text-align: left; white-space: pre-wrap; background-color: rgb(255, 255, 255); ">
</span><code class="xml color1" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; color: rgb(128, 128, 128) !important; white-space: pre-wrap; ">type</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border: 0px !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin: 0px !important; outline: 0px !important; overflow: visible !important; padding: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; white-space: pre-wrap; ">="XML"
in my shibboleth2.xml that point to my own metadata and then shibd -t? Just for testing, or should it be that way in production? If I have this set, then will
</code><span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; ">/Shibboleth.sso/Metadata</span><span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; "> return my good metadata rather than generated
metadata?</span></div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
> It'll look more sane if you only list the endpoints for the protocols you actually support.</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
This is a hypothetical metadata file based on a previous thread wherein I asked about mapping of entityID to applications vs. application instances. Scott said I was going to have to edit my metadata anyway, and I'm trying to figure out how to do that so I
can better understand what my options are and what the tradeoffs are.</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
Am I on the right track as far as repeating the Complex Type EndpointType elements with redundant Binding attributes and Location attributes that point to -dev, -stg, and production, assuming the one entityID per application scenario?</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<br>
</div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
On Jun 7, 2013, at 3:26 , Nate Klingenstein wrote:</div>
<div style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; ">
<div>
<div><br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="word-wrap:break-word">Brian,
<div><br>
</div>
<div>How are you invoking xmllint?
<div><br>
</div>
<div>xmllint --noout --schema /opt/xmlschema/saml-schema-metadata-2.0.xsd {$filename}</div>
<div><br>
</div>
<div>gives me a kinda-useful error:</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>trial.error:22: element SPSSODescriptor: Schemas validity error : Element '{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor': Character content other than whitespace is not allowed because the content type is 'element-only'.</div>
<div><br>
</div>
<div>root cause the ` dingbat that seems to be on line 77.</div>
<div><br>
</div>
<div>After fixing that, it validates fine for me.</div>
<div><br>
</div>
<div>
<div>xmllint --noout --schema /opt/xmlschema/saml-schema-metadata-2.0.xsd trial.error </div>
<div>trial.error validates</div>
</div>
<div><br>
</div>
<div>There may be errors in there that are non-syntactic and not caught by xmllint. The surefire way to debug those is to just try loading the file into an IdP or an SP and seeing whether it complains. Those messages are usually pretty descriptive.</div>
<div><br>
</div>
<div>It'll look more sane if you only list the endpoints for the protocols you actually support.</div>
<div><br>
</div>
<div>I believe you can list multiple init:RequestInitiator elements, and those are mostly advisory to IdP deployers.</div>
<div><br>
</div>
<div>Thanks,</div>
<div>Nate.</div>
<div><br>
<div>
<div>On Jun 7, 2013, at 3:12 , Brian Tingle wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite"><span class="Apple-style-span" style="font-family: Tahoma; font-size: 13px; ">
<pre class="line-pre" style="font-size:12px; line-height:16px; font-family:Consolas,'Liberation Mono',Courier,monospace; word-wrap:break-word; width:1309px; margin-top:0px; margin-bottom:0px; padding-top:0px; padding-right:0px; padding-bottom:0px; padding-left:0px; background-color:rgb(255,255,255)"><div class="line" id="file-shib-xml-LC1"><span class="nt" style="color:navy"><md:EntityDescriptor</span> </div><div class="line" id="file-shib-xml-LC2"> <span class="na" style="color:teal">xmlns:md=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:metadata"</span> </div><div class="line" id="file-shib-xml-LC3"> <span class="na" style="color:teal">xmlns:init=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:profiles:SSO:request-init"</span></div><div class="line" id="file-shib-xml-LC4"> <span class="na" style="color:teal">xmlns:ds=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/2000/09/xmldsig#</a>"</span></div><div class="line" id="file-shib-xml-LC5"> </div><div class="line" id="file-shib-xml-LC6"> <span class="na" style="color:teal">xmlns:xsi=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://www.w3.org/2001/XMLSchema-instance" target="_blank">http://www.w3.org/2001/XMLSchema-instance</a>"</span></div><div class="line" id="file-shib-xml-LC7"> <span class="na" style="color:teal">xsi:schemaLocation=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:metadata <a href="http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd" target="_blank">http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd</a>"</span></div><div class="line" id="file-shib-xml-LC8"> </div><div class="line" id="file-shib-xml-LC9"> <span class="na" style="color:teal">ID=</span><span class="s" style="color:rgb(221,17,68)">"_ae6d076f856a2002ad755a3574c7204ddc9424b4"</span> </div><div class="line" id="file-shib-xml-LC10"> <span class="na" style="color:teal">entityID=</span><span class="s" style="color:rgb(221,17,68)">"<a href="https://nuxeo.cdlib.org/sp" target="_blank">https://nuxeo.cdlib.org/sp</a>"</span></div><div class="line" id="file-shib-xml-LC11"> <span class="na" style="color:teal">cacheDuration=</span><span class="s" style="color:rgb(221,17,68)">"P1D"</span></div><div class="line" id="file-shib-xml-LC12"><span class="nt" style="color:navy">></span> </div><div class="line" id="file-shib-xml-LC13"> <span class="c" style="color:rgb(153,153,136); font-style:italic"><!-- 'P1D' = one day in xsd:duration, who knew? --></span></div><div class="line" id="file-shib-xml-LC14"> <span class="c" style="color:rgb(153,153,136); font-style:italic"><!-- xmlns:init info at <a href="http://docs.oasis-open.org/security/saml/Post2.0/sstc-request-initiation-cd-01.html" target="_blank">http://docs.oasis-open.org/security/saml/Post2.0/sstc-request-initiation-cd-01.html</a> --></span></div><div class="line" id="file-shib-xml-LC15"> <span class="c" style="color:rgb(153,153,136); font-style:italic"><!-- xmlns:md info at <a href="http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf" target="_blank">http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf</a> --></span></div><div class="line" id="file-shib-xml-LC16"> <span class="nt" style="color:navy"><md:SPSSODescriptor</span> </div><div class="line" id="file-shib-xml-LC17"> <span class="na" style="color:teal">protocolSupportEnumeration=</span><span class="s" style="color:rgb(221,17,68)">"</span></div><div class="line" id="file-shib-xml-LC18"><span class="s" style="color:rgb(221,17,68)"> urn:oasis:names:tc:SAML:2.0:protocol </span></div><div class="line" id="file-shib-xml-LC19"><span class="s" style="color:rgb(221,17,68)"> urn:oasis:names:tc:SAML:1.1:protocol </span></div><div class="line" id="file-shib-xml-LC20"><span class="s" style="color:rgb(221,17,68)"> urn:oasis:names:tc:SAML:1.0:protocol</span></div><div class="line" id="file-shib-xml-LC21"><span class="s" style="color:rgb(221,17,68)"> "</span></div><div class="line" id="file-shib-xml-LC22"> <span class="nt" style="color:navy">></span></div><div class="line" id="file-shib-xml-LC23"> <span class="nt" style="color:navy"><md:Extensions></span></div><div class="line" id="file-shib-xml-LC24"> <span class="nt" style="color:navy"><init:RequestInitiator</span> </div><div class="line" id="file-shib-xml-LC25"> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:profiles:SSO:request-init"</span> </div><div class="line" id="file-shib-xml-LC26"> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/Login" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/Login</a>"</span></div><div class="line" id="file-shib-xml-LC27"> <span class="nt" style="color:navy">/></span><span class="c" style="color:rgb(153,153,136); font-style:italic"><!-- if I'm using the same entityID for dev, stage, production , then what do I do in init:RequestInitiator? --></span></div><div class="line" id="file-shib-xml-LC28"> <span class="nt" style="color:navy"></md:Extensions></span></div><div class="line" id="file-shib-xml-LC29"> <span class="nt" style="color:navy"><md:KeyDescriptor></span></div><div class="line" id="file-shib-xml-LC30"> <span class="nt" style="color:navy"><ds:KeyInfo></span></div><div class="line" id="file-shib-xml-LC31"> <span class="nt" style="color:navy"><ds:KeyName></span>nuxeo-dev<span class="nt" style="color:navy"></ds:KeyName></span></div><div class="line" id="file-shib-xml-LC32"> <span class="nt" style="color:navy"><ds:X509Data></span></div><div class="line" id="file-shib-xml-LC33"> <span class="nt" style="color:navy"><ds:X509SubjectName></span>CN=nuxeo-dev<span class="nt" style="color:navy"></ds:X509SubjectName></span></div><div class="line" id="file-shib-xml-LC34"> <span class="nt" style="color:navy"><ds:X509Certificate></span>MIIC4jCCAcqgAwIBAgIJAKHzEISxgVpsMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV</div><div class="line" id="file-shib-xml-LC35">BAMTCW51eGVvLWRldjAeFw0xMzA2MDEwMzQ5NDBaFw0yMzA1MzAwMzQ5NDBaMBQx</div><div class="line" id="file-shib-xml-LC36">EjAQBgNVBAMTCW51eGVvLWRldjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC</div><div class="line" id="file-shib-xml-LC37">ggEBALTNY5nzZ004HavyagcNTvHJmOlB9Tvh9xPnaGn2O92lRqMWaR3NKXMUSmnR</div><div class="line" id="file-shib-xml-LC38">FjXTXYdQAnT0xkCS/Wkvur3XfzsN/c1qNlrxFRKtKOgqDDw3t6ttpCnwrxJcWIxF</div><div class="line" id="file-shib-xml-LC39">F6cYTPW/E8GtimiSVv9GAYzzGmFhx+E5oeIdv6H8SiRw333cORoe5Ux4vMoTY6in</div><div class="line" id="file-shib-xml-LC40">uNfecw6Fz1I5kQ/6O0kSSTGjJmIjgFQx0tpw8XJhL2E+jahu9sl3CZLYuqhsdBx9</div><div class="line" id="file-shib-xml-LC41">/srtQBZ/Cem5WBUBtuFnJCiEVw4pDfTzTOe9WBCoVFDQQgOOa/wHbTD6W0kDIKWg</div><div class="line" id="file-shib-xml-LC42">pF6A+ydiKE7aRpkt5Qo5NuZ9AKcCAwEAAaM3MDUwFAYDVR0RBA0wC4IJbnV4ZW8t</div><div class="line" id="file-shib-xml-LC43">ZGV2MB0GA1UdDgQWBBRIbfPEefybNux8qxZ0jnw6V2/D7TANBgkqhkiG9w0BAQUF</div><div class="line" id="file-shib-xml-LC44">AAOCAQEAAROxkv2qnDCmdeYr2cWCX7fO6BRMixZ1KfjUWRdMWnB79/LzZVQDnjgN</div><div class="line" id="file-shib-xml-LC45">SsbYd+MDyaE5Wem67WMp2gwaEkG6bBMBxOa7YwRetPKfdw7DRJ60GXEepdECbXPU</div><div class="line" id="file-shib-xml-LC46">0+TkdRWsAy5QYTotQJaA6/tc8vEAmH3l8BNo7NGCUA1bOXl3m2I+XU5b6j5GKY+e</div><div class="line" id="file-shib-xml-LC47">1PuXw4V7VBEs/Myk7XZSNrEmil39l1x0cheshhLxgweb/a9xVTRSI5ZtTF0srTo8</div><div class="line" id="file-shib-xml-LC48">pQv01Kmdgn6qPCI80/XRg0WWPG5lhR06Hcf9o0bhAF5HV2tdxiCQJn6ieEZ+gz/K</div><div class="line" id="file-shib-xml-LC49">H+OplCprRz65+a5uj0Zv4ed77/rvXw==</div><div class="line" id="file-shib-xml-LC50"><span class="nt" style="color:navy"></ds:X509Certificate></span></div><div class="line" id="file-shib-xml-LC51"> <span class="nt" style="color:navy"></ds:X509Data></span></div><div class="line" id="file-shib-xml-LC52"> <span class="nt" style="color:navy"></ds:KeyInfo></span></div><div class="line" id="file-shib-xml-LC53"> <span class="nt" style="color:navy"></md:KeyDescriptor></span></div><div class="line" id="file-shib-xml-LC54"> <span class="nt" style="color:navy"><md:ArtifactResolutionService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:SOAP"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/Artifact/SOAP" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/Artifact/SOAP</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"0"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC55"> <span class="nt" style="color:navy"><md:ArtifactResolutionService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:SOAP"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/Artifact/SOAP" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/Artifact/SOAP</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"1"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC56"> <span class="nt" style="color:navy"><md:ArtifactResolutionService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:SOAP"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/Artifact/SOAP" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/Artifact/SOAP</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"2"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC57"> </div><div class="line" id="file-shib-xml-LC58"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:SOAP"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/SOAP" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/SOAP</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC59"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/Redirect" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/Redirect</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC60"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/POST" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/POST</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC61"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/Artifact" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SLO/Artifact</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC62"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:SOAP"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/SOAP" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/SOAP</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC63"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/Redirect" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/Redirect</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC64"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/POST" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/POST</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC65"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/Artifact" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SLO/Artifact</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC66"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:SOAP"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SLO/SOAP" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SLO/SOAP</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC67"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SLO/Redirect" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SLO/Redirect</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC68"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SLO/POST" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SLO/POST</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC69"> <span class="nt" style="color:navy"><md:SingleLogoutService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SLO/Artifact" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SLO/Artifact</a>"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC70"> </div><div class="line" id="file-shib-xml-LC71"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/POST" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/POST</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"0"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC72"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"1"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC73"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/Artifact" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/Artifact</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"2"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC74"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:PAOS"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/ECP" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/ECP</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"3"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC75"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:1.0:profiles:browser-post"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML/POST" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML/POST</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"4"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC76"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML/Artifact" target="_blank">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML/Artifact</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"5"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC77">`</div><div class="line" id="file-shib-xml-LC78"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/POST" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/POST</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"6"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC79"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"7"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC80"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/Artifact" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/Artifact</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"8"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC81"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:PAOS"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/ECP" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/ECP</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"9"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC82"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:1.0:profiles:browser-post"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML/POST" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML/POST</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"10"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC83"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML/Artifact" target="_blank">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML/Artifact</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"11"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC84"> </div><div class="line" id="file-shib-xml-LC85"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/POST" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/POST</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"12"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC86"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/POST-SimpleSign</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"13"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC87"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/Artifact" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/Artifact</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"14"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC88"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:2.0:bindings:PAOS"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/ECP" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/ECP</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"15"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC89"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:1.0:profiles:browser-post"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML/POST" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SAML/POST</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"16"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC90"> <span class="nt" style="color:navy"><md:AssertionConsumerService</span> <span class="na" style="color:teal">Binding=</span><span class="s" style="color:rgb(221,17,68)">"urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"</span> <span class="na" style="color:teal">Location=</span><span class="s" style="color:rgb(221,17,68)">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML/Artifact" target="_blank">http://nuxeo.cdlib.org/Shibboleth.sso/SAML/Artifact</a>"</span> <span class="na" style="color:teal">index=</span><span class="s" style="color:rgb(221,17,68)">"17"</span><span class="nt" style="color:navy">/></span></div><div class="line" id="file-shib-xml-LC91"> </div><div class="line" id="file-shib-xml-LC92"> <span class="nt" style="color:navy"></md:SPSSODescriptor></span></div><div class="line" id="file-shib-xml-LC93"> </div><div class="line" id="file-shib-xml-LC94"><span class="nt" style="color:navy"></md:EntityDescriptor></span></div></pre>
</span><span class="Apple-style-span" style="font-family:Tahoma; font-size:13px"></span></blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a></blockquote>
</div>
<br>
</div>
</div>
</div>
</body>
</html>