Metadata Validator - Swedenconnect QA Metadata

Metadata Validator for Sweden Connect QA federation

( https://qa.md.swedenconnect.se/entities/ ) Updated: 2023-04-01 10:20:54 CEST Next Update: 2023-04-01 10:30:54 CEST

Identity Provider

Cybercom Sweden AB (https://eid.test.legitimeringstjanst.se/sc/bankid/) (1)

Cybercom Sweden AB (https://eid.test.legitimeringstjanst.se/sc/bankid/)

(1)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://eid.test.legitimeringstjanst.se/sc/bankid/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Pensionsmyndigheten/Leveransavtal-SYS-2015-71</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Bolagsverket/Leveransavtal-AVT-2015-105</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Domstolsverket/Elektronisk-Underskrift-1420-2018</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">BankID</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Legitimering eller underskrift med svenskt BankID på fil eller kort</mdui:Description>
                <mdui:Description xml:lang="en">Authentication or signing using a Swedish file-based or card-based BankID</mdui:Description>
                <mdui:Logo height="71" width="75">data:image/svg+xml;base64,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</mdui:Logo>
                <mdui:Logo height="113" width="120">data:image/svg+xml;base64,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</mdui:Logo>
            </mdui:UIInfo>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eid.test.legitimeringstjanst.se/sc/bankid/Logout/REDIRECT/"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eid.test.legitimeringstjanst.se/sc/bankid/Logout/POST/"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eid.test.legitimeringstjanst.se/sc/bankid/Authn/REDIRECT/"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eid.test.legitimeringstjanst.se/sc/bankid/Authn/POST/"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.cybercom.com/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.cybercom.com/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:EmailAddress>servicedesk@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:EmailAddress>servicedesk@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: BankID*
-	*en: BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Legitimering eller underskrift med svenskt BankID på fil eller kort*
-	*en: Authentication or signing using a Swedish file-based or card-based BankID*

MDUI-Logotype

Working logotypes present:

H:71	W:75	Type:SVG
H:113	W:120	Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://eid.test.legitimeringstjanst.se/sc/bankid/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Cybercom Sweden AB)

CONTACT-SUPP

Support contact e-mail (servicedesk@cybercom.com) is present

CONTACT-TECH

Technical contact e-mail (servicedesk@cybercom.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Cybercom Sweden AB (https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/) (1)

Cybercom Sweden AB (https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/)

(1)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Pensionsmyndigheten/Leveransavtal-SYS-2015-71</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Bolagsverket/Leveransavtal-AVT-2015-105</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Domstolsverket/Elektronisk-Underskrift-1420-2018</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Mobilt BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Mobile BankID</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Legitimering eller underskrift med svenskt Mobilt BankID</mdui:Description>
                <mdui:Description xml:lang="en">Authentication or signing using a Swedish Mobile BankID</mdui:Description>
                <mdui:Logo height="71" width="75">data:image/svg+xml;base64,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</mdui:Logo>
                <mdui:Logo height="113" width="120">data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9Im5vIj8+DQo8c3ZnDQogICB4bWxuczpkYz0iaHR0cDovL3B1cmwub3JnL2RjL2VsZW1lbnRzLzEuMS8iDQogICB4bWxuczpjYz0iaHR0cDovL2NyZWF0aXZlY29tbW9ucy5vcmcvbnMjIg0KICAgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIg0KICAgeG1sbnM6c3ZnPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyINCiAgIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyINCiAgIGhlaWdodD0iMjk4Ljc5OTk5Ig0KICAgd2lkdGg9IjMxNS45MTE2NSINCiAgIHhtbDpzcGFjZT0icHJlc2VydmUiDQogICBlbmFibGUtYmFja2dyb3VuZD0ibmV3IDAgMCA1OTUuMyA4NDEuOSINCiAgIHZpZXdCb3g9IjAgMCAzMTUuOTExNjYgMjk4Ljc5OTk4Ig0KICAgeT0iMHB4Ig0KICAgeD0iMHB4Ig0KICAgaWQ9IkxhZ2VyXzEiDQogICB2ZXJzaW9uPSIxLjEiPjxtZXRhZGF0YQ0KICAgaWQ9Im1ldGFkYXRhMzEiPjxyZGY6UkRGPjxjYzpXb3JrDQogICAgICAgcmRmOmFib3V0PSIiPjxkYzpmb3JtYXQ+aW1hZ2Uvc3ZnK3htbDwvZGM6Zm9ybWF0PjxkYzp0eXBlDQogICAgICAgICByZGY6cmVzb3VyY2U9Imh0dHA6Ly9wdXJsLm9yZy9kYy9kY21pdHlwZS9TdGlsbEltYWdlIiAvPjxkYzp0aXRsZT48L2RjOnRpdGxlPjwvY2M6V29yaz48L3JkZjpSREY+PC9tZXRhZGF0YT48ZGVmcw0KICAgaWQ9ImRlZnMyOSIgLz4NCjxnDQogICB0cmFuc2Zvcm09InRyYW5zbGF0ZSgtMTQyLjIsLTI2Ny42KSINCiAgIGlkPSJnMjQiPg0KCTxwYXRoDQogICBzdHlsZT0iZmlsbDojNDc5Y2JlIg0KICAgaWQ9InBhdGgyIg0KICAgZD0ibSAyNDEuOSw0MjMuNiAxMy4yLC04My4yIGMgLTUuMiwwIC0xNC4xLDAgLTE0LjEsMCAtNi42LDAgLTE1LjEsLTMuNyAtMTcuNiwtMTAuNSAtMC44LC0yLjMgLTIuNywtMTAuMiA4LjIsLTE3LjkgMy45LC0yLjcgNi40LC01LjcgNi45LC04IDAuNSwtMi40IC0wLjEsLTQuNSAtMS44LC02LjEgLTIuNCwtMi4zIC03LjEsLTMuNiAtMTMuMSwtMy42IC0xMC4xLDAgLTE3LjIsNS44IC0xNy45LDEwIC0wLjUsMy4xIDEuOSw1LjYgNCw3LjIgNi4zLDQuNyA3LjgsMTEuNSAzLjksMTcuOSAtNCw2LjYgLTEyLjcsMTAuOSAtMjIsMTEgMCwwIC05LjIsMCAtMTQuNCwwIC0xLjIsOC4xIC0yMC44LDEzMi4zIC0yMi4zLDE0Mi4xIEggMjMzIGMgMC43LC00LjQgNC4zLC0yNy45IDkuMiwtNTguOSB6IiAvPg0KCTxwYXRoDQogICBzdHlsZT0iZmlsbDojMDBhNWMzIg0KICAgaWQ9InBhdGg0Ig0KICAgZD0iTSAzNDYuNSwyNjcuNiBIIDI2NyBsIC0xMC42LDY3LjMgaCAxMy41IGMgNy40LDAgMTQuNCwtMy40IDE3LjQsLTguMyAxLC0xLjYgMS40LC0zIDEuNCwtNC4zIDAsLTIuOCAtMS45LC00LjkgLTMuOCwtNi4zIC01LjIsLTMuOSAtNi4zLC04IC02LjMsLTEwLjkgMCwtMC42IDAsLTEuMSAwLjEsLTEuNiAxLjEsLTcuMSAxMC43LC0xNC44IDIzLjQsLTE0LjggNy42LDAgMTMuNCwxLjggMTYuOSw1LjEgMy4xLDIuOSA0LjMsNyAzLjQsMTEuMyAtMS4xLDUuMSAtNi4yLDkuMyAtOS4xLDExLjQgLTcuNyw1LjQgLTYuNywxMC4xIC02LjIsMTEuNSAxLjYsNC4yIDcuNyw2LjkgMTIuNCw2LjkgSCAzNDAgYyAwLDAgMCwwIDAsMC4xIDI4LDAuMiA0MywxMy4xIDM4LjMsNDMuMSAtNC40LDI3LjkgLTI1LjgsMzkuOSAtNTEuMyw0MC4xIGwgLTEwLjEsNjQuNCBoIDE0LjkgYyA2Mi45LDAgMTE0LjMsLTQwLjQgMTI0LjQsLTEwNC4yIDEyLjUsLTc5LjIgLTM3LjcsLTExMC44IC0xMDkuNywtMTEwLjggeiIgLz4NCgk8cGF0aA0KICAgc3R5bGU9ImZpbGw6IzIzNTk3MSINCiAgIGlkPSJwYXRoNiINCiAgIGQ9Ik0gMzQ2LjUsMjY3LjYgSCAyNjcgbCAtMTAuNiw2Ny4zIGggMTMuNSBjIDcuNCwwIDE0LjQsLTMuNCAxNy40LC04LjMgMSwtMS42IDEuNCwtMyAxLjQsLTQuMyAwLC0yLjggLTEuOSwtNC45IC0zLjgsLTYuMyAtNS4yLC0zLjkgLTYuMywtOCAtNi4zLC0xMC45IDAsLTAuNiAwLC0xLjEgMC4xLC0xLjYgMS4xLC03LjEgMTAuNywtMTQuOCAyMy40LC0xNC44IDcuNiwwIDEzLjQsMS44IDE2LjksNS4xIDMuMSwyLjkgNC4zLDcgMy40LDExLjMgLTEuMSw1LjEgLTYuMiw5LjMgLTkuMSwxMS40IC03LjcsNS40IC02LjcsMTAuMSAtNi4yLDExLjUgMS42LDQuMiA3LjcsNi45IDEyLjQsNi45IEggMzQwIGMgMCwwIDAsMCAwLDAuMSAyOCwwLjIgNDMsMTMuMSAzOC4zLDQzLjEgLTQuNCwyNy45IC0yNS44LDM5LjkgLTUxLjMsNDAuMSBsIC0xMC4xLDY0LjQgaCAxNC45IGMgNjIuOSwwIDExNC4zLC00MC40IDEyNC40LC0xMDQuMiAxMi41LC03OS4yIC0zNy43LC0xMTAuOCAtMTA5LjcsLTExMC44IHoiIC8+DQoJPGcNCiAgIGlkPSJnMTYiPg0KCQk8cGF0aA0KICAgc3R5bGU9ImZpbGw6IzIzNTk3MSINCiAgIGlkPSJwYXRoOCINCiAgIGQ9Im0gMTUwLjcsNTExLjIgaCAzMS45IGMgMTMuNiwwIDE2LjksNi45IDE1LjksMTMuMiAtMC44LDUuMSAtNC4zLDguOSAtMTAuMywxMS40IDcuNiwyLjkgMTAuNiw3LjQgOS41LDE0LjUgLTEuNCw4LjkgLTkuMSwxNS41IC0xOS4yLDE1LjUgaCAtMzYuMyB6IG0gMjEuMSwyMi42IGMgNi4yLDAgOS4xLC0zLjMgOS43LC03LjIgMC42LC00LjIgLTEuMywtNy4xIC03LjUsLTcuMSBoIC01LjUgbCAtMi4yLDE0LjMgeiBtIC0zLjQsMjMuNiBjIDYuNCwwIDEwLjEsLTIuNiAxMSwtNy45IDAuNywtNC42IC0xLjksLTcuMyAtOC4xLC03LjMgSCAxNjUgbCAtMi40LDE1LjMgaCA1LjggeiIgLz4NCgkJPHBhdGgNCiAgIHN0eWxlPSJmaWxsOiMyMzU5NzEiDQogICBpZD0icGF0aDEwIg0KICAgZD0ibSAyNDIuNCw1NjYuMiBjIC04LjMsMC42IC0xMi4zLC0wLjMgLTE0LjMsLTMuOSAtNC40LDIuNyAtOS4zLDQuMSAtMTQuNSw0LjEgLTkuNCwwIC0xMi43LC00LjkgLTExLjgsLTEwLjMgMC40LC0yLjYgMS45LC01LjEgNC4zLC03LjIgNS4yLC00LjUgMTgsLTUuMSAyMywtOC41IDAuNCwtMy44IC0xLjEsLTUuMiAtNS44LC01LjIgLTUuNSwwIC0xMC4xLDEuOCAtMTgsNy4yIGwgMS45LC0xMi40IGMgNi44LC00LjkgMTMuNCwtNy4yIDIxLC03LjIgOS43LDAgMTguMyw0IDE2LjcsMTQuNiBsIC0xLjksMTIgYyAtMC43LDQuMiAtMC41LDUuNSA0LjIsNS42IHogTSAyMjgsNTQ3LjQgYyAtNC40LDIuOCAtMTIuNiwyLjMgLTEzLjUsOC4xIC0wLjQsMi43IDEuMyw0LjcgNCw0LjcgMi42LDAgNS44LC0xLjEgOC40LC0yLjkgLTAuMiwtMSAtMC4xLC0yIDAuMiwtMy45IHoiIC8+DQoJCTxwYXRoDQogICBzdHlsZT0iZmlsbDojMjM1OTcxIg0KICAgaWQ9InBhdGgxMiINCiAgIGQ9Im0gMjU3LjksNTIzLjUgaCAxNi42IGwgLTAuOSw1LjUgYyA1LjMsLTQuNSA5LjMsLTYuMiAxNC41LC02LjIgOS4zLDAgMTMuNiw1LjcgMTIuMSwxNSBsIC00LjMsMjcuOSBoIC0xNi42IGwgMy42LC0yMy4xIGMgMC43LC00LjIgLTAuNiwtNi4yIC0zLjgsLTYuMiAtMi42LDAgLTUsMS40IC03LjMsNC41IGwgLTMuOCwyNC43IGggLTE2LjYgeiIgLz4NCgkJPHBhdGgNCiAgIHN0eWxlPSJmaWxsOiMyMzU5NzEiDQogICBpZD0icGF0aDE0Ig0KICAgZD0ibSAzMTMuMSw1MTEuMiBoIDE2LjYgbCAtNC4yLDI2LjggMTUuOSwtMTQuNSBoIDIwLjUgbCAtMjAuNCwxOCAxNi40LDI0LjIgSCAzMzcgbCAtMTIuNiwtMTkuNSBoIC0wLjIgbCAtMywxOS41IGggLTE2LjYgeiIgLz4NCgk8L2c+DQoJPGcNCiAgIGlkPSJnMjIiPg0KCQk8cGF0aA0KICAgc3R5bGU9ImZpbGw6IzQ3OWNiZSINCiAgIGlkPSJwYXRoMTgiDQogICBkPSJNIDM3MS45LDUxMS4yIEggMzkxIGwgLTguNCw1NC41IGggLTE5LjEgeiIgLz4NCgkJPHBhdGgNCiAgIHN0eWxlPSJmaWxsOiM0NzljYmUiDQogICBpZD0icGF0aDIwIg0KICAgZD0ibSA0MDAuMyw1MTEuMiBoIDI3LjMgYyAyMS4xLDAgMjcuMiwxNS4zIDI1LjIsMjggLTEuOSwxMi40IC0xMS43LDI2LjUgLTMwLjIsMjYuNSBoIC0zMC44IHogbSAxNy43LDQxLjUgYyA5LjMsMCAxNC40LC00LjYgMTUuOSwtMTQuMyAxLjEsLTcuMiAtMS4xLC0xNC4zIC0xMS40LC0xNC4zIGggLTUuMSBsIC00LjQsMjguNiB6IiAvPg0KCTwvZz4NCjwvZz4NCjwvc3ZnPg==</mdui:Logo>
            </mdui:UIInfo>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/Logout/REDIRECT/"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/Logout/POST/"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/Authn/REDIRECT/"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/Authn/POST/"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.cybercom.com/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.cybercom.com/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:EmailAddress>servicedesk@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:EmailAddress>servicedesk@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Mobilt BankID*
-	*en: Mobile BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Legitimering eller underskrift med svenskt Mobilt BankID*
-	*en: Authentication or signing using a Swedish Mobile BankID*

MDUI-Logotype

Working logotypes present:

H:71	W:75	Type:SVG
H:113	W:120	Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://eid.test.legitimeringstjanst.se/sc/mobilt-bankid/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Cybercom Sweden AB)

CONTACT-SUPP

Support contact e-mail (servicedesk@cybercom.com) is present

CONTACT-TECH

Technical contact e-mail (servicedesk@cybercom.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Cybercom Sweden AB (https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/) (1)

Cybercom Sweden AB (https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/)

(1)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Pensionsmyndigheten/Leveransavtal-SYS-2015-71</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Bolagsverket/Leveransavtal-AVT-2015-105</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Domstolsverket/Elektronisk-Underskrift-1420-2018</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Telia e-legitimation</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Telia e-ID</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Legitimering eller underskrift med Telia e-legitimation via Net iD plugin</mdui:Description>
                <mdui:Description xml:lang="en">Authentication or signing using Telia eID via Net iD plugin</mdui:Description>
                <mdui:Logo height="75" width="75">data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAAGQCAYAAACAvzbMAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAFOdJREFUeNrs3X+oVnWewPGTM5AJji6FLtV17/zhj3/SO6SwMwjr9fZftjYNyJKBOoHkX9MPiA2KmShWEKaxv4ygVNAWhN26k7EsdNMFyT805pb/pP0xlhVrJJsraP635/Pc57pmV33O4/Oc55zzfb3g4caMpc95Hs/7fM/3nO/JMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66DaboFq2Lt8+nP+4+hXm5a8RW4fEnM5fn7f/+bv8NRn/2+ufPHfaphEQsZiKxZr8taIdiDW2CnRksv36r/iZR2XSJhGQFKLxcP5jfTsWw7YI9ESMUN7JX+P563AelO9sEgFpSjQiFpvyV8Rjvi0CfbcnYpKH5B2bQkDqGI0Ixeb89TsjDRiY0/lrb/7aaVQiIHUJx5PtcBhtQLVGJS+ahBcQ4QBuJSRPGZEISFXisTn/8SfhgNqIeLyaR+QPNoWADCocI+1wrLE1oJZO568teUgO2xQCUmY84sjl97YENMLObGp+xGktAelrOIbzH7uNOqBxJtujETcldugnNkGheEQ0DuWvZbYGNM7f5q9/un/hA2c/OjshIgLS03jEFVb/mr9m2xrQWPH3++E8IvPziPynzXFjTmF1Fo84ZbXZloCkxF3sW8yLCIh4AN2IU1mjIiIgRcMR93TEfIdl1EFERGQGs2yC6xIPIGvvBw61DyoRkJuOPnaLByAiAtJNPDbbEsAMEdltM/w/l/H+MB4Rjj/YEsB1LHOJr4DMFI81+Y+3bQngJv4+j8jnbjZ0FdZ0POK85l8zq+kCnYkrskZTX/bEHMiUt8UDKCD2F7tTn1RPPiDtJUrW+PsAFBST6kmvyJ30Kaz2yrp/MfoAbsFoqs8TSX0Esls8gB7sR5KU7FVY+ejj4fzHP/vuA7do/v0LH7jto7MTyY1CkjyF1Z74ilNXw777QA/EVVk/T229rFRPYT0pHkAvRyH5609GIGmMPtzzAfRDjEJOG4E0e/QhHkA/JHVZb4oB+Z3vONAnm1O6uTCpgLQXSzT6APrpSQEx+gDoxiYBad7oI5Yd8JAooN+G2/eZCYijAoDC1gtIszzsOw2UJInJ9CQC0j59New7DZRojYAYfQB0o/GnsWb5IAGMQLrR+KVM2uch/8d3GRiAXzT5sbcpjEBcugvY/wiIYSRQK/8gIPW2wncYMAIREB8gYP8jIKUZ9h0GBmXr8u2N3QfNavgHZ/QBOIgVkK5Yuh0YtMYeyDY9IMO+u4ADWQEREAABAUjG3wkIAN0YFhAAEBAABAQAAQGgPn5qE3Ajc+bOzlaMLs7uumdedufdUy9u7I+Pv9Xxr/3lP96XHf3zCRsNAaE5lqxclI09tiobyeNB//xq/X3Z0lWLsj0vvGdjICDU34ZnH8jGNq60IUoSo5AgIggItRWnq55+49FsaOkCG0NE4KZMonOFeAw+IptfetCGQECol4e2rRYPEQEBoZi4smrdE6ttCBEBAaH46AMRAQGhsBWjS2wEEQEBoZi432PO3NttCBEBAaGYoaULbQQRAQGhuDk/M/oQEeiOGwmplIsXLmenjn+RfXnybHby2Bc/Gi3dec+81vIqKa7J5WZDBARmENGY2Hc8mzx06oa/JhzY8X4rJmOPrbyyUxUREBASc+7r862d4XQcOnUmH6HEv/furiOtUztxMYCIQLnMgTAwk4c+y17esLtwPK4NUCyffmDHRHIjEXMiCAhJimdg7Hry37KLF77vyX9vYv+xVkhiDkVEQEBocDz6cfolRjJ7EzutIyIICMk4c/Kbvp67j0n4g68dEREQEJomTlv1W0ys38q8ioiAgFAxMTKISe8yRERSIyIICI0V93mUJUYgqY1CRAQBoZHikt1eXXHVqQ/HTyS5rUUEAaFZAfngVOm/58d5tFIlIggIjTGI00kx4knxNJaIICA0SlmT59eKy4ZTJiIICEYfXbpU8rxLFcMqIggI1MScubM7HyF9Ws4ISUQQEKiBe5cu6PjX3mj5ehFBQLBDTeyxuUUeExynsMo8xSciCAi1Mmfu7YVO6/TSIJ4TMrRsQaFfX/Zd8yKCgFArg3rg0yBGPytGlxT69TECmSz5npWIyNjGVb6YCAjVN7J2cfm/Z74jj9HPIEZcIwUjEsvQl33J8YZnx5J7JDACQg2taO3Myz2NNYhodft7x02Przz+VukRiVNZIoKAUGlxVD722MrSfr8775430B1j/N7xZ+gmIhP7j5f6ZxURBITKW7txVWmjkA3PPjDw9/vQttWF/52IyIEd77cezxtPbhQRquynNgFljkI25Tuqfj9UKuYfRkYXD/z9xg45lrA/c/Js4X93ejn6AzsmWveVLF3V/4sQ7rpnXivwFyt+9z4CQqJixx5X/0zsP9aX/37cg7GpQpeoxkR1jCa6Nb0gZMqLQlJdTmExkJ1qP06XRDyefuPRgVx5dT1x+XI3p7JAQOA64px7L3essaOuWjymrXtideHLekFA4DouXrjcuslvqEc3+v1q/X2VXnk3TqsNJbakC81nDoTSxLpPccf10fETXU0s38ieF95r/YxLZ+Nof8mqRZWYSJ8WI6MYIU3d63HWlwEBgU7E5ajdXo3UTaRigj5eEZMYmXRzT0Y/IxJ3nZe5Ci8ICLUSp6g+iB15Ho5BXRYaMYmFCuMVEYk5l0GHJCKybecjrZsF434PEBC4Spymip3joB5je71RULwiIlM3NA52sn1s48rWxH9sJ5foIiAYdeSjjtghlnkHdVExGpn84LP2pPaCgf5Z4vd/5o1HWwGJP5eQUDeuwqJn8Xil5OU3uhVzMfFnLXsJ9euJkUiE5PkDv22dahvUs1PACISBxaNOVxfFvEwsqVKlNaBiRDL9oKdYlTdGJOe+Ov+D7WqUgoAgHhUxtdbUwoGfzpopJoP4M8WyKyJFp5zC4pYc3HWk1vc1TI9EIoSAgFCSOFLt16KIZYqrxQ6W/FxyEBCS9m6DdroRwipddgwCQmNNT/I2SR2uIAMBof472/Hm7Ww/HBcQEBD6rolX6sQprBhZAQJCn8QVS01dUfZLK+WCgGAn240znxqBgIDQN02+WsmzOkBAEBBAQKA8l9yRDgJC/9zR4NVi7xjwc0JAQGi0eNZ4U5ccj0fgAgJCn8RjYePZ3kNLFzbqPcXTCquytDvUgeXc6UosNf78gS2tf46bCuMGvOlnV1yq8H0iMXK6N/+zRzDuumfelaXcB/2sdBAQkhRP1IvXTCIsly583/rnuAHxeveQnDzW3Z3t0yG4VszTXP08jQjFHPMbICDUa6RytZg/mcm6J2wrqBtzIAAICAACAoCAACAgACAgAAgIAAICgIAAICAAICAACAgAAgKAgAAgIAAgIAD0jgdK0bV4lO2H4yeyc1+fr/X7iMfcjqxd7HnoICCU4cCOiWxi/7HGvJ/JQ6eyiX3Hs6ffeNSjb6FDTmFR2MHXjjQqHtPOnDybvfL4Wz5gEBD6IU5XvbvrSGPfX0RkYv/xZD/fSxcu+5IjIPTH5KHPGv8ej46fSPKz3fPCe62AQqfMgVDIqWNfNP49prgTjXgc/XNvwnnn3fNar6WrFl3537796nxr9PrlyW+yixe+9xdJQEhR7BiaLq7KEo9ihpYuzMYeW5ktWbnopt+RM3lEYpQXv6eYCAgJGVq2oPHvMXaC4tH5AcXmlx4stM2Gli7Ihp4dy9ZtW519sP9Yo+fUms4cCIWsGF3S+FFIHEmLRwfbaeOq7F/+Y1vXwY3Lpdc9sTp7/sBvWyMYBISGi7/0ccTZ2HjkO8UURiC3Go/4DmzIRxE9GdXmI5K4/2YkPzhBQGi42MHGUWOTRiIx7/HQttU92yk2PR69vms/Dky27XxERGrGHAhdHzXG6YtYziRedRYhjFNzKdyBXsV4XG1T/t8/9/h5lxMLCKmMRlKadE45HjFC6/d6YRHxiMjLG970gdWAU1ggHh2JtcLiEtwyRrcRKwQEaEA8QtyzEWuFlRGRtRtXJXc/joAAjYxH2RGJU1krRhf7AAUEaEI8yo7IyFpXZAkI0Jh4lBmRESMQAQGaFY8yI+IOdQEBGhaPsiJyh6dDCghQ/Xh0u7JAPyNiBCIgQMXjEXeY38qihmVe4ouAABWKR9xhHpfOxqKGVYqIJU0EBKh4PKZVMSIICFDxeFQxInVfqFNAgGTiUaWIGMUICFCzeFQlIvHcdAQEqFk8qhCRyUOnfOACAtQxHoOMSLzPc1+f96ELCFDXeAwiIhcvXM4O7JjwoQsIUPd4lB2Rvfn7jV9L9XmkLV2LSyynnlJ31umGiur1M8ynIzIVguI3+U1HZCpEC370/x987Yi5DyMQUjgq/mO+I4i/7OKRRjz6PRKJUda7u4744ASEJovz02Wu+Ep14tGviMT3KQ5KEBAaLEYbE/uP2RAJx6PXEYkDEvEQEBJg5CEevY6IAxIBIRFnPrW8hHj0NiIICIno9qFDNDMeIiIg0LGhZQtsBPEQEQSE4mJHZRQiHiKCgNCVbTt/k+8oZtsQ4iEiAgLFxB3EsYNYsnKRjSEeIpIwS5nQdUSeyXcQcSNYLGlyydpFhdzKHddVj8e1EXl5w5tWKxAQmDkkM61pxPXFek9Nj8e0jy1102hOYUGJWnfy7zueRDwsTyIgQA/FqatulioXDwQEEhYPSupmKRjxQEAgceKBgABdmdhXbNHAkdEl4oGAQOricuciVyPFjZqb8tGHeCAgkLi4V6aIscdWtu6jEA8EBFIPyLFiAanLqSvxEBCgz86cPNvxr425jzosWCkeCAj0Wcx9FJn/WLKq+muMiQcCAiUoOv9R9aVhxAMBgZKcLDj/UeVVjsUDAYESfXzoM/FAQIBi4v6PImtfLa3o/Id4ICBQsqLzH1UcgYgHAgKDCEjN5z/EAwGBGoxAxAMBAVrqPP8hHnTCI23p2uShz7Kj4yfyn6dsjB6oyghEPBAQ+ip2MN0834JqB0Q8KMIpLAo7sGNCPMQDBIRiYk2nif3HbIgeG/T8h3ggIJSyo6FZIxDxQEAoxZlPv7ERGhQQ8UBAKE0dnlMhHuJBOVyFRSFDyxbYCD02iPmPuBDCXBZGIJQqHrVqFFLfEUjc3Pjyht3igYAwGNt2/iabM3e2DVGjgEQ44nTVyxveLPR4XbgRp7AoLJ6Y9/Qbj2YHdrxfeLVZynHxwuXWZxOLOcZKAUUeqQsCQt8j8kwekdgxxdHtl45qr/j2q/OlX+58dTDip1EGAkLlxXxIvEZGF9sYbbEDLxKQWFOs6PYTDAQEGujepQsL/fo4FRjzIHPm3i4YCAikLEIQo7JO5x3i18Xk9kPbVmcrRpe0/n3BQEAgUSN5CIpcKhsRmbqpz4191IfLeKEPfrn+PhsBAQGKi6vUqvaI2k5GTUMF528QEKAPYk6jDmK+Jm4O3bbzkeyOG0zkw7XMgUCfxAgkjuqr+sjfCEdELpanAQGBitn00oPZucfPV+oqqojayNrFwoGAQJXFJblxaigWMLx44fuB/BliXiNGQ7GS8vRlwiAgUANxquj5A1uyXU/+eykjkelgLFm16KY3KIKAQA0iEgtQHtx1pOdLqQsGAsJAXPzfyzZCSWLHvuHZsdb8w7t5SLpdybifwbBqLwJCxyyRUb7Y6cdKxrGK8dHxEzddqqSsEUYsnyIgCAgdi51X7Dic9ihf3Gw4lI9Irv4sZopNmd8FEBAKiaXHxzautCEqMDIZ6Pdg/IQPgULciU42se9YaxRCuuJ0WlVveERAqLA47x1XB5GuvS9YBRgBodtRyP5jpT+GlWqIZeRdTIGAcMs7EhHxmUOnTKLz46PRT7/J1m1b7cqsBpt+gJUrrxAQeipOZ8WE6tWPWKU54ZjYd7w16hjU2lwICIkcocYjVlsL8S1dmM35mZDU1bdfnc++PPmNuQ4EhHLFaQ6nOoBrmUQHQEAAEBAABAQAAQGgqEkBAaAbjX3IStMDMum7CyAg3fjORwwM2GkBERAAAUklIK9/8pxTWICACEjXRAQY5IGsgKg/QGGHm/zmUgjIx77DwIA0+gxICgE57DsMOIAVkMJe/+Q5AQEcwAqIDxGojdNNnkBPKSDjvsuAA1cB8UECDlwr4LZUPsmty7f/Nf8x7DsNlOC71z957m+MQJpjr+80UJJ3UniTKQVkj+804IBVQAprXw1x2Pca6LPTqdw+kNoDpZzGAvrt1VTeaFIByY8K9mTWxgL6Jx4hsUdAmutF33GgX6OP/EA1mecQJRcQoxCgj6OPnSm94VmJftBGIYDRh4AYhQBGHwJSri2+80CPPJXa6CPclvInvnX59rfzHw/77gO34HAej9EU3/isxD/4Le2hJ0DXo49U33jSAWkPOZ3KArr1Yr4fmUz1zd/m83cqC+jKZB6PX6S8AWb5DrTEKOS0zQB0KM5e/Dr1jSAg2ZVTWb/OzIcAHR50Nv1xtZ34ie/BlI/OTvz3/QsfOJs5lQXc2FPte8mSJyA/jMhkHpGYF1pjawAz2JPH4zmbQUCuF5HDeUSG838csTWAa+Lhqs2rmAOZQftLYogKTItLdZ+yGYxAOh2JjBuJAO14jKa4VMnNuA/kJrYu3747/7HZloAkOW1lBHLLIxET6yAeCEhXEYmJ9c/bEZlti0DjPeVqq5tzCquArcu3x3xILHsybGtAI7VuKs7jcdimuDlXYRXQXjQt1r55x9aAxolo/Fw8jEDKGI3EHesxwT7f1oDajzpiVd2dNoWAlBmR+e2IWP4E6jvqsK6VgAw0JGvaIRm2NaAWTrdHHXtsCgGpSkg25z9+LyRQWXG66tX8tdONgQIiJIBwCEhjQ7IpcxMiDEpcOfmqU1UCUueQxEhkOiZGJdBfp7OpS+33pvy8cgFpZkxG2iOS9UYm0NORxniEQzQEJKWgrGmHZEV7dGL1X7j5CCMi8XE2dRnupHkNAeGHo5T57ZegIBhTr++MLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHr4PwEGAGqmff0xBrNNAAAAAElFTkSuQmCC</mdui:Logo>
                <mdui:Logo height="120" width="120">data:image/png;base64,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</mdui:Logo>
            </mdui:UIInfo>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/Logout/REDIRECT/"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/Logout/POST/"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/Authn/REDIRECT/"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/Authn/POST/"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.cybercom.com/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.cybercom.com/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:EmailAddress>servicedesk@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:EmailAddress>servicedesk@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Telia e-legitimation*
-	*en: Telia e-ID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Legitimering eller underskrift med Telia e-legitimation via Net iD plugin*
-	*en: Authentication or signing using Telia eID via Net iD plugin*

MDUI-Logotype

Working logotypes present:

H:75	W:75	Type:PNG
H:120	W:120	Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://eid.test.legitimeringstjanst.se/sc/telia-browserplugin/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Cybercom Sweden AB)

CONTACT-SUPP

Support contact e-mail (servicedesk@cybercom.com) is present

CONTACT-TECH

Technical contact e-mail (servicedesk@cybercom.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Freja eID Group AB (https://idp-sweden-connect-org-ct.test.frejaeid.com)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://idp-sweden-connect-org-ct.test.frejaeid.com" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/loa3</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-sub</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/1.0/loa3-orgid</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/prepaid-auth-2021</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/1.0/loa3-name</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Freja eID Plus for Organisation IDs</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Freja eID Plus för e-tjänstelegitimationer</mdui:DisplayName>
                <mdui:Description xml:lang="en">Freja eID is an electronic identity on your mobile that allows you to log in, sign and approve transactions. It can also be complemented with an organisation ID issued by your employer. Both Freja private and organisation IDs are officially approved by the Swedish E-identification board to bear the quality mark Svensk e-legitimation.</mdui:Description>
                <mdui:Description xml:lang="sv">Freja eID är en mobil e-legitimation som gör att du kan logga in, skriva under och godkänna transaktioner hos anslutna tjänster. Den kan komplementeras med en e-tjänstelegitimation av din arbetsgivare. Både Freja privat- och e-tjänstelegitimationen har av DIGG godkänts för kvalitetsmärket Svensk e-legitimation.</mdui:Description>
                <mdui:Logo height="75" width="75">https://idp-sweden-connect-org-ct.test.frejaeid.com/idp/images/frejaeid_logo.svg</mdui:Logo>
                <mdui:Logo height="120" width="120">https://idp-sweden-connect-org-ct.test.frejaeid.com/idp/images/frejaeid_logo_vertical.svg</mdui:Logo>
            </mdui:UIInfo>
            <shibmd:Scope regexp="false" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">5565874376</shibmd:Scope>
            <shibmd:Scope regexp="false" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">1111111111</shibmd:Scope>
            <shibmd:Scope regexp="false" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">2222222222</shibmd:Scope>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-sweden-connect-org-ct.test.frejaeid.com/idp/profile/SAML2/Redirect/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-sweden-connect-org-ct.test.frejaeid.com/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Freja eID Group AB</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Freja eID Group AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Freja eID Group AB</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Freja eID Group AB</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://frejaeid.com/en/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://frejaeid.com</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Freja eID Group AB</md:Company>
        <md:EmailAddress>partnersupport@frejaeid.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Freja eID Group AB</md:Company>
        <md:EmailAddress>partnersupport@frejaeid.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-IdP

This Identity Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.swedenconnect.se/ec/1.0/loa3-orgid*
-	*http://id.swedenconnect.se/ec/1.0/loa3-name*
-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*

EntityCategory-Consistency

The present EntityCategory value "http://id.swedenconnect.se/ec/1.0/loa3-orgid" has the required complementary EntityCategory value

-	*http://id.swedenconnect.se/ec/1.0/loa3-name*

EntityCategory-Consistency

The present EntityCategory value "http://id.swedenconnect.se/ec/1.0/loa3-orgid" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*

EntityCategory-Consistency

The present EntityCategory value "http://id.swedenconnect.se/ec/1.0/loa3-name" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa3-pnr" has the required complementary EntityCategory value

-	*http://id.swedenconnect.se/ec/1.0/loa3-name*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa3-pnr" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Freja eID Plus för e-tjänstelegitimationer*
-	*en: Freja eID Plus for Organisation IDs*

MDUI-Description

Description in Swedish and English present in mdui:

-	sv: Freja eID är en mobil e-legitimation som gör att du kan logga in, skriva under och godkänna transaktioner hos anslutna tjänster. Den kan komplementeras med en e-tjänstelegitimation av din arbetsgivare. Både Freja privat- och e-tjänstelegitimationen har av DIGG godkänts för kvalitetsmärket Svensk e-legitimation.
-	en: Freja eID is an electronic identity on your mobile that allows you to log in, sign and approve transactions. It can also be complemented with an organisation ID issued by your employer. Both Freja private and organisation IDs are officially approved by the Swedish E-identification board to bear the quality mark Svensk e-legitimation.

MDUI-Logotype

Working logotypes present:

H:75	W:75	Type:SVG
H:120	W:120	Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.elegnamnden.se/loa/1.0/loa3

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.elegnamnden.se/loa/1.0/loa3

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://idp-sweden-connect-org-ct.test.frejaeid.com is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Freja eID Group AB)

CONTACT-SUPP

Support contact e-mail (partnersupport@frejaeid.com) is present

CONTACT-TECH

Technical contact e-mail (partnersupport@frejaeid.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Freja eID Group AB (https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/loa3</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-sub</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/1.0/loa3-name</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Freja eID Plus</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Freja eID Plus</mdui:DisplayName>
                <mdui:Description xml:lang="en">Freja eID is an electronic identity on your mobile that allows you to log in, sign and approve transactions. It comes with two levels of identity assurance, basic level and Freja eID Plus, which is officially approved by the Swedish E-identification board with the quality mark Svensk e-legitimation. Freja eID Plus gives you access to more services and a free ID protection, alerting you if your official residential address is changed.</mdui:Description>
                <mdui:Description xml:lang="sv">Freja eID är en mobil e-legitimation som gör att du kan logga in, skriva under och godkänna transaktioner hos anslutna tjänster. Den utfärdas i två olika tillitsnivåer, Freja eID Bas och Freja eID Plus, varav den senare har statliga E-legitimationsnämnden godkänt för kvalitetsmärket Svensk e-legitimation. Med Freja eID Plus kan du nå ännu fler tjänster och får även ett ID-Skydd som varnar ifall någon ändrar din folkbokföringsadress hos Skatteverket.</mdui:Description>
                <mdui:Logo height="75" width="75">https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com/idp/images/frejaeid_logo.svg</mdui:Logo>
                <mdui:Logo height="120" width="120">https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com/idp/images/frejaeid_logo_vertical.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com/idp/profile/SAML2/Redirect/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Freja eID Group AB</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Freja eID Group AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Freja eID Group AB</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Freja eID Group AB</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://frejaeid.com/en/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://frejaeid.com</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Freja eID Group AB</md:Company>
        <md:EmailAddress>partnersupport@frejaeid.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Freja eID Group AB</md:Company>
        <md:EmailAddress>partnersupport@frejaeid.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-IdP

This Identity Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.swedenconnect.se/ec/1.0/loa3-name*
-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery*

EntityCategory-Consistency

The present EntityCategory value "http://id.swedenconnect.se/ec/1.0/loa3-name" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa3-pnr" has the required complementary EntityCategory value

-	*http://id.swedenconnect.se/ec/1.0/loa3-name*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa3-pnr" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-sub*

EntityCategory-Contract

This IdP has declared contract http://id.swedenconnect.se/contract/sc/eid-choice-2017 and the required LoA

-	*http://id.elegnamnden.se/loa/1.0/loa3*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Freja eID Plus*
-	*en: Freja eID Plus*

MDUI-Description

Description in Swedish and English present in mdui:

sv: Freja eID är en mobil e-legitimation som gör att du kan logga in, skriva under och godkänna transaktioner hos anslutna tjänster. Den utfärdas i två olika tillitsnivåer, Freja eID Bas och Freja eID Plus, varav den senare har statliga E-legitimationsnämnden godkänt för kvalitetsmärket Svensk e-legitimation. Med Freja eID Plus kan du nå ännu fler tjänster och får även ett ID-Skydd som varnar ifall någon ändrar din folkbokföringsadress hos Skatteverket.

en: Freja eID is an electronic identity on your mobile that allows you to log in, sign and approve transactions. It comes with two levels of identity assurance, basic level and Freja eID Plus, which is officially approved by the Swedish E-identification board with the quality mark Svensk e-legitimation. Freja eID Plus gives you access to more services and a free ID protection, alerting you if your official residential address is changed.

MDUI-Logotype

Working logotypes present:

H:75	W:75	Type:SVG
H:120	W:120	Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.elegnamnden.se/loa/1.0/loa3

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.elegnamnden.se/loa/1.0/loa3

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://idp-sweden-connect-valfr-2017-ct.test.frejaeid.com is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Freja eID Group AB)

CONTACT-SUPP

Support contact e-mail (partnersupport@frejaeid.com) is present

CONTACT-TECH

Technical contact e-mail (partnersupport@frejaeid.com) is present

EIDAS-IdP

This IdP is configured to support the eIDAS proxy service through appropriate EntityCategory declarations and supports eIDAS LoA levels

Pensionsmyndigheten (https://amc-bankididp.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://amc-bankididp.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://amc-bankididp.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFjTCCA3WgAwIBAgIEUxQP1TANBgkqhkiG9w0BAQwFADB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wHhcNMjAwNzA2MDgwMzAxWhcNMjAxMDA0MDgwMzAxWjB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCIPwJmtM0svEW5TbJcQuQHMDaMqF97JvEnqvvrOqJVOyRirQ7pf1sEIcjGe1edQS3W3MOX95fv8Ase8IHAwfus8xz3s0Eq7x3nyIEILJMDmF0iOC0us3F2AUtu0ceVtqYWZ+gD55wvFyy/dQAQyHF6hfV09cqaXg0zTWkpCxsKh6+4lhgMUQyqAcronEKIOUADHzqXRP6FOC+ZQw7DCeh6r3uTKbOx57K1fmj8Jn5S31EgvZ1tnIGmCuoTLC4dAu6YXkOIBaPFkZ9p6BPlWLMZ0eS05hRKaU4LK7BJDjmLdE6HirjRpdu8pQe9Ad/aOvrqIHvw51cS2HXhqto3MGL36A6ne0pKLJW1g10/5fhvQRspqMJsj5k8zzobv9iK8kx+OZlNUsuP2s+Xh33zjVqxXMeTzGPhCny6yBZClsRUCyQFCb0RtxXmSNMD0x1Np6bmkMc5xbR9laaZFUnfAnCX7qvPpu5g5uvWhIdS8S6GQRVse1ops14V4da5Hy/jw/Ci+1FeO956gTBAJb/K3W/NJMhh8Abxi2oTcqSADn0b05ii0l+EiNhdYXDVKWGUq97WzSdC59SCuJizKpzEkOIfNJWRVE7ZAp3uvGHEIKj8RTvWIWGxGKotMbdwJwHthzw4FtIyQ3qo0/EZI/Terz4QUEp6hSuBoc1bbDqphly/VQIDAQABoyEwHzAdBgNVHQ4EFgQU5M5xgdMltEF0O2QQMj3m7fyrEdkwDQYJKoZIhvcNAQEMBQADggIBADnt5T5GvYZpWSm5tYVk3wzNz9bLL8qXmTRZKT98/N7wJRYqlAwU/Jvrdjnsb84GTy909pXTkVlw+81qLh2TtzlTfKMs0saVbGRuW59aZ5uO/R5Ny2sQN8s1kc+tBYqz2YnXAIWcIShZX2FJfJR3SKVrcSOLO4KlEEtaf0evnqVmtpkg5qDNcwV1n5+sw5YeyJWPoAIGzePjLkfJH9TZ+15Su/agaUkXUxIbalA+ZQzyPHd8Vfa4CB2ZseA1+Hq/RLRNEYU8JxCQD9JSY7vwP7N01m95XJR8rXibRHhsLLxV0i1XcGvzvlBvx+Kz01w4EZrRYEzx+KqzK6irDsRjqlmEJ0Yw57YQNrrELEjDnb6TOqx8wQkwRL7ftnWAtjUKvk9+uJUIPiY69eCwCgxsFrbqIRNUIrjkhHhOu3JS+4I8W9HD1r/Q9t7EJ3pn5PT0gDTtQ+DirxgXVFWoe4p4Gp8tjM78tH4ljtGqxG5dibywrzPW7JyGHwRINp7wSn3i7e9BDT9NVIUvow0a80ZXQC3lWBj+U7kik1ZOz28xFMIW+wzAG+IZvYqvORjgBImIZqgBmQy0VqYduvjdFDkkjXdKdsdMstUp8itGhpaU8eMlMeA+Z1TAUq2Bl8zXvBQtoxqb26Ufl2bRWUhOd9oV7rTs2ahr99eAojDXh7o4F4uT</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://amc-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://amc-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://amc-bankididp.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Pensionsmyndigheten (https://amn-bankididp.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://amn-bankididp.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://amn-bankididp.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFjTCCA3WgAwIBAgIEKJXKhzANBgkqhkiG9w0BAQwFADB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wHhcNMjAwNzAzMTUwNDAyWhcNMjAxMDAxMTUwNDAyWjB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+8eN1tCSNAHkKw/wWv7lJFadzw/FewTgxwT0mvPxHnG76E1hxlywFYVLjKLK4ddMwJDFjKTyXfwmA2HE0s0bYyfT1HqO4eT4lrvtSM6QZae4wVz3Ow6gk4CN5c8azHpl5in87UipwYcqxg04Mknr8uHZc+Ki1bYcivq3aTwh6Wv4TZ0OVCyEUxHqacCSs9Lhwf7avXFcWkhWIFNbxU86kNm/Vu2rq9UPh/pCThJhRkUwvQnrArYkiFoj/Qulr/pdJyzjcW/C908bqmdg+pWMOAssfHo0bUCAOnEnScIlid6EEKEhBwz5x2QgIRYDTgTYzmLUX8KWiT/NPmnQEUZU8O/seYJKE4VlZlJhIf+rTXITwRENVLhQvp8a7cnPZWcFmTXMyQJ2y86FDxfw+0uwbZrlmSl1eB0eLHrTHr2/y/Lb+6DOnbg3a3YDEj12lD9dZtEt7eMQJbpXaXws8GnfKOZgYpjnxOvIUqG5q94IsGeqVLGVHNwo68F9Nj4tAC9mRQAiE3Nw/Rh8Exx87z6f4UYtlpdw0CKfjnOgM8rpW7/yN650k9t/07dV3Qyuj78KyEHc1GH3HhUme/PfJP14W8okXHd6pgsekTeGP4k+lpwM1RABtW7oDwqjMqLNcUHtIInt4PJb6BCuPJd3huy2HWucdRHcZKFEVjCq46HkAmQIDAQABoyEwHzAdBgNVHQ4EFgQUp9ZUUMiQ9C3haNF6FwbJeE/tMF4wDQYJKoZIhvcNAQEMBQADggIBAHT0rF0Drt4OmjlRLBsiQASi0e68me12M4ZKpiigCxBEPrmY1cjClHaM6IXWOpVA0VLeSeRxEFUD3P4QQAYQGVrfsQubzsBIQi2+iXvnKRFQ+snEJEUYo3ZPjcJ0H9W3as1MuLIJw3mKkUA+u21jJpXIpmTIXUGYfiuBOOOVucwFrxAC7SQS2ZAPgDTE8pIoid3VipYHaquq916vTcmbgoBPmEzXFXPZXWuK4w5DlufqioSKoJ+pdq6yX26C03QTUMiiLRyVvYyZKCCSysubXYsdiPI6tDLgkVXPb1DA+DNUv3Ss/+qsYXUeVZLEB725lL9n1RQMxfp1a6ERfN5KCQaKObYDx6UzZWqIIttElUIruUTKGgNbJJebzOPDjmHhrxEge+VwXxf0I/wSThth/vkHRlUq08JJy55pwq23w+GdXNR2TSjRoBNDeu1ylLHHKSb5BykvJkALEkGHXM98IJPMuErqM+P5D9EGJmgh3uBR9XE2XHstlEBEKnVIevHmhnrNW3nWU0iZNDQwThLvug5nliozIeGRyIrqIoW3zfNwpxFyxvyVn1egz7Mu2HoaOwJZ2Jdcxd/DtTaskbEXOdgerhNCJnE/djNWVhuII54YI3jvl9uYcRyflUdixgc1Uz2saPi32uLt9Yu2So5NvEmHevK9egfRbyr2UimbLLHJ</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFjTCCA3WgAwIBAgIEUxQP1TANBgkqhkiG9w0BAQwFADB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wHhcNMjAwNzA2MDgwMzAxWhcNMjAxMDA0MDgwMzAxWjB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCIPwJmtM0svEW5TbJcQuQHMDaMqF97JvEnqvvrOqJVOyRirQ7pf1sEIcjGe1edQS3W3MOX95fv8Ase8IHAwfus8xz3s0Eq7x3nyIEILJMDmF0iOC0us3F2AUtu0ceVtqYWZ+gD55wvFyy/dQAQyHF6hfV09cqaXg0zTWkpCxsKh6+4lhgMUQyqAcronEKIOUADHzqXRP6FOC+ZQw7DCeh6r3uTKbOx57K1fmj8Jn5S31EgvZ1tnIGmCuoTLC4dAu6YXkOIBaPFkZ9p6BPlWLMZ0eS05hRKaU4LK7BJDjmLdE6HirjRpdu8pQe9Ad/aOvrqIHvw51cS2HXhqto3MGL36A6ne0pKLJW1g10/5fhvQRspqMJsj5k8zzobv9iK8kx+OZlNUsuP2s+Xh33zjVqxXMeTzGPhCny6yBZClsRUCyQFCb0RtxXmSNMD0x1Np6bmkMc5xbR9laaZFUnfAnCX7qvPpu5g5uvWhIdS8S6GQRVse1ops14V4da5Hy/jw/Ci+1FeO956gTBAJb/K3W/NJMhh8Abxi2oTcqSADn0b05ii0l+EiNhdYXDVKWGUq97WzSdC59SCuJizKpzEkOIfNJWRVE7ZAp3uvGHEIKj8RTvWIWGxGKotMbdwJwHthzw4FtIyQ3qo0/EZI/Terz4QUEp6hSuBoc1bbDqphly/VQIDAQABoyEwHzAdBgNVHQ4EFgQU5M5xgdMltEF0O2QQMj3m7fyrEdkwDQYJKoZIhvcNAQEMBQADggIBADnt5T5GvYZpWSm5tYVk3wzNz9bLL8qXmTRZKT98/N7wJRYqlAwU/Jvrdjnsb84GTy909pXTkVlw+81qLh2TtzlTfKMs0saVbGRuW59aZ5uO/R5Ny2sQN8s1kc+tBYqz2YnXAIWcIShZX2FJfJR3SKVrcSOLO4KlEEtaf0evnqVmtpkg5qDNcwV1n5+sw5YeyJWPoAIGzePjLkfJH9TZ+15Su/agaUkXUxIbalA+ZQzyPHd8Vfa4CB2ZseA1+Hq/RLRNEYU8JxCQD9JSY7vwP7N01m95XJR8rXibRHhsLLxV0i1XcGvzvlBvx+Kz01w4EZrRYEzx+KqzK6irDsRjqlmEJ0Yw57YQNrrELEjDnb6TOqx8wQkwRL7ftnWAtjUKvk9+uJUIPiY69eCwCgxsFrbqIRNUIrjkhHhOu3JS+4I8W9HD1r/Q9t7EJ3pn5PT0gDTtQ+DirxgXVFWoe4p4Gp8tjM78tH4ljtGqxG5dibywrzPW7JyGHwRINp7wSn3i7e9BDT9NVIUvow0a80ZXQC3lWBj+U7kik1ZOz28xFMIW+wzAG+IZvYqvORjgBImIZqgBmQy0VqYduvjdFDkkjXdKdsdMstUp8itGhpaU8eMlMeA+Z1TAUq2Bl8zXvBQtoxqb26Ufl2bRWUhOd9oV7rTs2ahr99eAojDXh7o4F4uT</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://amn-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://amn-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://amn-bankididp.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Pensionsmyndigheten (https://asc-bankididp.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://asc-bankididp.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://asc-bankididp.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFjTCCA3WgAwIBAgIEKJXKhzANBgkqhkiG9w0BAQwFADB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wHhcNMjAwNzAzMTUwNDAyWhcNMjAxMDAxMTUwNDAyWjB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC+8eN1tCSNAHkKw/wWv7lJFadzw/FewTgxwT0mvPxHnG76E1hxlywFYVLjKLK4ddMwJDFjKTyXfwmA2HE0s0bYyfT1HqO4eT4lrvtSM6QZae4wVz3Ow6gk4CN5c8azHpl5in87UipwYcqxg04Mknr8uHZc+Ki1bYcivq3aTwh6Wv4TZ0OVCyEUxHqacCSs9Lhwf7avXFcWkhWIFNbxU86kNm/Vu2rq9UPh/pCThJhRkUwvQnrArYkiFoj/Qulr/pdJyzjcW/C908bqmdg+pWMOAssfHo0bUCAOnEnScIlid6EEKEhBwz5x2QgIRYDTgTYzmLUX8KWiT/NPmnQEUZU8O/seYJKE4VlZlJhIf+rTXITwRENVLhQvp8a7cnPZWcFmTXMyQJ2y86FDxfw+0uwbZrlmSl1eB0eLHrTHr2/y/Lb+6DOnbg3a3YDEj12lD9dZtEt7eMQJbpXaXws8GnfKOZgYpjnxOvIUqG5q94IsGeqVLGVHNwo68F9Nj4tAC9mRQAiE3Nw/Rh8Exx87z6f4UYtlpdw0CKfjnOgM8rpW7/yN650k9t/07dV3Qyuj78KyEHc1GH3HhUme/PfJP14W8okXHd6pgsekTeGP4k+lpwM1RABtW7oDwqjMqLNcUHtIInt4PJb6BCuPJd3huy2HWucdRHcZKFEVjCq46HkAmQIDAQABoyEwHzAdBgNVHQ4EFgQUp9ZUUMiQ9C3haNF6FwbJeE/tMF4wDQYJKoZIhvcNAQEMBQADggIBAHT0rF0Drt4OmjlRLBsiQASi0e68me12M4ZKpiigCxBEPrmY1cjClHaM6IXWOpVA0VLeSeRxEFUD3P4QQAYQGVrfsQubzsBIQi2+iXvnKRFQ+snEJEUYo3ZPjcJ0H9W3as1MuLIJw3mKkUA+u21jJpXIpmTIXUGYfiuBOOOVucwFrxAC7SQS2ZAPgDTE8pIoid3VipYHaquq916vTcmbgoBPmEzXFXPZXWuK4w5DlufqioSKoJ+pdq6yX26C03QTUMiiLRyVvYyZKCCSysubXYsdiPI6tDLgkVXPb1DA+DNUv3Ss/+qsYXUeVZLEB725lL9n1RQMxfp1a6ERfN5KCQaKObYDx6UzZWqIIttElUIruUTKGgNbJJebzOPDjmHhrxEge+VwXxf0I/wSThth/vkHRlUq08JJy55pwq23w+GdXNR2TSjRoBNDeu1ylLHHKSb5BykvJkALEkGHXM98IJPMuErqM+P5D9EGJmgh3uBR9XE2XHstlEBEKnVIevHmhnrNW3nWU0iZNDQwThLvug5nliozIeGRyIrqIoW3zfNwpxFyxvyVn1egz7Mu2HoaOwJZ2Jdcxd/DtTaskbEXOdgerhNCJnE/djNWVhuII54YI3jvl9uYcRyflUdixgc1Uz2saPi32uLt9Yu2So5NvEmHevK9egfRbyr2UimbLLHJ</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://asc-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://asc-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://asc-bankididp.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Pensionsmyndigheten (https://bankididp.pst.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://bankididp.pst.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://bankididp.pst.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFjTCCA3WgAwIBAgIEUxQP1TANBgkqhkiG9w0BAQwFADB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wHhcNMjAwNzA2MDgwMzAxWhcNMjAxMDA0MDgwMzAxWjB3MQswCQYDVQQGEwJTRTESMBAGA1UECBMJU3RvY2tob2xtMRIwEAYDVQQHEwlTdG9ja2hvbG0xHDAaBgNVBAoTE1BlbnNpb25zbXluZGlnaGV0ZW4xEDAOBgNVBAsTB1Vua25vd24xEDAOBgNVBAMTB1Vua25vd24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCIPwJmtM0svEW5TbJcQuQHMDaMqF97JvEnqvvrOqJVOyRirQ7pf1sEIcjGe1edQS3W3MOX95fv8Ase8IHAwfus8xz3s0Eq7x3nyIEILJMDmF0iOC0us3F2AUtu0ceVtqYWZ+gD55wvFyy/dQAQyHF6hfV09cqaXg0zTWkpCxsKh6+4lhgMUQyqAcronEKIOUADHzqXRP6FOC+ZQw7DCeh6r3uTKbOx57K1fmj8Jn5S31EgvZ1tnIGmCuoTLC4dAu6YXkOIBaPFkZ9p6BPlWLMZ0eS05hRKaU4LK7BJDjmLdE6HirjRpdu8pQe9Ad/aOvrqIHvw51cS2HXhqto3MGL36A6ne0pKLJW1g10/5fhvQRspqMJsj5k8zzobv9iK8kx+OZlNUsuP2s+Xh33zjVqxXMeTzGPhCny6yBZClsRUCyQFCb0RtxXmSNMD0x1Np6bmkMc5xbR9laaZFUnfAnCX7qvPpu5g5uvWhIdS8S6GQRVse1ops14V4da5Hy/jw/Ci+1FeO956gTBAJb/K3W/NJMhh8Abxi2oTcqSADn0b05ii0l+EiNhdYXDVKWGUq97WzSdC59SCuJizKpzEkOIfNJWRVE7ZAp3uvGHEIKj8RTvWIWGxGKotMbdwJwHthzw4FtIyQ3qo0/EZI/Terz4QUEp6hSuBoc1bbDqphly/VQIDAQABoyEwHzAdBgNVHQ4EFgQU5M5xgdMltEF0O2QQMj3m7fyrEdkwDQYJKoZIhvcNAQEMBQADggIBADnt5T5GvYZpWSm5tYVk3wzNz9bLL8qXmTRZKT98/N7wJRYqlAwU/Jvrdjnsb84GTy909pXTkVlw+81qLh2TtzlTfKMs0saVbGRuW59aZ5uO/R5Ny2sQN8s1kc+tBYqz2YnXAIWcIShZX2FJfJR3SKVrcSOLO4KlEEtaf0evnqVmtpkg5qDNcwV1n5+sw5YeyJWPoAIGzePjLkfJH9TZ+15Su/agaUkXUxIbalA+ZQzyPHd8Vfa4CB2ZseA1+Hq/RLRNEYU8JxCQD9JSY7vwP7N01m95XJR8rXibRHhsLLxV0i1XcGvzvlBvx+Kz01w4EZrRYEzx+KqzK6irDsRjqlmEJ0Yw57YQNrrELEjDnb6TOqx8wQkwRL7ftnWAtjUKvk9+uJUIPiY69eCwCgxsFrbqIRNUIrjkhHhOu3JS+4I8W9HD1r/Q9t7EJ3pn5PT0gDTtQ+DirxgXVFWoe4p4Gp8tjM78tH4ljtGqxG5dibywrzPW7JyGHwRINp7wSn3i7e9BDT9NVIUvow0a80ZXQC3lWBj+U7kik1ZOz28xFMIW+wzAG+IZvYqvORjgBImIZqgBmQy0VqYduvjdFDkkjXdKdsdMstUp8itGhpaU8eMlMeA+Z1TAUq2Bl8zXvBQtoxqb26Ufl2bRWUhOd9oV7rTs2ahr99eAojDXh7o4F4uT</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bankididp.pst.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bankididp.pst.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://bankididp.pst.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Pensionsmyndigheten (https://bankididp.tsz.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://bankididp.tsz.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://bankididp.tsz.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://bankididp.tsz.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bankididp.tsz.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://bankididp.tsz.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Pensionsmyndigheten (https://uat-bankididp.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://uat-bankididp.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://uat-bankididp.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://uat-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uat-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://uat-bankididp.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Pensionsmyndigheten (https://uatn-bankididp.pensionsmyndigheten.se/) (3)

Pensionsmyndigheten (https://uatn-bankididp.pensionsmyndigheten.se/)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://uatn-bankididp.pensionsmyndigheten.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/pensionsmyndigheten</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Pensionsmyndighetens BankID IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Swedish Pensions Agency BankID IdP</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Pensionsmyndighetens SAML Identity Provider för BankID</mdui:Description>
                <mdui:Description xml:lang="en">Swedish Pensions Agency SAML Identity Provider for BankID</mdui:Description>
                <mdui:Logo height="135" width="292">https://www.pensionsmyndigheten.se/etc/designs/pm-base/images/pm-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Signing</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>Encryption</ds:KeyName>
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://uatn-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/redirect"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uatn-bankididp.stt.pensionsmyndigheten.se/service/bankididp/saml2/auth/post"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Pensionsmyndigheten</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Pensions Agency</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Pensionsmyndigheten</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Pensions Agency</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.pensionsmyndigheten.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.pensionsmyndigheten.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Pensionsmyndigheten</md:Company>
        <md:EmailAddress>pm-eid@pensionsmyndigheten.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

The certificate for signing has expired

WARNING

Certificates

The certificate for encryption has expired

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens BankID IdP*
-	*en: Swedish Pensions Agency BankID IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Pensionsmyndighetens SAML Identity Provider för BankID*
-	*en: Swedish Pensions Agency SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:135

W:292

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://uatn-bankididp.pensionsmyndigheten.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Pensionsmyndigheten)

CONTACT-SUPP

Support contact e-mail (pm-eid@pensionsmyndigheten.se) is present

CONTACT-TECH

Technical contact e-mail (pm-eid@pensionsmyndigheten.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Polismyndigheten (urn:idp-test.ciceron.cloud:saml20:polismyndigheten)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:idp-test.ciceron.cloud:saml20:polismyndigheten" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Visma/Polismyndigheten/Leveransavtal-E-Legitimationstjänster-A431.353/2019</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Swedish Police IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Polismyndigheten IdP</mdui:DisplayName>
                <mdui:Description xml:lang="en">Swedish Police Identity Provider for authentication and signing</mdui:Description>
                <mdui:Description xml:lang="sv">Polismyndigheten Federationstjänst för autentisering och signering</mdui:Description>
                <mdui:InformationURL xml:lang="sv">https://polisen.se/</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="sv">https://polisen.se/lagar-och-regler/behandling-av-personuppgifter/personuppgifter-pa-webbplatsen/</mdui:PrivacyStatementURL>
                <mdui:Logo height="64" width="174">https://polisen.se/Areas/Polisen/Content/Images/Polisen.svg</mdui:Logo>
            </mdui:UIInfo>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.4"/>
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.7"/>
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Swedish Police</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Polismyndigheten</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Police</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Polismyndigheten</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://polisen.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://polisen.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:registrator.kansli@polisen.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:registrator.kansli@polisen.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-IdP

This Identity Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/eidas-naturalperson" is supported by the following compatible LoA:s

-	*http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low*
-	*http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub*
-	*http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Polismyndigheten IdP*
-	*en: Swedish Police IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Polismyndigheten Federationstjänst för autentisering och signering*
-	*en: Swedish Police Identity Provider for authentication and signing*

MDUI-Logotype

Working logotypes present:

H:64

W:174

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:idp-test.ciceron.cloud:saml20:polismyndigheten is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Polismyndigheten)

CONTACT-SUPP

Support contact e-mail (mailto:registrator.kansli@polisen.se) is present

CONTACT-TECH

Technical contact e-mail (mailto:registrator.kansli@polisen.se) is present

EIDAS-Connector

This eIDAS Connector has appropriate EntityCategory declarations and supports eIDAS LoA levels.

Statistics Sweden (urn:scb:idp-test.ciceron.cloud:saml20.bankid-mobile) (2)

Statistics Sweden (urn:scb:idp-test.ciceron.cloud:saml20.bankid-mobile)

(2)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:scb:idp-test.ciceron.cloud:saml20.bankid-mobile" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Statistics Sweden Mobile BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Statistikmyndigheten SCB Mobilt BankID</mdui:DisplayName>
                <mdui:Description xml:lang="en">Statistics Sweden SAML Identity Provider for Mobile BankID</mdui:Description>
                <mdui:Description xml:lang="sv">Statistikmyndigheten SCB SAML Identity Provider för Mobilt BankID</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://www.scb.se/</mdui:InformationURL>
                <mdui:InformationURL xml:lang="sv">https://www.scb.se/</mdui:InformationURL>
                <mdui:Logo height="60" width="53">https://scb.se/StyleguideAssets/scb/img/SCB-logo_sv.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout.bankid-mobile"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout.bankid-mobile"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid-mobile"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid-mobile"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Statistics Sweden</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Statistics Sweden</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Statistics Sweden</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Statistics Sweden</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.scb.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.scb.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:inloggningstjanst@scb.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:inloggningstjanst@scb.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

This service share the same certificate for signing and encryption

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Statistikmyndigheten SCB Mobilt BankID*
-	*en: Statistics Sweden Mobile BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Statistikmyndigheten SCB SAML Identity Provider för Mobilt BankID*
-	*en: Statistics Sweden SAML Identity Provider for Mobile BankID*

MDUI-Logotype

Working logotypes present:

H:60

W:53

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:scb:idp-test.ciceron.cloud:saml20.bankid-mobile is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Statistics Sweden)

CONTACT-SUPP

Support contact e-mail (mailto:inloggningstjanst@scb.se) is present

CONTACT-TECH

Technical contact e-mail (mailto:inloggningstjanst@scb.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Statistics Sweden (urn:scb:idp-test.ciceron.cloud:saml20.bankid) (2)

Statistics Sweden (urn:scb:idp-test.ciceron.cloud:saml20.bankid)

(2)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:scb:idp-test.ciceron.cloud:saml20.bankid" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Statistics Sweden BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Statistikmyndigheten SCB BankID</mdui:DisplayName>
                <mdui:Description xml:lang="en">Statistics Sweden SAML Identity Provider for BankID</mdui:Description>
                <mdui:Description xml:lang="sv">Statistikmyndigheten SCB SAML Identity Provider för BankID</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://www.scb.se/</mdui:InformationURL>
                <mdui:InformationURL xml:lang="sv">https://www.scb.se/</mdui:InformationURL>
                <mdui:Logo height="60" width="53">https://scb.se/StyleguideAssets/scb/img/SCB-logo_sv.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout.bankid"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout.bankid"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Statistics Sweden</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Statistics Sweden</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Statistics Sweden</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Statistics Sweden</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.scb.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.scb.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:inloggningstjanst@scb.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:inloggningstjanst@scb.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

This service share the same certificate for signing and encryption

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Statistikmyndigheten SCB BankID*
-	*en: Statistics Sweden BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Statistikmyndigheten SCB SAML Identity Provider för BankID*
-	*en: Statistics Sweden SAML Identity Provider for BankID*

MDUI-Logotype

Working logotypes present:

H:60

W:53

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:scb:idp-test.ciceron.cloud:saml20.bankid is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Statistics Sweden)

CONTACT-SUPP

Support contact e-mail (mailto:inloggningstjanst@scb.se) is present

CONTACT-TECH

Technical contact e-mail (mailto:inloggningstjanst@scb.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Statistics Sweden (urn:scb:idp-test.ciceron.cloud:saml20.telia) (2)

Statistics Sweden (urn:scb:idp-test.ciceron.cloud:saml20.telia)

(2)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:scb:idp-test.ciceron.cloud:saml20.telia" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Statistics Sweden Mobile BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Statistikmyndigheten SCB Mobilt BankID</mdui:DisplayName>
                <mdui:Description xml:lang="en">Statistics Sweden SAML Identity Provider for Mobile BankID</mdui:Description>
                <mdui:Description xml:lang="sv">Statistikmyndigheten SCB SAML Identity Provider för Mobilt BankID</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://www.scb.se/</mdui:InformationURL>
                <mdui:InformationURL xml:lang="sv">https://www.scb.se/</mdui:InformationURL>
                <mdui:Logo height="60" width="53">https://scb.se/StyleguideAssets/scb/img/SCB-logo_sv.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIDsjCCApqgAwIBAgIUM7VTDhGHIso4hZU3VszeGLp8keswDQYJKoZIhvcNAQELBQAwcTEgMB4GCSqGSIb3DQEJARYRY2ljZXJvbkB2aXNtYS5jb20xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVWaXNtYTETMBEGA1UECwwKQ29uc3VsdGluZzEbMBkGA1UEAwwSdGlja2V0LXNlcnZlci10ZXN0MB4XDTIwMDYzMDEwMTk1NFoXDTMwMDYyODEwMTk1NFowcTEgMB4GCSqGSIb3DQEJARYRY2ljZXJvbkB2aXNtYS5jb20xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVWaXNtYTETMBEGA1UECwwKQ29uc3VsdGluZzEbMBkGA1UEAwwSdGlja2V0LXNlcnZlci10ZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO/wUJmYlEeR0Mef+XRdviIfSOmdkIDsnCdzYLVWopctOrsi2oqQ5YrqCUcjcAjuPTToyzjXZp5/UfU+qe3/BulDV2u6Zvtkvix78Ep8qfxnLNVRM+Fsx55eJBp3V3bWp/hUhZ15flZa+80lvzNNVhft6bGlvw7Vo9/FDBDi8HL0g9koHG54WFqXHsU44J/1poiFsQMBwl/7TH2ewksWzR/nMR8zZLR5KO3Id4abUpzsi+aMrkDqgpChLeU/xYQoXBIaY8oU0SwMlIzFfEIZwFF6yO6FCRhTsR8fgk2Z+f4mxCT/RAOZYEm0wG9YNf40JJqyu/L5FP0cPm1lkyfSZwIDAQABo0IwQDAdBgNVHQ4EFgQUGh5YnMARRWf0Fe3dwWAOpP3iDGswHwYDVR0jBBgwFoAUGh5YnMARRWf0Fe3dwWAOpP3iDGswDQYJKoZIhvcNAQELBQADggEBADFlaCDYftu2UUdfijGtKYgPblemVV+ApXqkJhzNnB7qeGFfaXNTDjtHwymVbn5uFQ6Q9www53Ml7re473tr18Pk5BkRsoAV0jznGD95MItDcNrUzFEaH5E1aahkXy8xc4VKYUz0UFS3ViW8u/9gCX/Xt7luHmzyEqe2I74JOlxfztx9ACe2PyDJBMNKKD9nYUzUr4dy4/c14Q3LZ3nYCfbrYZKHhJMU0UluH39n1e/vzgmBykVrzOei9aZkR/DQ9T3NFbeD9qKBlD6GpRAadPHCFP/XdEsVU+wirgVV0xZR3VXm/UZzDZZfYYQ/ngXnGe6l+SF0TNUldVP72lky75o=</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout.telia"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout.telia"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request.telia"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request.telia"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Statistics Sweden</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Statistics Sweden</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Statistics Sweden</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Statistics Sweden</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.scb.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.scb.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:inloggningstjanst@scb.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:inloggningstjanst@scb.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

This service share the same certificate for signing and encryption

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Statistikmyndigheten SCB Mobilt BankID*
-	*en: Statistics Sweden Mobile BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Statistikmyndigheten SCB SAML Identity Provider för Mobilt BankID*
-	*en: Statistics Sweden SAML Identity Provider for Mobile BankID*

MDUI-Logotype

Working logotypes present:

H:60

W:53

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:scb:idp-test.ciceron.cloud:saml20.telia is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Statistics Sweden)

CONTACT-SUPP

Support contact e-mail (mailto:inloggningstjanst@scb.se) is present

CONTACT-TECH

Technical contact e-mail (mailto:inloggningstjanst@scb.se) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Sweden Connect (http://qa.test.swedenconnect.se/idp)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="http://qa.test.swedenconnect.se/idp" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/loa2</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/loa3</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-low</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-sub</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-high</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa2-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/1.0/loa2-name</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/1.0/loa3-name</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/scal2</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.1"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Sweden Connect Reference IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Sweden Connect Referens-IdP</mdui:DisplayName>
                <mdui:Description xml:lang="en">Sweden Connect Reference Identity Provider</mdui:Description>
                <mdui:Description xml:lang="sv">Sweden Connect referens-legitimeringstjänst</mdui:Description>
                <mdui:Logo height="256" width="256">https://qa.test.swedenconnect.se/idp/images/idp-logo-notext.svg</mdui:Logo>
                <mdui:Logo height="56" width="280">https://qa.test.swedenconnect.se/idp/images/idp-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIFdTCCA12gAwIBAgIJAIBTPhQSTHUwMA0GCSqGSIb3DQEBCwUAMFExKTAnBgNVBAMMIHJlZmlkcC0xLnFhLnN2ZWlkYXMuc2UgKFNpZ25pbmcpMRcwFQYDVQQKDA5Td2VkZW4gQ29ubmVjdDELMAkGA1UEBhMCU0UwHhcNMTgwODE1MTMwNzAxWhcNMjgwODEyMTMwNzAxWjBRMSkwJwYDVQQDDCByZWZpZHAtMS5xYS5zdmVpZGFzLnNlIChTaWduaW5nKTEXMBUGA1UECgwOU3dlZGVuIENvbm5lY3QxCzAJBgNVBAYTAlNFMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAza6CtAch4fcnB05B93KHThDAg8u/tarLHW7eu1mODKoeW+fIwtzKpcQMkkgvYryadGVCUnYMSI14aNsuTc4+G/WNif1rPTv3AL84ypFGSSSuKUxlb+YhA+IafydFGrYB+rlNdEvI4+YUjRIUBVfS8ob2avW74Jo7az1dcdz0xqNfBZXbp5oH2f7HR2TzpowdH2oIbmyOhWPVGwdCNHw1de2+WJQl45LJImwN1bUSTTRLxG+sCHT+u9dxkxsxXQ8ILfb3woGBn7n1tGjd79rpvgV+K0xD8thfGHi+WIvz3GimfMyYmdf53hOTV52p4YqveaAkF2HLesdB403TO8RuzeZgJIMr6BWjXoTcn01V4LhbvfUSnFaFZMJXETeWLpccmRpLkpV9hXzYKEnT1jFiTZPwbJ2JNaemXTPWUtywkRAf+DsHtRm/8zT/tmhnDq2DJ7aBqzl+GxpZxYDQNfLbdsrskJ3czNe5XOL7KWTYInIdG1/tslFK8O3pR+0YfAjs/vZhasXkw3URllRIbNXwvNbjTRONttHUTEUhKkYt+7NZAPl57y9FLeQjHhLocdfAOE+DvsDQFrZo8p42n7NTs0tqS0sN9Ss1H41JAFuII8i0+FUOcnBBGNYq0oA0xrtlC1pThxH+kYPSfjERhZEsLmwfUn93amaHOUiFXtgF89cCAwEAAaNQME4wHQYDVR0OBBYEFDdWqeIYYlmlQ2rv08DOS+Jpu9YXMB8GA1UdIwQYMBaAFDdWqeIYYlmlQ2rv08DOS+Jpu9YXMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAHZAWO2GQx23j8R4IDvpTKCvg+OwQkrOQFFGMqBjka4HcgJ/lqu5/V6E9s7V4Qj5oAm7mVtL073Ll3I3Rk6S0qMTuLyhvgoA22Ua+CJ+c66edWWjnRtWimBV3HvkwMTg0Lkc8htDVDan0m0iMf4AOSpLHPH7iw5zGTZzGab2VRdDf50KOaV/pZSKd4mibgFO/1vsMlafrOCEsQyGOtXJXG8l93sZgYzohDDSxV30MDjmo1lTz/UTrQQsZfrmqHuik2Bm0N8bcRdh20Qu2feiFaQqiJbP48jxV7jfGj0jGM8dFR0JgrHqs+WgriZA2BXpKzp2T3p+I5aUaZjXENKMYLgdsDCxykjjEQbY4cDB7gnvZy+o/yO1+am2u7gAZJw6g//IYB8Hsy2sgwEjORC6Qid7hOL1XCd90BQfAii/pEDHh2D8WmTCnpQoIT/5Ahbyai+w6zq0LxlkMUIQrQsK2JeRu0PClIe2RNXdNwF67zhlERqxttlGXOYRFKqbPfwrcJ0QdvwUnRaSYtAKiyf1jSFqTJOtepZDg3RQzfLv6YYISsK1RhXS83XK8m9DYnosB7OJsmW4FoLi6INR32CaE/umWs4IQu5HmDMaJEB2yMESSHI4HPkgytFro8BtPQGJ8J3UTLHFulxarsDeJ04oQHMF+IaIX9Z0rp/5O/mVddvA</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://qa.test.swedenconnect.se/idp/profile/SAML2/Redirect/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://qa.test.swedenconnect.se/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Sweden Connect</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Sweden Connect</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Sweden Connect</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Sweden Connect</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.swedenconnect.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:Company>Sweden Connect</md:Company>
        <md:EmailAddress>operations@swedenconnect.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:Company>Sweden Connect</md:Company>
        <md:EmailAddress>operations@swedenconnect.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-IdP

This Identity Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa2-pnr*
-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery*
-	*http://id.swedenconnect.se/ec/1.0/loa2-name*
-	*http://id.swedenconnect.se/ec/1.0/loa3-name*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa2-pnr" has the required complementary EntityCategory value

-	*http://id.swedenconnect.se/ec/1.0/loa2-name*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa2-pnr" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa2*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa3-pnr" has the required complementary EntityCategory value

-	*http://id.swedenconnect.se/ec/1.0/loa3-name*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/loa3-pnr" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*
-	*http://id.swedenconnect.se/loa/1.0/uncertified-loa3*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-low*
-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-sub*
-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-high*

EntityCategory-Consistency

The present EntityCategory value "http://id.swedenconnect.se/ec/1.0/loa2-name" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa2*

EntityCategory-Consistency

The present EntityCategory value "http://id.swedenconnect.se/ec/1.0/loa3-name" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/loa3*
-	*http://id.swedenconnect.se/loa/1.0/uncertified-loa3*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Sweden Connect Referens-IdP*
-	*en: Sweden Connect Reference IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Sweden Connect referens-legitimeringstjänst*
-	*en: Sweden Connect Reference Identity Provider*

MDUI-Logotype

Working logotypes present:

H:256	W:256	Type:SVG
H:56	W:280	Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.elegnamnden.se/loa/1.0/loa2

- http://id.elegnamnden.se/loa/1.0/loa3

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

- http://id.elegnamnden.se/loa/1.0/eidas-nf-low

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

- http://id.elegnamnden.se/loa/1.0/eidas-nf-high

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.elegnamnden.se/loa/1.0/loa2

- http://id.elegnamnden.se/loa/1.0/loa3

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

- http://id.elegnamnden.se/loa/1.0/eidas-nf-low

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

- http://id.elegnamnden.se/loa/1.0/eidas-nf-high

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value http://qa.test.swedenconnect.se/idp is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Sweden Connect)

CONTACT-SUPP

Support contact e-mail (operations@swedenconnect.se) is present

CONTACT-TECH

Technical contact e-mail (operations@swedenconnect.se) is present

EIDAS-IdP

This IdP is configured to support the eIDAS proxy service through appropriate EntityCategory declarations and supports eIDAS LoA levels

Sweden Connect (https://qa.connector.eidas.swedenconnect.se/eidas)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://qa.connector.eidas.swedenconnect.se/eidas" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-low</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-low</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-sub</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-sub</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-high</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/loa/1.0/eidas-nf-high</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/scal2</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xsd:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.4"/>
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.7"/>
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Foreign eID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Utländskt eID</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider for foreign eID:s</mdui:Description>
                <mdui:Description xml:lang="sv">Legitimeringstjänst för utländsk legitimering</mdui:Description>
                <mdui:Logo height="256" width="256">https://qa.connector.eidas.swedenconnect.se/idp/img/idp-logo-notext.svg</mdui:Logo>
                <mdui:Logo height="56" width="280">https://qa.connector.eidas.swedenconnect.se/idp/img/idp-logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://qa.connector.eidas.swedenconnect.se/idp/profile/SAML2/Redirect/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://qa.connector.eidas.swedenconnect.se/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Sweden Connect</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Sweden Connect</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Sweden Connect</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Sweden Connect</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.swedenconnect.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.swedenconnect.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Sweden Connect</md:Company>
        <md:EmailAddress>operations@swedenconnect.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Sweden Connect</md:Company>
        <md:EmailAddress>operations@swedenconnect.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-IdP

This Identity Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/eidas-naturalperson" is supported by the following compatible LoA:s

-	*http://id.elegnamnden.se/loa/1.0/eidas-low*
-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-low*
-	*http://id.elegnamnden.se/loa/1.0/eidas-sub*
-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-sub*
-	*http://id.elegnamnden.se/loa/1.0/eidas-high*
-	*http://id.elegnamnden.se/loa/1.0/eidas-nf-high*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Utländskt eID*
-	*en: Foreign eID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Legitimeringstjänst för utländsk legitimering*
-	*en: Identity Provider for foreign eID:s*

MDUI-Logotype

Working logotypes present:

H:256	W:256	Type:SVG
H:56	W:280	Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.elegnamnden.se/loa/1.0/eidas-low

- http://id.elegnamnden.se/loa/1.0/eidas-nf-low

- http://id.elegnamnden.se/loa/1.0/eidas-sub

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

- http://id.elegnamnden.se/loa/1.0/eidas-high

- http://id.elegnamnden.se/loa/1.0/eidas-nf-high

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.elegnamnden.se/loa/1.0/eidas-low

- http://id.elegnamnden.se/loa/1.0/eidas-nf-low

- http://id.elegnamnden.se/loa/1.0/eidas-sub

- http://id.elegnamnden.se/loa/1.0/eidas-nf-sub

- http://id.elegnamnden.se/loa/1.0/eidas-high

- http://id.elegnamnden.se/loa/1.0/eidas-nf-high

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://qa.connector.eidas.swedenconnect.se/eidas is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Sweden Connect)

CONTACT-SUPP

Support contact e-mail (operations@swedenconnect.se) is present

CONTACT-TECH

Technical contact e-mail (operations@swedenconnect.se) is present

EIDAS-Connector

This eIDAS Connector has appropriate EntityCategory declarations and supports eIDAS LoA levels.

Visma (urn:visma:idp-test.ciceron.cloud:saml20.bankid-mobile) (2)

Visma (urn:visma:idp-test.ciceron.cloud:saml20.bankid-mobile)

(2)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:visma:idp-test.ciceron.cloud:saml20.bankid-mobile" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Visma/SCB/Leveransavtal-E-Legitimationstjänster-A2021/0337</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Mobile BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Mobilt BankID</mdui:DisplayName>
                <mdui:Description xml:lang="en">Swedish e-identification for authentication and signing using Mobile BankID</mdui:Description>
                <mdui:Description xml:lang="sv">Svensk e-legitimation för autentisering och signering med Mobilt BankID</mdui:Description>
                <mdui:InformationURL xml:lang="sv">https://www.visma.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="sv">https://www.visma.com/privacy-statement</mdui:PrivacyStatementURL>
                <mdui:Logo height="160" width="160">https://idp.ciceron.cloud/media/ca_bankid.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout.bankid-mobile"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout.bankid-mobile"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid-mobile"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid-mobile"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Visma</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Visma</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Visma Ticket Server</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Visma Ticket Server</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">http://www.visma.com</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">http://www.visma.com</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

This service share the same certificate for signing and encryption

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Mobilt BankID*
-	*en: Mobile BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Svensk e-legitimation för autentisering och signering med Mobilt BankID*
-	*en: Swedish e-identification for authentication and signing using Mobile BankID*

MDUI-Logotype

Working logotypes present:

H:160

W:160

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:visma:idp-test.ciceron.cloud:saml20.bankid-mobile is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Visma)

CONTACT-SUPP

Support contact e-mail (mailto:ciceron@visma.com) is present

CONTACT-TECH

Technical contact e-mail (mailto:ciceron@visma.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Visma (urn:visma:idp-test.ciceron.cloud:saml20.bankid) (2)

Visma (urn:visma:idp-test.ciceron.cloud:saml20.bankid)

(2)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:visma:idp-test.ciceron.cloud:saml20.bankid" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Visma/SCB/Leveransavtal-E-Legitimationstjänster-A2021/0337</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">BankID</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">BankID</mdui:DisplayName>
                <mdui:Description xml:lang="en">Swedish e-identification for authentication and signing using BankID</mdui:Description>
                <mdui:Description xml:lang="sv">Svensk e-legitimation för autentisering och signering med BankID</mdui:Description>
                <mdui:InformationURL xml:lang="sv">https://www.visma.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="sv">https://www.visma.com/privacy-statement</mdui:PrivacyStatementURL>
                <mdui:Logo height="160" width="160">https://idp.ciceron.cloud/media/ca_bankid.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIDsjCCApqgAwIBAgIUM7VTDhGHIso4hZU3VszeGLp8keswDQYJKoZIhvcNAQELBQAwcTEgMB4GCSqGSIb3DQEJARYRY2ljZXJvbkB2aXNtYS5jb20xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVWaXNtYTETMBEGA1UECwwKQ29uc3VsdGluZzEbMBkGA1UEAwwSdGlja2V0LXNlcnZlci10ZXN0MB4XDTIwMDYzMDEwMTk1NFoXDTMwMDYyODEwMTk1NFowcTEgMB4GCSqGSIb3DQEJARYRY2ljZXJvbkB2aXNtYS5jb20xCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVWaXNtYTETMBEGA1UECwwKQ29uc3VsdGluZzEbMBkGA1UEAwwSdGlja2V0LXNlcnZlci10ZXN0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO/wUJmYlEeR0Mef+XRdviIfSOmdkIDsnCdzYLVWopctOrsi2oqQ5YrqCUcjcAjuPTToyzjXZp5/UfU+qe3/BulDV2u6Zvtkvix78Ep8qfxnLNVRM+Fsx55eJBp3V3bWp/hUhZ15flZa+80lvzNNVhft6bGlvw7Vo9/FDBDi8HL0g9koHG54WFqXHsU44J/1poiFsQMBwl/7TH2ewksWzR/nMR8zZLR5KO3Id4abUpzsi+aMrkDqgpChLeU/xYQoXBIaY8oU0SwMlIzFfEIZwFF6yO6FCRhTsR8fgk2Z+f4mxCT/RAOZYEm0wG9YNf40JJqyu/L5FP0cPm1lkyfSZwIDAQABo0IwQDAdBgNVHQ4EFgQUGh5YnMARRWf0Fe3dwWAOpP3iDGswHwYDVR0jBBgwFoAUGh5YnMARRWf0Fe3dwWAOpP3iDGswDQYJKoZIhvcNAQELBQADggEBADFlaCDYftu2UUdfijGtKYgPblemVV+ApXqkJhzNnB7qeGFfaXNTDjtHwymVbn5uFQ6Q9www53Ml7re473tr18Pk5BkRsoAV0jznGD95MItDcNrUzFEaH5E1aahkXy8xc4VKYUz0UFS3ViW8u/9gCX/Xt7luHmzyEqe2I74JOlxfztx9ACe2PyDJBMNKKD9nYUzUr4dy4/c14Q3LZ3nYCfbrYZKHhJMU0UluH39n1e/vzgmBykVrzOei9aZkR/DQ9T3NFbeD9qKBlD6GpRAadPHCFP/XdEsVU+wirgVV0xZR3VXm/UZzDZZfYYQ/ngXnGe6l+SF0TNUldVP72lky75o=</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout.bankid"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout.bankid"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request.bankid"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Visma</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Visma</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Visma Ticket Server</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Visma Ticket Server</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">http://www.visma.com</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">http://www.visma.com</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

WARNING

Certificates

This service share the same certificate for signing and encryption

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: BankID*
-	*en: BankID*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Svensk e-legitimation för autentisering och signering med BankID*
-	*en: Swedish e-identification for authentication and signing using BankID*

MDUI-Logotype

Working logotypes present:

H:160

W:160

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:visma:idp-test.ciceron.cloud:saml20.bankid is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Visma)

CONTACT-SUPP

Support contact e-mail (mailto:ciceron@visma.com) is present

CONTACT-TECH

Technical contact e-mail (mailto:ciceron@visma.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Visma (urn:visma:idp-test.ciceron.cloud:saml20.telia) (1)

Visma (urn:visma:idp-test.ciceron.cloud:saml20.telia)

(1)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:visma:idp-test.ciceron.cloud:saml20.telia" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Visma/SCB/Leveransavtal-E-Legitimationstjänster-A2021/0337</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Telia</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Telia</mdui:DisplayName>
                <mdui:Description xml:lang="en">Swedish e-identification for authentication and signing using Telia</mdui:Description>
                <mdui:Description xml:lang="sv">Svensk e-legitimation för autentisering och signering med Telia</mdui:Description>
                <mdui:InformationURL xml:lang="sv">https://www.visma.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="sv">https://www.visma.com/privacy-statement</mdui:PrivacyStatementURL>
                <mdui:Logo height="160" width="160">https://idp.ciceron.cloud/media/ca_telia.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout.telia"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout.telia"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request.telia"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request.telia"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Visma</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Visma</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Visma IdP Test</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Visma IdP Test</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.visma.com</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.visma.com</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

WARNING

EntityCategory-IdP

This Identity Provider does not have an EntityCategory value for LoA and attribute profile.
It is recommended that IdP's have at least one EntityCategory value that indicates supported attributes

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Telia*
-	*en: Telia*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Svensk e-legitimation för autentisering och signering med Telia*
-	*en: Swedish e-identification for authentication and signing using Telia*

MDUI-Logotype

Working logotypes present:

H:160

W:160

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:visma:idp-test.ciceron.cloud:saml20.telia is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Visma)

CONTACT-SUPP

Support contact e-mail (mailto:ciceron@visma.com) is present

CONTACT-TECH

Technical contact e-mail (mailto:ciceron@visma.com) is present

EIDAS-IdP

Note: This IdP is not configured as eIDAS Connector or as national IdP supporting eIDAS. No further eIDAS checks

Visma (urn:visma:idp-test.ciceron.cloud:saml20) (2)

Visma (urn:visma:idp-test.ciceron.cloud:saml20)

(2)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="urn:visma:idp-test.ciceron.cloud:saml20" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-loa3</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/sprop/1.0/mobile-auth</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/general-ec/1.0/secure-authenticator-binding</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Visma/Polismyndigheten/Leveransavtal-E-Legitimationstjänster-A431.353/2019</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">Visma IdP</mdui:DisplayName>
                <mdui:DisplayName xml:lang="sv">Visma IdP</mdui:DisplayName>
                <mdui:Description xml:lang="en">Visma Identity Provider for authentication and signing</mdui:Description>
                <mdui:Description xml:lang="sv">Visma Federationstjänst för autentisering och signering</mdui:Description>
                <mdui:InformationURL xml:lang="sv">https://www.visma.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="sv">https://www.visma.com/privacy-statement</mdui:PrivacyStatementURL>
                <mdui:Logo height="19" width="97">https://www.visma.com/style/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
            <psc:RequestedPrincipalSelection xmlns:psc="http://id.swedenconnect.se/authn/1.0/principal-selection/ns">
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.4"/>
                <psc:MatchValue Name="urn:oid:1.2.752.201.3.7"/>
                <psc:MatchValue Name="urn:oid:1.2.752.29.4.13"/>
            </psc:RequestedPrincipalSelection>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/single.logout"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/single.logout"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-test.ciceron.cloud/authenticate.request"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-test.ciceron.cloud/authenticate.request"/>
    </md:IDPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Visma</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Visma</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Visma IdP Test</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Visma IdP Test</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.visma.com</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.visma.com</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:SurName>support</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:SurName>technical</md:SurName>
        <md:EmailAddress>mailto:ciceron@visma.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as an identity provider and has no other conflicting roles

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-IdP

This Identity Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

EntityCategory-Consistency

The present EntityCategory value "http://id.elegnamnden.se/ec/1.0/eidas-naturalperson" is supported by the following compatible LoA:s

-	*http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low*
-	*http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub*
-	*http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Visma IdP*
-	*en: Visma IdP*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Visma Federationstjänst för autentisering och signering*
-	*en: Visma Identity Provider for authentication and signing*

ERROR

MDUI-Logotype

No working logotype are present in mdui

ERROR

MDUI-Logotype

The following errors were encountered while processing logotypes:

-	Logotype download from: *https://www.visma.com/style/images/logo.png* failed with HTTP response code *404*

LOA

IdP declares compliance with the following Levels of Assurance:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high

LOA-SE-eID

IdP declares compliance with the following Swedish eID LoA levels:

- http://id.swedenconnect.se/loa/1.0/uncertified-loa3

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-low

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-sub

- http://id.swedenconnect.se/loa/1.0/uncertified-eidas-high

NameID-IdP

NameID support contains the required NameID:s

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value urn:visma:idp-test.ciceron.cloud:saml20 is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Visma)

CONTACT-SUPP

Support contact e-mail (mailto:ciceron@visma.com) is present

CONTACT-TECH

Technical contact e-mail (mailto:ciceron@visma.com) is present

EIDAS-Connector

This eIDAS Connector has appropriate EntityCategory declarations and supports eIDAS LoA levels.

Signature Service

Bolagsverket (https://dss.test.underskriftstjanst.se/Metadata/Get/Bolagsverket)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/Bolagsverket" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Bolagsverket Underskriftstjänst</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Bolagsverket Signature Service</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Tjänst för elektroniska underskrifter</mdui:Description>
                <mdui:Description xml:lang="en">Service for electronic signatures</mdui:Description>
                <mdui:Logo height="40" width="240">https://eid.bolagsverket.se/bks-eid-web/resources/img/logosvg.svg</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Bolagsverket</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Bolagsverket</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Bolagsverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Bolagsverket</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">http://www.bolagsverket.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">http://www.bolagsverket.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Bolagsverket</md:Company>
        <md:GivenName>Bolagsverket</md:GivenName>
        <md:SurName>Helpdesk</md:SurName>
        <md:EmailAddress>helpdesk@bolagsverket.se</md:EmailAddress>
        <md:TelephoneNumber>0771-670670</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Bolagsverket</md:Company>
        <md:GivenName>Bolagsverket</md:GivenName>
        <md:SurName>Helpdesk</md:SurName>
        <md:EmailAddress>helpdesk@bolagsverket.se</md:EmailAddress>
        <md:TelephoneNumber>0771-670670</md:TelephoneNumber>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Bolagsverket Underskriftstjänst*
-	*en: Bolagsverket Signature Service*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Tjänst för elektroniska underskrifter*
-	*en: Service for electronic signatures*

MDUI-Logotype

Working logotypes present:

H:40

W:240

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/Metadata/Get/Bolagsverket is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Bolagsverket)

CONTACT-SUPP

Support contact e-mail (helpdesk@bolagsverket.se) is present

CONTACT-TECH

Technical contact e-mail (helpdesk@bolagsverket.se) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Bolagsverket (https://dss.test.underskriftstjanst.se/Metadata/Get/BolagsverketMinaOmbud)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/BolagsverketMinaOmbud" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Bolagsverket/Leveransavtal-AVT-2019-27</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Mina ombud</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Mina ombud</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Mina ombuds tjänst för elektroniska underskrifter</mdui:Description>
                <mdui:Description xml:lang="en">Mina ombud's service for electronic signatures</mdui:Description>
                <mdui:Logo height="80" width="228">https://static.minaombud.se/eid/mina-ombud-logo.svg</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
        <md:AttributeConsumingService index="0">
            <md:ServiceName xml:lang="sv">Bolagsverket</md:ServiceName>
            <md:ServiceName xml:lang="en">Swedish Companies Registration Office</md:ServiceName>
            <md:RequestedAttribute FriendlyName="signature" Name="urn:oid:1.2.752.201.3.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="transactionIdentifier" Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="o" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Bolagsverket</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Companies Registration Office</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Bolagsverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Companies Registration Office</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://bolagsverket.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://bolagsverket.se/en</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Bolagsverket</md:Company>
        <md:GivenName>Bolagsverket</md:GivenName>
        <md:SurName>Helpdesk</md:SurName>
        <md:EmailAddress>helpdesk@bolagsverket.se</md:EmailAddress>
        <md:TelephoneNumber>0771-670670</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Bolagsverket</md:Company>
        <md:GivenName>Bolagsverket</md:GivenName>
        <md:SurName>Helpdesk</md:SurName>
        <md:EmailAddress>helpdesk@bolagsverket.se</md:EmailAddress>
        <md:TelephoneNumber>0771-670670</md:TelephoneNumber>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Mina ombud*
-	*en: Mina ombud*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Mina ombuds tjänst för elektroniska underskrifter*
-	*en: Mina ombud's service for electronic signatures*

MDUI-Logotype

Working logotypes present:

H:80

W:228

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/Metadata/Get/BolagsverketMinaOmbud is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Bolagsverket)

CONTACT-SUPP

Support contact e-mail (helpdesk@bolagsverket.se) is present

CONTACT-TECH

Technical contact e-mail (helpdesk@bolagsverket.se) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Bolagsverket (https://dss.test.underskriftstjanst.se/Metadata/Get/BolagsverketVerksamt)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/BolagsverketVerksamt" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Bolagsverket/Leveransavtal-AVT-2015-105</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Bolagsverket/Leveransavtal-AVT-2019-27</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Verksamt</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Verksamt</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Verksamts tjänst för elektroniska underskrifter</mdui:Description>
                <mdui:Description xml:lang="en">Verksamt's Service for electronic signatures</mdui:Description>
                <mdui:Logo height="60" width="221">data:image/svg+xml;base64,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</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIEuDCCAqCgAwIBAgIJAO15Yt+1rgOXMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjExMC8GA1UEAwwoVW5kZXJza3JpZnRzdGrDpG5zdGVuIEludGVybiBQS0kgVEVTVCBDQTAeFw0xOTAxMjMxMDM5NTlaFw0yOTAxMjAxMDM5NTlaMFoxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjEvMC0GA1UEAwwmU2lnbmluZ1NlcnZpY2VTYW1sQm9sYWdzdmVya2V0VmVya3NhbXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuhhhyLucaUsrn1EsPkyr3UEaUcfpJEjkWzt45ugC00vjvUteE34GJLR+G+KJo7OyVup7A+n+tv5b09LPcuIw1Ki1ZWZ1gNt3RNHUY2VnkB/TDQt+F+8uWRUiKmwDscbp3B/WjdoN3COilHkfXqdQU9BBTd9wY9SZYAiFAx9exivWKI0pDK137C86J0dgG8f4TC7KvRh3rbT793P+ILf7/NrnpFw2WB3sTGoiCyfJ7+pbmkOhTlizTAoKD6qsFvr0p+8D+Jpj2mfscN/OcPXOIO3p+NDUClfiIS5I79BwL42Aiwou7LnmKGe3r7IKywDxJEybphczofLsglpbY54NAgMBAAGjfzB9MB8GA1UdIwQYMBaAFILIQfQ9kC41ig1K1i8h2luvEEagMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUqO0V6ofXkTtgxy+CFUxFdfzV9jEwDQYJKoZIhvcNAQELBQADggIBACceU0C4quU4jKapCC4dhofewp5xSc9Lnwcy/sjWbMDvdorvnvwtb1S+cGd7gfzZSt67TTuKZ3dtYsuzBPlYI3l7nfs4eWRky1c2lqe+uJMgGFl1Armikl7ofOJNq5WQ53KFFi4AAVrMiJdzdtgeQfERS9wp9E+ohD3JvMW8CpZBY+PlREBTqXTJIM64bS+uxSv7gP26uleZ9pfBRIHca8f0vfMQvVoxmD2KCWEO1Nbh6DIV7bGbezSaJGtbuAdrC8GVREhopwoue8lzZdRHLFvLi4dMWtKI+FL4i5NuW9xF9B3LEsU4U7bpuq33VH0ns39E2jh7ve9vXPIft0tlkFj4rdnNKTjzlZMgSVkvMRWiRHOHfDkOnqbiILINcXtqMjipE8pfBjI6YXbNOvr8ExM31pZO6WvNQ+P+u9CcK7s7tW1J2yuOThyJgHOX71GikoHvUth+toyGY2Fy2ks2EzOTjoU0mYxxdxn5lx0C7us9E1FpXgYQbc3jzlueraSgnJ64d6vuaHs6sCb8iNK6Slc8evvTzBSzSsE9vqhn4wUOaA0sVDcGMnFUqOqoIWmwvba4Ojo6xxXs1aSDGa5/NDB7j6eDA/es6aWct8qTe1wyLkB0ZrgkiG6C88dAvmoANLQpo4HgvgBf7owkdFPkv/Pa9YMYWfYYdaZMo/fNhjbK</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
        <md:AttributeConsumingService index="0">
            <md:ServiceName xml:lang="sv">Bolagsverket</md:ServiceName>
            <md:ServiceName xml:lang="en">Swedish Companies Registration Office</md:ServiceName>
            <md:RequestedAttribute FriendlyName="signature" Name="urn:oid:1.2.752.201.3.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="transactionIdentifier" Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Bolagsverket</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish Companies Registration Office</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Bolagsverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish Companies Registration Office</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://bolagsverket.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://bolagsverket.se/en</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Bolagsverket</md:Company>
        <md:GivenName>Bolagsverket</md:GivenName>
        <md:SurName>Helpdesk</md:SurName>
        <md:EmailAddress>helpdesk@bolagsverket.se</md:EmailAddress>
        <md:TelephoneNumber>0771-670670</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Bolagsverket</md:Company>
        <md:GivenName>Bolagsverket</md:GivenName>
        <md:SurName>Helpdesk</md:SurName>
        <md:EmailAddress>helpdesk@bolagsverket.se</md:EmailAddress>
        <md:TelephoneNumber>0771-670670</md:TelephoneNumber>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Verksamt*
-	*en: Verksamt*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Verksamts tjänst för elektroniska underskrifter*
-	*en: Verksamt's Service for electronic signatures*

MDUI-Logotype

Working logotypes present:

H:60

W:221

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/Metadata/Get/BolagsverketVerksamt is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Bolagsverket)

CONTACT-SUPP

Support contact e-mail (helpdesk@bolagsverket.se) is present

CONTACT-TECH

Technical contact e-mail (helpdesk@bolagsverket.se) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Boverket (https://demo.e-tjanster.bidrag.boverket.se/sign)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://demo.e-tjanster.bidrag.boverket.se/sign" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Boverket sign acceptans</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Boverket sign accept</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Tjänst för elektroniska underskrifter acceptansmiljö</mdui:Description>
                <mdui:Description xml:lang="en">Service for electronic signatures accept environment</mdui:Description>
                <mdui:Logo height="100" width="200">https://www.boverket.se/globalassets/logotyp/logotype.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://demo.e-tjanster.bidrag.boverket.se/Web/Signing/Cybercom/CybercomHandleDssPage.aspx" index="0" isDefault="true"/>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Boverket</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Boverket</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Boverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Boverket</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.boverket.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.boverket.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Sokigo</md:Company>
        <md:GivenName>Support</md:GivenName>
        <md:SurName>Abou support</md:SurName>
        <md:EmailAddress>kundservice-abou@sokigo.com</md:EmailAddress>
        <md:TelephoneNumber>08-23 56 00</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Sokigo</md:Company>
        <md:GivenName>Support</md:GivenName>
        <md:SurName>Abou support</md:SurName>
        <md:EmailAddress>kundservice-abou@sokigo.com</md:EmailAddress>
        <md:TelephoneNumber>08-23 56 00</md:TelephoneNumber>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Boverket sign acceptans*
-	*en: Boverket sign accept*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Tjänst för elektroniska underskrifter acceptansmiljö*
-	*en: Service for electronic signatures accept environment*

MDUI-Logotype

Working logotypes present:

H:100

W:200

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://demo.e-tjanster.bidrag.boverket.se/sign is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Boverket)

CONTACT-SUPP

Support contact e-mail (kundservice-abou@sokigo.com) is present

CONTACT-TECH

Technical contact e-mail (kundservice-abou@sokigo.com) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Boverket (https://dss.test.underskriftstjanst.se/Metadata/Get/Boverket)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/Boverket" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Boverket</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">The Swedish National Board of Housing, Building and Planning</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Boverkets tjänst för elektroniska underskrifter</mdui:Description>
                <mdui:Description xml:lang="en">The Swedish National Board of Housing, Building and Planning's service for electronic signatures</mdui:Description>
                <mdui:Logo height="136" width="272">data:image/png;base64,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</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
        <md:AttributeConsumingService index="0">
            <md:ServiceName xml:lang="sv">Boverket</md:ServiceName>
            <md:ServiceName xml:lang="en">Swedish National Board of Housing, Building and Planning</md:ServiceName>
            <md:RequestedAttribute FriendlyName="signature" Name="urn:oid:1.2.752.201.3.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="transactionIdentifier" Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="o" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Boverket</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish National Board of Housing, Building and Planning</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Boverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish National Board of Housing, Building and Planning</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.boverket.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.boverket.se/en/start/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Boverket</md:Company>
        <md:EmailAddress>registraturen@boverket.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Boverket</md:Company>
        <md:EmailAddress>registraturen@boverket.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Boverket*
-	*en: The Swedish National Board of Housing, Building and Planning*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Boverkets tjänst för elektroniska underskrifter*
-	*en: The Swedish National Board of Housing, Building and Planning's service for electronic signatures*

MDUI-Logotype

Working logotypes present:

H:136

W:272

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/Metadata/Get/Boverket is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Boverket)

CONTACT-SUPP

Support contact e-mail (registraturen@boverket.se) is present

CONTACT-TECH

Technical contact e-mail (registraturen@boverket.se) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Boverket (https://uat.e-tjanster.bidrag.boverket.se/sign)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://uat.e-tjanster.bidrag.boverket.se/sign" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Boverket sign acceptans</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Boverket sign accept</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Tjänst för elektroniska underskrifter acceptansmiljö</mdui:Description>
                <mdui:Description xml:lang="en">Service for electronic signatures accept environment</mdui:Description>
                <mdui:Logo height="100" width="200">https://www.boverket.se/globalassets/logotyp/logotype.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIHOzCCBiOgAwIBAgIQCMnNjxDVCOG+lXoln1yBCDANBgkqhkiG9w0BAQsFADBPMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBEaWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA2MzAwMDAwMDBaFw0yMzA1MjMyMzU5NTlaMHUxCzAJBgNVBAYTAlNFMRYwFAYDVQQIDA1CbGVraW5nZSBsw6RuMRMwEQYDVQQHEwpLYXJsc2tyb25hMREwDwYDVQQKEwhCT1ZFUktFVDEmMCQGA1UEAxMdZS10amFuc3Rlci5iaWRyYWcuYm92ZXJrZXQuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3pJdkF21ZzjAJEJddzEy1csIOkSjt4wo2I4z7YurHkBuQoJDp2FLO2k3Ov191Bg/nADgxOg14W4GhV0Qzr9suWXBfLB5enSKgeyjCKrgsVjcTnPf4CH7kKI69Q8AcanN45gtSVDLdz747rQPSXxjUIxx14MIDyWjdm+VWnKp6fc2cgeLxA1ZU1KNtYpEeMoET7KIyLTpf3uOicKtlKMSkKoXXZ8dzbLYYNcFm7jGPMW3GoIuLBduxcchOWpJ+cYChgIx7BjaQzrqgJvKRVi5EhFmJCbBY4iy1vyMyaOW5SpC8FH7PZgdmP33hbUpEnXogGo8G75HW1xNVzrmeIyNAgMBAAGjggPrMIID5zAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQU/cb7w73rD0bOOqcNCSUC6fM/q1IwgZQGA1UdEQSBjDCBiYIdZS10amFuc3Rlci5iaWRyYWcuYm92ZXJrZXQuc2WCIXVhdC5lLXRqYW5zdGVyLmJpZHJhZy5ib3ZlcmtldC5zZYIiZGVtby5lLXRqYW5zdGVyLmJpZHJhZy5ib3ZlcmtldC5zZYIhdXRiLmUtdGphbnN0ZXIuYmlkcmFnLmJvdmVya2V0LnNlMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwCQYDVR0TBAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGBs+lxDAAABAMASDBGAiEAoP4eZ+owsFqsUN4gKivN7X6VmASIOQbZc4f9uCcfJlwCIQDcM764gNs40BHdPAGz26wd0kpTCv340vITly6862p6wgB2ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABgbPpcTgAAAQDAEcwRQIgaMRZlwvH/WlOFLZaNTC1tCvNtj00zQv+OLH6JX900SECIQDXDuwBeLghgmQy/8E0y6dqiPs/rWPT6MwE8j3WXDY4jwB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABgbPpcUQAAAQDAEcwRQIgGlL81Rr5FKDhppEwy/bVFb/0PpLDTxtMj1ApfrcpqH4CIQDL4zJLXhm91DQWxTCBinKhGqDSW3KKXHlbJzYGF5h7MzANBgkqhkiG9w0BAQsFAAOCAQEAdmspBg+Lk6dMkXgmkS3Fc8qEtGVS7Y2uTJ/96q6S4I/cMQ3Hyz2HCXbe1LUoJd3v3itjYemstOslFrudZkmdfX66BVfyoGAYnaJOvwW3Xk7ksZHps9zEQjy1siv7y7uubkgFawAKT2z0VoF2XSGA8yipOLV5GanQDYqWfF1uUxGT7vVe5Cs1/AT+PbLKvBrrhn2YFAJdbOQht5oQ/QDBDKpfHrLFW8Z9fCeU56/jfv7u/wGLT8od8N1B0oRCtHMSi/U8NkvE7Et6l1GQ8RSNV2lwr1W1BhNQffHmBtZ7WWnhr+RqyDbndbXvdEnaJFni+hx9CB6KU5rznDAqQ3mMtg==</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uat.e-tjanster.bidrag.boverket.se/Web/Signing/Cybercom/CybercomHandleDssPage.aspx" index="0" isDefault="true"/>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Boverket</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Boverket</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Boverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Boverket</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.boverket.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.boverket.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Sokigo</md:Company>
        <md:GivenName>Support</md:GivenName>
        <md:SurName>Abou support</md:SurName>
        <md:EmailAddress>kundservice-abou@sokigo.com</md:EmailAddress>
        <md:TelephoneNumber>08-23 56 00</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Sokigo</md:Company>
        <md:GivenName>Support</md:GivenName>
        <md:SurName>Abou support</md:SurName>
        <md:EmailAddress>kundservice-abou@sokigo.com</md:EmailAddress>
        <md:TelephoneNumber>08-23 56 00</md:TelephoneNumber>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Boverket sign acceptans*
-	*en: Boverket sign accept*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Tjänst för elektroniska underskrifter acceptansmiljö*
-	*en: Service for electronic signatures accept environment*

MDUI-Logotype

Working logotypes present:

H:100

W:200

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://uat.e-tjanster.bidrag.boverket.se/sign is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Boverket)

CONTACT-SUPP

Support contact e-mail (kundservice-abou@sokigo.com) is present

CONTACT-TECH

Technical contact e-mail (kundservice-abou@sokigo.com) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Boverket (https://uat.e-tjanster.klimat.boverket.se/sign)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://uat.e-tjanster.klimat.boverket.se/sign" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Boverket-klimat sign acceptans</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Boverket-klimat sign accept</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Tjänst för elektroniska underskrifter acceptansmiljö</mdui:Description>
                <mdui:Description xml:lang="en">Service for electronic signatures accept environment</mdui:Description>
                <mdui:Logo height="100" width="200">https://www.boverket.se/globalassets/logotyp/logotype.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://uat.e-tjanster.klimat.boverket.se/Web/Signing/Cybercom/CybercomHandleDssPage.aspx" index="0" isDefault="true"/>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="en">Boverket</md:OrganizationName>
        <md:OrganizationName xml:lang="sv">Boverket</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="en">Boverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="sv">Boverket</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="en">https://www.boverket.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="sv">https://www.boverket.se/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Sokigo</md:Company>
        <md:GivenName>Support</md:GivenName>
        <md:SurName>Abou support</md:SurName>
        <md:EmailAddress>kundservice-abou@sokigo.com</md:EmailAddress>
        <md:TelephoneNumber>08-23 56 00</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Sokigo</md:Company>
        <md:GivenName>Support</md:GivenName>
        <md:SurName>Abou support</md:SurName>
        <md:EmailAddress>kundservice-abou@sokigo.com</md:EmailAddress>
        <md:TelephoneNumber>08-23 56 00</md:TelephoneNumber>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Boverket-klimat sign acceptans*
-	*en: Boverket-klimat sign accept*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Tjänst för elektroniska underskrifter acceptansmiljö*
-	*en: Service for electronic signatures accept environment*

MDUI-Logotype

Working logotypes present:

H:100

W:200

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://uat.e-tjanster.klimat.boverket.se/sign is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Boverket)

CONTACT-SUPP

Support contact e-mail (kundservice-abou@sokigo.com) is present

CONTACT-TECH

Technical contact e-mail (kundservice-abou@sokigo.com) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

CGI Sverige AB (https://esign.v2.at.signatureservice.se/signservice-frontend/metadata/4321a583928) (3) (3)

CGI Sverige AB (https://esign.v2.at.signatureservice.se/signservice-frontend/metadata/4321a583928)

(3)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://esign.v2.at.signatureservice.se/signservice-frontend/metadata/4321a583928" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">CGI Secure Signature Creation Device (Instance 2)</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">CGI Secure Signature Creation Device (Instance 2)</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Detta är en tjänst förr elektroniska underskrifter.</mdui:Description>
                <mdui:Description xml:lang="en">This is a service for electronic signatures.</mdui:Description>
                <mdui:Logo height="70" width="102">https://esign.signatureservice.se/images/cgi.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor>
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://esign.v2.at.signatureservice.se/signservice-frontend/consumeassertion" index="0"/>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">CGI Sverige AB</md:OrganizationName>
        <md:OrganizationName xml:lang="en">CGI Sverige AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">CGI Sverige</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">CGI Sverige</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.cgi.com/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.cgi.com/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>CGI Sverige AB</md:Company>
        <md:EmailAddress>support@cgi.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>CGI Sverige AB</md:Company>
        <md:EmailAddress>info@cgi.com</md:EmailAddress>
        <md:TelephoneNumber>+4686710371</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="billing">
        <md:Company>CGI Sverige AB</md:Company>
        <md:EmailAddress>support@cgi.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="administrative">
        <md:Company>CGI Sverige AB</md:Company>
        <md:EmailAddress>support@cgi.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

WARNING

Certificates

The certificate for signing and encryption has expired

WARNING

Certificates

This service share the same certificate for signing and encryption

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: CGI Secure Signature Creation Device (Instance 2)*
-	*en: CGI Secure Signature Creation Device (Instance 2)*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Detta är en tjänst förr elektroniska underskrifter.*
-	*en: This is a service for electronic signatures.*

ERROR

MDUI-Logotype

No working logotype are present in mdui

ERROR

MDUI-Logotype

The following errors were encountered while processing logotypes:

-	Logotype download from: *https://esign.signatureservice.se/images/cgi.png* failed with HTTP response code 0

WARNING

NameID-SP

No supported NameID declarations are present.NameID declarations for an SP should declare at least one of the NameID formats:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://esign.v2.at.signatureservice.se/signservice-frontend/metadata/4321a583928 is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (CGI Sverige AB)

CONTACT-SUPP

Support contact e-mail (support@cgi.com) is present

CONTACT-TECH

Technical contact e-mail (info@cgi.com) is present

ERROR

EIDAS-SP

A Service Provider consuming eIDAS attributes must be declared either as public or private.
Add one of EntityCategory values:

-	*http://id.elegnamnden.se/st/1.0/public-sector-sp*
-	*http://id.elegnamnden.se/st/1.0/private-sector-sp*

Centrala studiestödsnämnden (https://dss.test.underskriftstjanst.se/Metadata/Get/CSN) (1)

Centrala studiestödsnämnden (https://dss.test.underskriftstjanst.se/Metadata/Get/CSN)

(1)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/CSN" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"/>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Centrala studiestödsnämnden</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">The Swedish Board of Student Finance</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Centrala studiestödsnämndens tjänst för elektroniska underskrifter</mdui:Description>
                <mdui:Description xml:lang="en">The Swedish Board of Student Finance's service for electronic signatures</mdui:Description>
                <mdui:Logo height="64" width="64">data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHN2ZyB3aWR0aD0iMTUzcHgiIGhlaWdodD0iMTUzcHgiIHZpZXdCb3g9IjAgMCAxNTMgMTUzIiB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiPgogICAgPHRpdGxlPkNTTiBMb2dvPC90aXRsZT4KICAgIDxkZWZzPgogICAgICAgIDxwb2x5Z29uIGlkPSJwYXRoLTEiIHBvaW50cz0iMC44MiAxNTIuMTk2IDE1Mi4xOTcgMTUyLjE5NiAxNTIuMTk3IDAuODYgMC44MiAwLjg2Ij48L3BvbHlnb24+CiAgICA8L2RlZnM+CiAgICA8ZyBpZD0iUGFnZS0xIiBzdHJva2U9Im5vbmUiIHN0cm9rZS13aWR0aD0iMSIgZmlsbD0ibm9uZSIgZmlsbC1ydWxlPSJldmVub2RkIj4KICAgICAgICA8ZyBpZD0iY3NuLWxvZ28iPgogICAgICAgICAgICA8ZyBpZD0iR3JvdXAtMyI+CiAgICAgICAgICAgICAgICA8bWFzayBpZD0ibWFzay0yIiBmaWxsPSJ3aGl0ZSI+CiAgICAgICAgICAgICAgICAgICAgPHVzZSB4bGluazpocmVmPSIjcGF0aC0xIj48L3VzZT4KICAgICAgICAgICAgICAgIDwvbWFzaz4KICAgICAgICAgICAgICAgIDxnIGlkPSJDbGlwLTIiPjwvZz4KICAgICAgICAgICAgICAgIDxwb2x5bGluZSBpZD0iRmlsbC0xIiBmaWxsPSIjZTQwMjJkIiBtYXNrPSJ1cmwoI21hc2stMikiIHBvaW50cz0iMC44MiAxNTIuMzAxIDE1Mi4yNiAwLjg2IDE1Mi4yNiAxNTIuMzAxIDAuODIgMTUyLjMwMSI+PC9wb2x5bGluZT4KICAgICAgICAgICAgPC9nPgogICAgICAgICAgICA8cGF0aCBkPSJNODAuMDIsMTAzLjgxOSBDNzYuNTQ4LDEwMC4wNjYgNzIuMDAyLDk4LjkzOSA2Ny43OCw5OS4wMiBDNTQuMjExLDk4LjkzOSA0OC4wMTgsMTA3LjY5MSA0OC4xLDEyMC44NiBDNDguMDE4LDEzMi4zNTcgNTMuNDIxLDE0Mi42MzUgNjYuNTgsMTQyLjcgQzcxLjgwNCwxNDIuNjM1IDc2Ljc0NSwxNDAuOTc4IDgwLjAyLDEzNi43IEw4MC4wMiwxMjUuMTgxIEM3Ny4yMDcsMTI4Ljc3NyA3NC4xNzcsMTMwLjk2NSA2OS43LDEzMC45NCBDNjMuMjM5LDEzMC45NjUgNjAuOCwxMjYuNDU2IDYwLjgyLDEyMS41OCBDNjAuOCwxMTUuMTg0IDYzLjgzMSwxMTEuODAyIDY5Ljk0LDExMS43NCBDNzMuMTg5LDExMS44MDIgNzYuNTQ4LDExMi43MzEgODAuMDIsMTE2LjU0IEw4MC4wMiwxMDMuODE5IiBpZD0iRmlsbC00IiBmaWxsPSIjRkZGRkZGIj48L3BhdGg+CiAgICAgICAgICAgIDxwYXRoIGQ9Ik0xMTAuMjYsMTAyLjYyIEMxMDcuNzMxLDk5Ljg3NSAxMDIuMDY1LDk4LjQxNiA5Ny41NCw5OC4zIEM4OS4zNDksOTguNDE2IDgxLjk2OSwxMDIuODU5IDgxLjk0LDExMS43NCBDODEuOTY5LDEyOC45ODMgOTkuMjMxLDEyMi41NTIgOTkuMjIxLDEyOS4wMTkgQzk5LjIzMSwxMzIuMDM0IDk2LjIwMSwxMzIuNDMyIDk0LjE4MSwxMzIuMzggQzkwLjY2NiwxMzIuNDMyIDg0Ljg2OCwxMjkuODQ2IDgyLjksMTI2LjYyIEw4Mi45LDEzOC4xNCBDODYuNTE1LDE0MC41MiA5MS41MjIsMTQyLjExMSA5Ni4zNCwxNDIuMjIxIEMxMDQuOTY1LDE0Mi4xMTEgMTExLjIyNCwxMzcuMDA3IDExMS4yMjEsMTI4LjMwMSBDMTExLjIyNCwxMTMuNjY2IDkzLjk2LDExOC4yNDIgOTMuOTQsMTEyLjk0IEM5My45NiwxMTAuMzUxIDk2Ljk5MiwxMDkuNjg3IDk4Ljk4MSwxMDkuNTggQzEwMi43OSwxMDkuNjg3IDEwNy45MywxMTEuNzQ0IDExMC4yNiwxMTQuODYgTDExMC4yNiwxMDIuNjIiIGlkPSJGaWxsLTUiIGZpbGw9IiNGRkZGRkYiPjwvcGF0aD4KICAgICAgICAgICAgPHBhdGggZD0iTTExMi42NiwxNDEuNSBMMTI1Ljg2LDE0MS41IEwxMjUuODYsMTIwLjE0IEMxMjUuOTA0LDExNS4zODMgMTI3LjQyLDExMS40MDQgMTMxLjYyLDExMS41IEMxMzUuMTk0LDExMS40MDQgMTM2LjExOCwxMTMuODU4IDEzNi4xODEsMTE3LjUgTDEzNi4xODEsMTQxLjUgTDE0OS4zOCwxNDEuNSBMMTQ5LjM4LDExMS43NCBDMTQ5LjI5NiwxMDIuNTE5IDE0NC42MTcsOTguOTM5IDEzOC4xLDk5LjAyIEMxMzIuMjMsOTguOTM5IDEyNy43NSwxMDEuOTIzIDEyNS4xNCwxMDkuMSBMMTI1LjE0LDEwMC4yMiBMMTEyLjY2LDEwMC4yMiBMMTEyLjY2LDE0MS41IiBpZD0iRmlsbC02IiBmaWxsPSIjRkZGRkZGIj48L3BhdGg+CiAgICAgICAgPC9nPgogICAgPC9nPgo8L3N2Zz4=</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep">
                <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
            </md:EncryptionMethod>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
        <md:AttributeConsumingService index="0">
            <md:ServiceName xml:lang="sv">Centrala studiestödsnämnden</md:ServiceName>
            <md:ServiceName xml:lang="en">The Swedish Board of Student Finance</md:ServiceName>
            <md:RequestedAttribute FriendlyName="signature" Name="urn:oid:1.2.752.201.3.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="transactionIdentifier" Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="o" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Centrala studiestödsnämnden</md:OrganizationName>
        <md:OrganizationName xml:lang="en">The Swedish Board of Student Finance</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Centrala studiestödsnämnden</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">The Swedish Board of Student Finance</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.csn.se/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.csn.se/languages/english.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Centrala studiestödsnämnden</md:Company>
        <md:EmailAddress>helpdesk@csn.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Centrala studiestödsnämnden</md:Company>
        <md:EmailAddress>helpdesk@csn.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Centrala studiestödsnämnden*
-	*en: The Swedish Board of Student Finance*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Centrala studiestödsnämndens tjänst för elektroniska underskrifter*
-	*en: The Swedish Board of Student Finance's service for electronic signatures*

MDUI-Logotype

Working logotypes present:

H:64

W:64

Type:SVG

WARNING

MDUI-Logotype

SVG image present which references external elements (href)

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/Metadata/Get/CSN is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Centrala studiestödsnämnden)

CONTACT-SUPP

Support contact e-mail (helpdesk@csn.se) is present

CONTACT-TECH

Technical contact e-mail (helpdesk@csn.se) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Comfact AB (https://test.comfact.com/pdss/metadata/c62bb6b45599431f)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://test.comfact.com/pdss/metadata/c62bb6b45599431f" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/private-sector-sp</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Comfact Digital Signature Service</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Comfact Digital Signature Service</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Detta är en tjänst för digitala signaturer.</mdui:Description>
                <mdui:Description xml:lang="en">This is a service for digital signatures.</mdui:Description>
                <mdui:Logo height="68" width="321">https://test.comfact.com/pdss/content/comfact/images/logo2.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIGSjCCA/6gAwIBAgITSQAAAATZZISXAt4EzAAAAAAABDBBBgkqhkiG9w0BAQow
            NKAPMA0GCWCGSAFlAwQCAQUAoRwwGgYJKoZIhvcNAQEIMA0GCWCGSAFlAwQCAQUA
            ogMCASAwfDELMAkGA1UEBhMCU0UxEzARBgNVBGEMCjU1NjM0MjY2NjYxHTAbBgNV
            BAsMFENlcnRpZmljYXRlIFNlcnZpY2VzMRMwEQYDVQQKDApDb21mYWN0IEFCMSQw
            IgYDVQQDDBtDb21mYWN0IFNlcnZpY2VzIENBIEcyIFRFU1QwHhcNMjIwMjE1MDg0
            ODQwWhcNMjQwMjE1MDg0ODQwWjB5MQswCQYDVQQGEwJTRTETMBEGA1UEYQwKNTU2
            MzQyNjY2NjEdMBsGA1UECwwUQ2VydGlmaWNhdGUgU2VydmljZXMxEzARBgNVBAoM
            CkNvbWZhY3QgQUIxITAfBgNVBAMMGENvbWZhY3QgRFNTIFNpZ25pbmcgVEVTVDCC
            ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMLEMYO9Zi+zx82veQgHt0Bq
            GCDwAlPKtkO18MpAdlN17EXabzzsTw+38to4vzVEUSQ96lqiFMvikqlwS+3nsRlc
            BhSX3z1/wt5UXPkpMvIQXTk+KZ8nfscWL/v9548q6rzIFI2ZhgFtY6uXrHc0VGKz
            E4lSP4p0QK+UFWQijasot+uWMhqxc970XKruWsFlMSgINWS0xevBXvCnjn4QzXye
            XKh4bV9QjsGc0aQmrAwG6m9yXAh/fMmf89J0xOjZxMLN+3RclW4E6iVdamNta27D
            lZ48eh6LG5YuyRxfa/jfUiHOMeLEK82WQ5yXeUyRU0G/UL3CF1xsNJbaqkboLPUC
            AwEAAaOCAV4wggFaMA4GA1UdDwEB/wQEAwIHgDBBBgNVHSAEOjA4MDYGByqFcIF9
            CAQwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9jb21mYWN0LnNlL3JlcG9zaXRvcnkw
            HQYDVR0OBBYEFAj/c0Y6qM9586DsttiU3nqwP5cTMB8GA1UdIwQYMBaAFM7ugfWO
            SfZbuoEMOBlDiEm5CShoMFEGA1UdHwRKMEgwRqBEoEKGQGh0dHA6Ly9wa2kudGVz
            dC5jb21mYWN0LmNvbS9jcmxzL2NvbWZhY3Qtc2VydmljZXMtY2EtZzItdGVzdC5j
            cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhodHRwOi8vcGtpLnRlc3Qu
            Y29tZmFjdC5jb20vY2VydGlmaWNhdGVzL2NvbWZhY3Qtc2VydmljZXMtY2EtZzIt
            dGVzdC5jZXIwDAYDVR0TAQH/BAIwADBBBgkqhkiG9w0BAQowNKAPMA0GCWCGSAFl
            AwQCAQUAoRwwGgYJKoZIhvcNAQEIMA0GCWCGSAFlAwQCAQUAogMCASADggIBALQw
            Xx6PrrElZY6Vm0oqv5XCQF+ynYvKQqQHD49pNQiVDcgRerCHkddCb379w/PvfOLE
            FWuLltdoLKh50mqWBTXaECsltsNBhUX2mqOM2ZoXI1fysgqNF0jakn7d4DePNXvB
            m75KRVq56w0rV7JfmnKjHBpldqDgH7HfaMw9fycW+09fJ5BnSdmahCZxlbxeg+/I
            qvKfLT/GAPBxBeMUWeWqdvG9eNcZpBn9PdwRwQoSwbd34BJjle+oTBxHRTE9Q/V/
            u8nah8oqSrayG1D+vzg2V9CQvW04T6W7P2OJX/VArIA8huyJuehj+ZrYZht5ZHZp
            ekzq61uz4f8rdu7eZAiBDzUxSybrM8dXhy7X/l3mnqyofzp5pqvdO2Xz+zDE2DJx
            IlNrxjnMxxFzyHYHXGSPFOStXJla4FvepxRIt6GSynDkQTQPHBhPKWl0RXGA6v5w
            MKM7vCLr0OmM7uumSDh7eoXmZKAsgYmU0qF2sr9QO3oskIT9/gpWa4fk7uUvmJKS
            AsmmyPkDx0RApOqwtP+jKs715nvameGO5rIyZ7kHZUTrRJP5aB3eOwufYO3SKsil
            UmB2B9KVGDlt3jjjkZziUtPZjChBOOaZ5uDL6xjomI+5LLB/fDPaQHawUQfbl8jV
            3SeFRyBpHrtYg38cTdlpmOM1JVLDAozs5ZlIox5d</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIGTTCCBAGgAwIBAgITSQAAAAVWheuis56eVwAAAAAABTBBBgkqhkiG9w0BAQow
            NKAPMA0GCWCGSAFlAwQCAQUAoRwwGgYJKoZIhvcNAQEIMA0GCWCGSAFlAwQCAQUA
            ogMCASAwfDELMAkGA1UEBhMCU0UxEzARBgNVBGEMCjU1NjM0MjY2NjYxHTAbBgNV
            BAsMFENlcnRpZmljYXRlIFNlcnZpY2VzMRMwEQYDVQQKDApDb21mYWN0IEFCMSQw
            IgYDVQQDDBtDb21mYWN0IFNlcnZpY2VzIENBIEcyIFRFU1QwHhcNMjIwMjE1MDg1
            MTUxWhcNMjQwMjE1MDg1MTUxWjB8MQswCQYDVQQGEwJTRTETMBEGA1UEYQwKNTU2
            MzQyNjY2NjEdMBsGA1UECwwUQ2VydGlmaWNhdGUgU2VydmljZXMxEzARBgNVBAoM
            CkNvbWZhY3QgQUIxJDAiBgNVBAMMG0NvbWZhY3QgRFNTIEVuY3J5cHRpb24gVEVT
            VDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALpAG43yapuAD3nMVy6V
            D4lg3DhRtojvRhyqXGQfMfPDWgy3VvLNKLc/2PUo46QnhRUP/ns5uLFY2gTl0Du0
            U8+YEWrBtkUz4+CiO00ooRGp3CpdHAlkn1kFFPO+TOKKy1ED4X58YNGDY53H/xx6
            P75X6CyD2f69w12kR6h8xcFn5geBtVEL0fLx4qs4ay+Yaf8xuT/BjYKRbXjrfAU5
            NnxZm41Cl0R/ukHkC9CrwueOeKH/ixrMtVc4ueieZmhfwvPWHJf1WpsRQ9g2jx20
            +azmCBh4xhJB+C9COFWzP6l98OgoaUJkcEluO72arXFCEyD8ZL02yBxDLVoPAd5v
            U/0CAwEAAaOCAV4wggFaMA4GA1UdDwEB/wQEAwIFIDBBBgNVHSAEOjA4MDYGByqF
            cIF9CAQwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9jb21mYWN0LnNlL3JlcG9zaXRv
            cnkwHQYDVR0OBBYEFNvLtUo4+Nif8+SG8x2MDYV+9ksFMB8GA1UdIwQYMBaAFM7u
            gfWOSfZbuoEMOBlDiEm5CShoMFEGA1UdHwRKMEgwRqBEoEKGQGh0dHA6Ly9wa2ku
            dGVzdC5jb21mYWN0LmNvbS9jcmxzL2NvbWZhY3Qtc2VydmljZXMtY2EtZzItdGVz
            dC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhodHRwOi8vcGtpLnRl
            c3QuY29tZmFjdC5jb20vY2VydGlmaWNhdGVzL2NvbWZhY3Qtc2VydmljZXMtY2Et
            ZzItdGVzdC5jZXIwDAYDVR0TAQH/BAIwADBBBgkqhkiG9w0BAQowNKAPMA0GCWCG
            SAFlAwQCAQUAoRwwGgYJKoZIhvcNAQEIMA0GCWCGSAFlAwQCAQUAogMCASADggIB
            AAMDRpLEsayD/j48qylOzPTOzWqK0CyCO+GA5rG4LHJ5vo4k3Y8lbJ8hBFHL6yQS
            MrtpHiMIDzJaI3U9dU3ILVscieXnACNyfdru2rJcy+mggNyxCb5EFGCT1wSMyqRh
            2RXdlP3UfnlvmWL9u0K5mdPPiWhLM01hK98TFHkSVDEESQIRQ6YLjvv5vlV+RGqk
            hSmJW1QeGhZnb6iibEcFRb+TAT2kG2uNTqB5ph1gYxo4QojXYx1Hb0rvrcheSToM
            T8we9RHoCkjQpEE68WPKkMjQQyHG34bN1+giP+enccAURzIITjBDhBOEzCva/Ttt
            qzTtHHYrQOLiJv+9Ubmkj6+3TGo8B2GegllM1U4eyuScTlDKnOhI6HO2/866XNY/
            XEtgGKnp08bORje8M10H8JqYTb/uLtgLcBE4HeuLdXOHa17L9JKCUEqL4VlkZa5K
            mBbiaLfQXWdZSdLYjb8Dpj9YWxtAFg1nHSBfZh+OMXdDfBQGWaIZna/DZF4t37Ww
            DEiPrmlb5gC8q3XHI+Yr5e+3JCWGqKsXe0xXHWoC422J6o2Whf9DgXuBEj7suYIZ
            YJSvlca5eXQsTOlbJhRqQURlxI7nSGyEis9DWrTCFFBQt6nfut9s1l35Kw98WRpm
            3LvurP4cw1euljkFw1MsAv8PuIv3EmfSh8t/hp7MsFmt</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test.comfact.com/pdss/mission/acs/c62bb6b45599431f" index="0"/>
        <md:AttributeConsumingService index="0" isDefault="true">
            <md:ServiceName xml:lang="sv">Comfact Digital Signature Service</md:ServiceName>
            <md:ServiceName xml:lang="en">Comfact Digital Signature Service</md:ServiceName>
            <md:RequestedAttribute Name="urn:oid:1.2.752.201.3.2" isRequired="false"/>
            <md:RequestedAttribute Name="urn:oid:1.2.752.201.3.13" isRequired="false"/>
            <md:RequestedAttribute Name="urn:oid:1.2.752.201.3.11" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Comfact AB</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Comfact AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Comfact</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Comfact</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">https://www.comfact.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.comfact.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Comfact AB</md:Company>
        <md:EmailAddress>support@comfact.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:Company>Comfact AB</md:Company>
        <md:EmailAddress>support@comfact.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Comfact Digital Signature Service*
-	*en: Comfact Digital Signature Service*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Detta är en tjänst för digitala signaturer.*
-	*en: This is a service for digital signatures.*

MDUI-Logotype

Working logotypes present:

H:68

W:321

Type:PNG

MDUI-Logotype

All logotypes are OK but no vector graphic image of type SVG is present. Consider providing images in vector graphic for best UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*

EntityID-URI

The EntityID value https://test.comfact.com/pdss/metadata/c62bb6b45599431f is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Comfact AB)

CONTACT-SUPP

Support contact e-mail (support@comfact.com) is present

CONTACT-TECH

Technical contact e-mail (support@comfact.com) is present

SP-TYPE

This Service Provider has declaration of being a private Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Cybercom Sweden AB (https://dss.test.underskriftstjanst.se/) (2) (1)

Cybercom Sweden AB (https://dss.test.underskriftstjanst.se/)

(2)

(1)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Cybercom IdentityHub Underskriftstjänst</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Cybercom IdentityHub Signature Service</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Tjänst för elektroniska underskrifter</mdui:Description>
                <mdui:Description xml:lang="en">Service for electronic signatures</mdui:Description>
                <mdui:Logo height="98" width="90">http://www.cybercom.com/static/cybercom/img/cybercom_logo.png</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIEpDCCAoygAwIBAgIJALRRdxuvjWlWMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjExMC8GA1UEAwwoVW5kZXJza3JpZnRzdGrDpG5zdGVuIEludGVybiBQS0kgVEVTVCBDQTAeFw0xODAxMTkxMjI1MjVaFw0yODAxMTcxMjI1MjVaMEYxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjEbMBkGA1UEAwwSU2lnbmluZ1NlcnZpY2VTYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QA1K7lWTn9PWIr47ODgrMvK97JBLUzuJCuDhwHFZkyZm81lTqHKMxQSlT9wGfyEjHUctvG+QnjCMnnvHb4whizrbDU+o+4Z833Z4Iz4X/pOCz3IXMtoWsOs6v1GNZPL+5ExvpllLgjDlfbNMzFP3H6eZw4NFlzwlfymyxXs4OpFPBw8PnAv8gYQ4kC/+w/D+Xor0VLF8pGaMdtrSOmqVlWEpO+mSFKU8wCMKlUZLIFlfPP8+fj83rN/LbzwSTDCcrtGuL4WRn4kZ+tN0j9FCuHpv2ioQLPmv1jX5RggSjLVoLUqJCfYn6kUQF9yBf1hK2J3TCOe/2V9wR/02UWfBQIDAQABo38wfTAfBgNVHSMEGDAWgBSCyEH0PZAuNYoNStYvIdpbrxBGoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFBAmqr6l5zDjyVtKsYEJYO7dy47eMA0GCSqGSIb3DQEBCwUAA4ICAQCKNlrEkQtuSVaqkKPtE0rTsPh8B+qjSaIPDdgFbDeuKM3b0zJMPrhVI1zW0LpGiqlAZpFcNevfG8+4Bdl8E4T1AJKSdXIdG4FGHt3oEFM1hEN+ZT5K4zXIhkKYMBwLp5WcaHGcZYXb7EUnDitkLaqMbtcRikRZJOT2Ltyx5APX0N7JDzPG4dVU7spvQfRgrVggzililHM9FkNYuKvj84SsAsHGJN8QCznWvTRBK/UDt7mOjl7Hi2eB8CLmPaanjgg9tb05/PY/kWu7OPWMMt5qaeMQCG/WPbQw7xPazvWFJvafM3Hle3M5yZIRzpUuXSBh3f5Sh5lKoDU3dFVrHDQlVudh+3XvYLenCrGenmxL3idHhZxddFhA5r8kQ4ML9KJQd/Kkb0nR35onb3K7EI60Qj1j+dyf0LaBHDioEGcZp42+cG0gYUEPMjaZ7bxTohUirfq80UpWNRU/21A/MiwYtV7G2cdzH+GBrIRN78T2G313XZr/VqtR2Zj8Co2qVchWYn+KZIAxEVmV/oSA6AhntjHEKgk8f+z8Lpj65wVIxcLFqWJZ32IEdfyQrx2PWJmCdiu7Tbfs9mX1bQt+DCZwGgiOdziiQoaJZ8ZVqzPW/Ag6tkIIPBcddff9dHAUz0rzLR+6TMNIMEsjRT5TQ3HTsx1kANXJfULo+syV7nVcsw==</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIEpDCCAoygAwIBAgIJALRRdxuvjWlWMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjExMC8GA1UEAwwoVW5kZXJza3JpZnRzdGrDpG5zdGVuIEludGVybiBQS0kgVEVTVCBDQTAeFw0xODAxMTkxMjI1MjVaFw0yODAxMTcxMjI1MjVaMEYxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjEbMBkGA1UEAwwSU2lnbmluZ1NlcnZpY2VTYW1sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QA1K7lWTn9PWIr47ODgrMvK97JBLUzuJCuDhwHFZkyZm81lTqHKMxQSlT9wGfyEjHUctvG+QnjCMnnvHb4whizrbDU+o+4Z833Z4Iz4X/pOCz3IXMtoWsOs6v1GNZPL+5ExvpllLgjDlfbNMzFP3H6eZw4NFlzwlfymyxXs4OpFPBw8PnAv8gYQ4kC/+w/D+Xor0VLF8pGaMdtrSOmqVlWEpO+mSFKU8wCMKlUZLIFlfPP8+fj83rN/LbzwSTDCcrtGuL4WRn4kZ+tN0j9FCuHpv2ioQLPmv1jX5RggSjLVoLUqJCfYn6kUQF9yBf1hK2J3TCOe/2V9wR/02UWfBQIDAQABo38wfTAfBgNVHSMEGDAWgBSCyEH0PZAuNYoNStYvIdpbrxBGoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0OBBYEFBAmqr6l5zDjyVtKsYEJYO7dy47eMA0GCSqGSIb3DQEBCwUAA4ICAQCKNlrEkQtuSVaqkKPtE0rTsPh8B+qjSaIPDdgFbDeuKM3b0zJMPrhVI1zW0LpGiqlAZpFcNevfG8+4Bdl8E4T1AJKSdXIdG4FGHt3oEFM1hEN+ZT5K4zXIhkKYMBwLp5WcaHGcZYXb7EUnDitkLaqMbtcRikRZJOT2Ltyx5APX0N7JDzPG4dVU7spvQfRgrVggzililHM9FkNYuKvj84SsAsHGJN8QCznWvTRBK/UDt7mOjl7Hi2eB8CLmPaanjgg9tb05/PY/kWu7OPWMMt5qaeMQCG/WPbQw7xPazvWFJvafM3Hle3M5yZIRzpUuXSBh3f5Sh5lKoDU3dFVrHDQlVudh+3XvYLenCrGenmxL3idHhZxddFhA5r8kQ4ML9KJQd/Kkb0nR35onb3K7EI60Qj1j+dyf0LaBHDioEGcZp42+cG0gYUEPMjaZ7bxTohUirfq80UpWNRU/21A/MiwYtV7G2cdzH+GBrIRN78T2G313XZr/VqtR2Zj8Co2qVchWYn+KZIAxEVmV/oSA6AhntjHEKgk8f+z8Lpj65wVIxcLFqWJZ32IEdfyQrx2PWJmCdiu7Tbfs9mX1bQt+DCZwGgiOdziiQoaJZ8ZVqzPW/Ag6tkIIPBcddff9dHAUz0rzLR+6TMNIMEsjRT5TQ3HTsx1kANXJfULo+syV7nVcsw==</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Cybercom Sweden AB</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Cybercom Sweden AB</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">http://www.cybercom.com/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">http://www.cybercom.com/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
        <md:Company>Cybercom Sweden AB</md:Company>
        <md:EmailAddress>servicedesk@cybercomgroup.com</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="other">
        <md:Company>Cybercom Sweden AB</md:Company>
        <md:EmailAddress>cesp@cybercom.com</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Cybercom IdentityHub Underskriftstjänst*
-	*en: Cybercom IdentityHub Signature Service*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Tjänst för elektroniska underskrifter*
-	*en: Service for electronic signatures*

ERROR

MDUI-Logotype

No working logotype are present in mdui

ERROR

MDUI-Logotype

The following errors were encountered while processing logotypes:

-	Logotype download from: *http://www.cybercom.com/static/cybercom/img/cybercom_logo.png* failed with HTTP response code *301*

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/ is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Cybercom Sweden AB)

CONTACT-SUPP

Support contact e-mail (servicedesk@cybercomgroup.com) is present

WARNING

CONTACT-TECH

No technical contact e-mail is available

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Domstolsverket (https://dss.test.underskriftstjanst.se/Metadata/Get/Domstolsverket)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/Domstolsverket" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Domstolsverket/Elektronisk-Underskrift-1420-2018</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Sveriges Domstolar</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">The Swedish Courts</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Sveriges Domstolars e-tjänster</mdui:Description>
                <mdui:Description xml:lang="en">The Swedish Courts public e-services</mdui:Description>
                <mdui:Logo height="69" width="337">data:image/svg+xml;base64,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</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
        <md:AttributeConsumingService index="0">
            <md:ServiceName xml:lang="sv">Domstolsverket</md:ServiceName>
            <md:ServiceName xml:lang="en">Swedish National Courts Administration</md:ServiceName>
            <md:RequestedAttribute FriendlyName="signature" Name="urn:oid:1.2.752.201.3.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="transactionIdentifier" Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Domstolsverket</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish National Courts Administration</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Domstolsverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish National Courts Administration</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">http://www.domstol.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">http://www.domstol.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:EmailAddress>operations@dom.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:EmailAddress>operations@dom.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Sveriges Domstolar*
-	*en: The Swedish Courts*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Sveriges Domstolars e-tjänster*
-	*en: The Swedish Courts public e-services*

MDUI-Logotype

Working logotypes present:

H:69

W:337

Type:SVG

MDUI-Logotype

At least one logo contains vector graphic of type SVG. This gives the best expected UI experience.

NameID-SP

NameID declaration is present:

-	*urn:oasis:names:tc:SAML:2.0:nameid-format:transient*
-	*urn:oasis:names:tc:SAML:2.0:nameid-format:persistent*

EntityID-URI

The EntityID value https://dss.test.underskriftstjanst.se/Metadata/Get/Domstolsverket is a valid URI

ORG

OrganizationName element is present

ORG-SWE

OrganizationName element has a value in Swedish (Domstolsverket)

CONTACT-SUPP

Support contact e-mail (operations@dom.se) is present

CONTACT-TECH

Technical contact e-mail (operations@dom.se) is present

SP-TYPE

This Service Provider has declaration of being a public Service Provider

EIDAS-SP

This service has the basic eIDAS settings for Service Providers

Domstolsverket (https://dss.test.underskriftstjanst.se/Metadata/Get/DomstolsverketDMZ)

Metadata Metadata XML for this entity

Metadata

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor entityID="https://dss.test.underskriftstjanst.se/Metadata/Get/DomstolsverketDMZ" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:Extensions>
        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
            <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/public-sector-sp</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/st/1.0/sigservice</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/ec/sc/uncertified-loa3-pnr</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.elegnamnden.se/ec/1.0/eidas-naturalperson</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/sc/eid-choice-2017</saml:AttributeValue>
                <saml:AttributeValue xsi:type="xs:string" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">http://id.swedenconnect.se/contract/Cybercom/Domstolsverket/Elektronisk-Underskrift-1420-2018</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdrpi:RegistrationInfo registrationAuthority="https://qa.md.swedenconnect.se/" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi">
            <mdrpi:RegistrationPolicy xml:lang="en">https://swedenconnect.se/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="sv">Sveriges Domstolar</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">The Swedish Courts</mdui:DisplayName>
                <mdui:Description xml:lang="sv">Sveriges Domstolars e-tjänster</mdui:Description>
                <mdui:Description xml:lang="en">The Swedish Courts public e-services</mdui:Description>
                <mdui:Logo height="69" width="337">data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAzMzcuMTQgNjguNTEiPjxkZWZzPjxzdHlsZT4uY2xzLTEsLmNscy05e2ZpbGw6IzAwNzJiYjt9LmNscy0ye2ZpbGw6I2M2MDA2MDt9LmNscy0xMCwuY2xzLTExLC5jbHMtMTIsLmNscy0xMywuY2xzLTE0LC5jbHMtMTUsLmNscy0xNiwuY2xzLTE3LC5jbHMtMTgsLmNscy0xOSwuY2xzLTIwLC5jbHMtMjEsLmNscy0yMiwuY2xzLTIzLC5jbHMtMjQsLmNscy0zLC5jbHMtOHtmaWxsOm5vbmU7fS5jbHMtM3tzdHJva2U6IzFkMWQxYjt9LmNscy0yMywuY2xzLTN7c3Ryb2tlLWxpbmVjYXA6cm91bmQ7fS5jbHMtMTEsLmNscy0xMiwuY2xzLTE1LC5jbHMtMTYsLmNscy0xNywuY2xzLTE5LC5jbHMtMjAsLmNscy0yMSwuY2xzLTIzLC5jbHMtMjQsLmNscy0zLC5jbHMtOHtzdHJva2UtbWl0ZXJsaW1pdDozLjg2O30uY2xzLTExLC5jbHMtMTksLmNscy0ze3N0cm9rZS13aWR0aDowLjA5cHg7fS5jbHMtNCwuY2xzLTd7ZmlsbDojZmZlMDAwO30uY2xzLTV7ZmlsbDojZGMyZjM0O30uY2xzLTZ7ZmlsbDojZmZmO30uY2xzLTcsLmNscy05e2ZpbGwtcnVsZTpldmVub2RkO30uY2xzLTEwLC5jbHMtMTEsLmNscy0xMywuY2xzLTE1LC5jbHMtMTYsLmNscy0xNywuY2xzLTE4LC5jbHMtMjAsLmNscy0yMSwuY2xzLTIyLC5jbHMtMjQsLmNscy04e3N0cm9rZTojMDA3MmJiO30uY2xzLTh7c3Ryb2tlLXdpZHRoOjAuMDdweDt9LmNscy0xMCwuY2xzLTEzLC5jbHMtMTQsLmNscy0xOCwuY2xzLTIye3N0cm9rZS1saW5lam9pbjpyb3VuZDt9LmNscy0xMHtzdHJva2Utd2lkdGg6MC4xM3B4O30uY2xzLTEyLC5jbHMtMTQsLmNscy0xOSwuY2xzLTIze3N0cm9rZTojZmZlMDAwO30uY2xzLTEyLC5jbHMtMTMsLmNscy0xNCwuY2xzLTE2e3N0cm9rZS13aWR0aDowLjEycHg7fS5jbHMtMTV7c3Ryb2tlLXdpZHRoOjAuMDRweDt9LmNscy0xN3tzdHJva2Utd2lkdGg6MC4yMXB4O30uY2xzLTE4e3N0cm9rZS13aWR0aDowLjEycHg7fS5jbHMtMjAsLmNscy0yMntzdHJva2Utd2lkdGg6MC4xOHB4O30uY2xzLTIxe3N0cm9rZS13aWR0aDowLjI2cHg7fS5jbHMtMjN7c3Ryb2tlLXdpZHRoOjAuMnB4O30uY2xzLTI0e3N0cm9rZS13aWR0aDowLjE3cHg7fS5jbHMtMjV7ZmlsbDojMWQxZDFiO308L3N0eWxlPjwvZGVmcz48dGl0bGU+c2RfbG9nb19yZ2I8L3RpdGxlPjxnIGlkPSJMYWdlcl8yIiBkYXRhLW5hbWU9IkxhZ2VyIDIiPjxnIGlkPSJMYWdlcl8xLTIiIGRhdGEtbmFtZT0iTGFnZXIgMSI+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMi4zNCw0OC4zVjI5LjkySDM1LjY5VjU5LjUxYzAsNS4xNS0zLjY4LDYuMS05LjEzLDcuMDYtNC4wNi43MS03LjE5LDEtNy42LDEuOTQtLjQtMS0zLjMtMS4xMy03LjQ5LTEuODYtNS40NS0xLTkuMTMtMi05LjEzLTcuMTZWNDguMyIvPjxwYXRoIGNsYXNzPSJjbHMtMiIgZD0iTTE5LjA3LDEyaDBDMjcuMjIsMTIsMzUsMTUuNTgsMzUuNywxOS42M0wzNiwyMi4zbC0xLjE2LDEuODRIMy4yN2wtMS0yLC4yLTIuNTNDMy4xNiwxNS41OCwxMC45MSwxMiwxOSwxMmgwIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTkuMDcsMTJoMEMyNy4yMiwxMiwzNSwxNS41OCwzNS43LDE5LjYzTDM2LDIyLjNsLTEuMTYsMS44NEgzLjI3bC0xLTIsLjItMi41M0MzLjE2LDE1LjU4LDEwLjkxLDEyLDE5LDEyWiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTE4LjYxLDMuMTNWMS45NGgtLjY3YS41Ny41NywwLDAsMC0uMzEuMTVWLjkzYS41Ny41NywwLDAsMCwuMzEuMTVoLjY1Vi4zNGEuNTIuNTIsMCwwLDAtLjE1LS4yOWgxLjI0YS42My42MywwLDAsMC0uMTQuMzJ2LjcxaC42NUEuNTcuNTcsMCwwLDAsMjAuNS45M1YyLjA5YS41Ny41NywwLDAsMC0uMzEtLjE1aC0uNjVWMy4xM3MtLjMsMC0uNDYsMGwtLjQ3LDAiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0xOC42MSwzLjEzVjEuOTRoLS42N2EuNTcuNTcsMCwwLDAtLjMxLjE1Vi45M2EuNTcuNTcsMCwwLDAsLjMxLjE1aC42NVYuMzRhLjUyLjUyLDAsMCwwLS4xNS0uMjloMS4yNGEuNjMuNjMsMCwwLDAtLjE0LjMydi43MWguNjVBLjU3LjU3LDAsMCwwLDIwLjUuOTNWMi4wOWEuNTcuNTcsMCwwLDAtLjMxLS4xNWgtLjY1VjMuMTNzLS4zLDAtLjQ2LDBaIi8+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMTYuNzcsNS4zMWEyLjMxLDIuMzEsMCwxLDEsMi4zMSwyLjMxLDIuMywyLjMsMCwwLDEtMi4zMS0yLjMxIi8+PGNpcmNsZSBjbGFzcz0iY2xzLTMiIGN4PSIxOS4wOCIgY3k9IjUuMzEiIHI9IjIuMzEiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0zNS44NCwxOS4xM2ExNi44OCwxNi44OCwwLDAsMC05Ljc3LTkuMTlsLS41MS4yNWExNi45MSwxNi45MSwwLDAsMSw5Ljg2LDkuMTFsLjQyLS4xNyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTM1Ljg0LDE5LjEzYTE2Ljg4LDE2Ljg4LDAsMCwwLTkuNzctOS4xOWwtLjUxLjI1YTE2LjkxLDE2LjkxLDAsMCwxLDkuODYsOS4xMVoiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0yLjI5LDE5LjEzYTE2LjksMTYuOSwwLDAsMSw5Ljc4LTkuMTlsLjUxLjI1QTE2LjkxLDE2LjkxLDAsMCwwLDIuNzIsMTkuM2wtLjQzLS4xNyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTIuMjksMTkuMTNhMTYuOSwxNi45LDAsMCwxLDkuNzgtOS4xOWwuNTEuMjVBMTYuOTEsMTYuOTEsMCwwLDAsMi43MiwxOS4zWiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTE5LjA4LDguMTZjLTMuNjcsMC02LjYzLDMuMjctNi42Myw3LjMxLDAsLjUxLS4wNiwxLS4wOSwxLjQ2bC0uODcuNjkuMjEuNDIsMS4xNy0xYzAtLjQ1LjA1LTEsLjA1LTEuNTgsMC0zLjc4LDIuNzctNi45LDYuMTQtNi45bDAtLjQ0Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTkuMDgsOC4xNmMtMy42NywwLTYuNjMsMy4yNy02LjYzLDcuMzEsMCwuNTEtLjA2LDEtLjA5LDEuNDZsLS44Ny42OS4yMS40MiwxLjE3LTFjMC0uNDUuMDUtMSwuMDUtMS41OCwwLTMuNzgsMi43Ny02LjksNi4xNC02LjlaIi8+PHBhdGggY2xhc3M9ImNscy00IiBkPSJNMTkuMDgsOC4xNmMtMy42NywwLTYuNjIsMy4yOC02LjYyLDcuMzEsMCwuNTEtLjA2LDEtLjA5LDEuNDZMMTAsMTguODIsOC4zNiwxNy4xNGMuMTMtNSw0Ljg4LTksMTAuNzItOSIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTE5LjA4LDguMTZjLTMuNjcsMC02LjYyLDMuMjgtNi42Miw3LjMxLDAsLjUxLS4wNiwxLS4wOSwxLjQ2TDEwLDE4LjgyLDguMzYsMTcuMTRDOC40OSwxMi4xMSwxMy4yNCw4LjE2LDE5LjA4LDguMTZaIi8+PHBhdGggY2xhc3M9ImNscy00IiBkPSJNMTkuMDgsOC4xNmMzLjY3LDAsNi42MywzLjI3LDYuNjMsNy4zMSwwLC41MS4wNiwxLC4wOSwxLjQ2bC44Ny42OS0uMjEuNDItMS4xNy0xYzAtLjQ1LS4wNi0xLS4wNi0xLjU4LDAtMy43OC0yLjc2LTYuOS02LjE0LTYuOVY4LjE2Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTkuMDgsOC4xNmMzLjY3LDAsNi42MywzLjI3LDYuNjMsNy4zMSwwLC41MS4wNiwxLC4wOSwxLjQ2bC44Ny42OS0uMjEuNDItMS4xNy0xYzAtLjQ1LS4wNi0xLS4wNi0xLjU4LDAtMy43OC0yLjc2LTYuOS02LjE0LTYuOVoiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0xOS4wOCw4LjE2YzMuNjYsMCw2LjYxLDMuMjgsNi42MSw3LjMxLDAsLjUxLjA2LDEsLjA5LDEuNDZsMi40MywxLjg5LDEuNTgtMS42OGMtLjEyLTUtNC44Ny05LTEwLjcxLTkiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0xOS4wOCw4LjE2YzMuNjYsMCw2LjYxLDMuMjgsNi42MSw3LjMxLDAsLjUxLjA2LDEsLjA5LDEuNDZsMi40MywxLjg5LDEuNTgtMS42OEMyOS42NywxMi4xMSwyNC45Miw4LjE2LDE5LjA4LDguMTZaIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNCIgcG9pbnRzPSIxOS4wOCA3LjMyIDE3Ljg4IDcuMzIgMTYuODMgMTcuMDggMTkuMDggMTguODUgMjEuMzIgMTcuMDggMjAuMjcgNy4zMiAxOS4wOCA3LjMyIi8+PHBvbHlnb24gY2xhc3M9ImNscy0zIiBwb2ludHM9IjE5LjA4IDcuMzIgMTcuODggNy4zMiAxNi44MyAxNy4wOCAxOS4wOCAxOC44NSAyMS4zMiAxNy4wOCAyMC4yNyA3LjMyIDE5LjA4IDcuMzIiLz48cG9seWxpbmUgY2xhc3M9ImNscy00IiBwb2ludHM9IjE5LjA4IDE5LjQ4IDE2LjggMTcuNjggMTYuODMgMTcuMDggMTkuMDggMTguODUgMTkuMDggMTkuNDgiLz48cG9seWdvbiBjbGFzcz0iY2xzLTMiIHBvaW50cz0iMTkuMDggMTkuNDggMTYuOCAxNy42OCAxNi44MyAxNy4wOCAxOS4wOCAxOC44NSAxOS4wOCAxOS40OCIvPjxwb2x5bGluZSBjbGFzcz0iY2xzLTQiIHBvaW50cz0iMTkuMDggMTkuNDggMjEuMzUgMTcuNjggMjEuMzIgMTcuMDggMTkuMDggMTguODUgMTkuMDggMTkuNDgiLz48cG9seWdvbiBjbGFzcz0iY2xzLTMiIHBvaW50cz0iMTkuMDggMTkuNDggMjEuMzUgMTcuNjggMjEuMzIgMTcuMDggMTkuMDggMTguODUgMTkuMDggMTkuNDgiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0zNC43MywyNC44OWEuNDguNDgsMCwwLDEsLjUyLjQ4LjUuNSwwLDAsMS0uNTIuNDlIMy4zOGEuNS41LDAsMCwxLS41Mi0uNDkuNS41LDAsMCwxLC41Mi0uNDhIMzQuNzMiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0zNC43MywyNC44OWEuNDguNDgsMCwwLDEsLjUyLjQ4LjUuNSwwLDAsMS0uNTIuNDlIMy4zOGEuNS41LDAsMCwxLS41Mi0uNDkuNS41LDAsMCwxLC41Mi0uNDhaIi8+PHBhdGggY2xhc3M9ImNscy00IiBkPSJNMzQuNjgsMjguNzZhLjU1LjU1LDAsMCwxLC41Mi41Ni41Ni41NiwwLDAsMS0uNTIuNTVIMy40M2EuNTYuNTYsMCwwLDEtLjUyLS41NS41Ny41NywwLDAsMSwuNTItLjU2SDM0LjY4Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMzQuNjgsMjguNzZhLjU1LjU1LDAsMCwxLC41Mi41Ni41Ni41NiwwLDAsMS0uNTIuNTVIMy40M2EuNTYuNTYsMCwwLDEtLjUyLS41NS41Ny41NywwLDAsMSwuNTItLjU2WiIvPjxyZWN0IGNsYXNzPSJjbHMtNCIgeD0iMy40NiIgeT0iMjUuODYiIHdpZHRoPSIzMS4xNCIgaGVpZ2h0PSIyLjkiLz48cmVjdCBjbGFzcz0iY2xzLTMiIHg9IjMuNDYiIHk9IjI1Ljg2IiB3aWR0aD0iMzEuMTQiIGhlaWdodD0iMi45Ii8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNCIgcG9pbnRzPSIxOS4wOCAyNS45MiAyMS42NiAyNy4zMiAxOS4wOCAyOC42OCAxNi40OSAyNy4zMiAxOS4wOCAyNS45MiIvPjxwb2x5Z29uIGNsYXNzPSJjbHMtMyIgcG9pbnRzPSIxOS4wOCAyNS45MiAyMS42NiAyNy4zMiAxOS4wOCAyOC42OCAxNi40OSAyNy4zMiAxOS4wOCAyNS45MiIvPjxwb2x5bGluZSBjbGFzcz0iY2xzLTUiIHBvaW50cz0iMjAuNjkgMjcuMzIgMTkuMDUgMjYuNDIgMTcuNCAyNy4zMiAxOS4wNSAyOC4yMSAyMC42OSAyNy4zMiIvPjxwb2x5Z29uIGNsYXNzPSJjbHMtMyIgcG9pbnRzPSIyMC42OSAyNy4zMiAxOS4wNSAyNi40MiAxNy40IDI3LjMyIDE5LjA1IDI4LjIxIDIwLjY5IDI3LjMyIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNCIgcG9pbnRzPSIzLjQ4IDI1LjkyIDYuMDYgMjcuMzIgMy40OCAyOC42OCAyLjMzIDI3LjMyIDMuNDggMjUuOTIiLz48cG9seWdvbiBjbGFzcz0iY2xzLTMiIHBvaW50cz0iMy40OCAyNS45MiA2LjA2IDI3LjMyIDMuNDggMjguNjggMi4zMyAyNy4zMiAzLjQ4IDI1LjkyIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNSIgcG9pbnRzPSI1LjEgMjcuMzIgMy4xOCAyNi4yOCAyLjMxIDI3LjMyIDMuMTkgMjguMzcgNS4xIDI3LjMyIi8+PHBvbHlnb24gY2xhc3M9ImNscy0zIiBwb2ludHM9IjUuMSAyNy4zMiAzLjE4IDI2LjI4IDIuMzEgMjcuMzIgMy4xOSAyOC4zNyA1LjEgMjcuMzIiLz48cG9seWxpbmUgY2xhc3M9ImNscy00IiBwb2ludHM9IjM0LjYxIDI1LjkyIDMyLjAyIDI3LjMyIDM0LjYxIDI4LjY4IDM1Ljc2IDI3LjMyIDM0LjYxIDI1LjkyIi8+PHBvbHlnb24gY2xhc3M9ImNscy0zIiBwb2ludHM9IjM0LjYxIDI1LjkyIDMyLjAyIDI3LjMyIDM0LjYxIDI4LjY4IDM1Ljc2IDI3LjMyIDM0LjYxIDI1LjkyIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNSIgcG9pbnRzPSIzMi45NyAyNy4zMiAzNC45MSAyNi4yOSAzNS43NiAyNy4zMiAzNC45IDI4LjM1IDMyLjk3IDI3LjMyIi8+PHBvbHlnb24gY2xhc3M9ImNscy0zIiBwb2ludHM9IjMyLjk3IDI3LjMyIDM0LjkxIDI2LjI5IDM1Ljc2IDI3LjMyIDM0LjkgMjguMzUgMzIuOTcgMjcuMzIiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0yNS4xOSwyOC4zN2ExLjA2LDEuMDYsMCwxLDEsMC0yLjExaDMuMzJhMS4wNiwxLjA2LDAsMSwxLDAsMi4xMUgyNS4xOSIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTI1LjE5LDI4LjM3YTEuMDYsMS4wNiwwLDEsMSwwLTIuMTFoMy4zMmExLjA2LDEuMDYsMCwxLDEsMCwyLjExWiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTMwLjI4LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTMuNTUuNTUsMCwwLDEtLjU2LS41MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTMwLjI4LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDMwLjI4LDI2LjY3WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTMwLjI4LDI4YS41Ni41NiwwLDEsMSwuNTYuNTMuNTUuNTUsMCwwLDEtLjU2LS41MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTMwLjI4LDI4YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDMwLjI4LDI4WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTIyLjI3LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTMuNTUuNTUsMCwwLDEtLjU2LS41MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTIyLjI3LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDIyLjI3LDI2LjY3WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTIyLjMxLDI4YS41Ni41NiwwLDEsMSwuNTYuNTMuNTUuNTUsMCwwLDEtLjU2LS41MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTIyLjMxLDI4YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDIyLjMxLDI4WiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTEzLDI4LjM3YTEuMDYsMS4wNiwwLDEsMCwwLTIuMTFIOS42NGExLjA2LDEuMDYsMCwxLDAsMCwyLjExSDEzIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTMsMjguMzdhMS4wNiwxLjA2LDAsMSwwLDAtMi4xMUg5LjY0YTEuMDYsMS4wNiwwLDEsMCwwLDIuMTFaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNNi43NSwyNi42N2EuNTYuNTYsMCwxLDEsLjU2LjUzLjU1LjU1LDAsMCwxLS41Ni0uNTMiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik02Ljc1LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDYuNzUsMjYuNjdaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNNi43NiwyOGEuNTYuNTYsMCwxLDEsLjU1LjUzQS41NC41NCwwLDAsMSw2Ljc2LDI4Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNNi43NiwyOGEuNTYuNTYsMCwxLDEsLjU1LjUzQS41NC41NCwwLDAsMSw2Ljc2LDI4WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTE0Ljc2LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTMuNTUuNTUsMCwwLDEtLjU2LS41MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTE0Ljc2LDI2LjY3YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDE0Ljc2LDI2LjY3WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTE0Ljc1LDI4YS41Ni41NiwwLDEsMSwuNTYuNTMuNTUuNTUsMCwwLDEtLjU2LS41MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTE0Ljc1LDI4YS41Ni41NiwwLDEsMSwuNTYuNTNBLjU1LjU1LDAsMCwxLDE0Ljc1LDI4WiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTkuNzYsMjYuNjJoMy4xMWEuNjkuNjksMCwwLDEsLjcxLjY3di4wNWEuNjkuNjksMCwwLDEtLjcxLjY3SDkuNzZhLjY5LjY5LDAsMCwxLS43MS0uNjd2LS4wNWEuNjkuNjksMCwwLDEsLjcxLS42NyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTkuNzYsMjYuNjJoMy4xMWEuNjkuNjksMCwwLDEsLjcxLjY3di4wNWEuNjkuNjksMCwwLDEtLjcxLjY3SDkuNzZhLjY5LjY5LDAsMCwxLS43MS0uNjd2LS4wNUEuNjkuNjksMCwwLDEsOS43NiwyNi42MloiLz48cGF0aCBjbGFzcz0iY2xzLTEiIGQ9Ik0yNS4yOCwyNi42MmgzLjExYS42OS42OSwwLDAsMSwuNzEuNjd2LjA1YS42OS42OSwwLDAsMS0uNzEuNjdIMjUuMjhhLjY5LjY5LDAsMCwxLS43MS0uNjd2LS4wNWEuNjkuNjksMCwwLDEsLjcxLS42NyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTI1LjI4LDI2LjYyaDMuMTFhLjY5LjY5LDAsMCwxLC43MS42N3YuMDVhLjY5LjY5LDAsMCwxLS43MS42N0gyNS4yOGEuNjkuNjksMCwwLDEtLjcxLS42N3YtLjA1QS42OS42OSwwLDAsMSwyNS4yOCwyNi42MloiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0yNy4wNyw5LjEzYS44Mi44MiwwLDEsMC0xLjY0LDAsLjgyLjgyLDAsMSwwLDEuNjQsMCIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTI3LjA3LDkuMTNhLjgyLjgyLDAsMSwwLTEuNjQsMCwuODIuODIsMCwxLDAsMS42NCwwWiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTI4LDguNzRhLjk0Ljk0LDAsMSwwLC45My45NEEuOTQuOTQsMCwwLDAsMjgsOC43NCIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTI4LDguNzRhLjk0Ljk0LDAsMSwwLC45My45NEEuOTQuOTQsMCwwLDAsMjgsOC43NFoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0yOS44LDkuNDVhMS4wOCwxLjA4LDAsMCwwLTEuMDYsMS4wN0ExLjA2LDEuMDYsMCwxLDAsMjkuOCw5LjQ1Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjkuOCw5LjQ1YTEuMDgsMS4wOCwwLDAsMC0xLjA2LDEuMDdBMS4wNiwxLjA2LDAsMSwwLDI5LjgsOS40NVoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0zMS43NCwxMC41NGExLjE5LDEuMTksMCwxLDAsMS4xOSwxLjE5LDEuMTksMS4xOSwwLDAsMC0xLjE5LTEuMTkiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0zMS43NCwxMC41NGExLjE5LDEuMTksMCwxLDAsMS4xOSwxLjE5QTEuMTksMS4xOSwwLDAsMCwzMS43NCwxMC41NFoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0zMy42OSwxMi4wNmExLjMyLDEuMzIsMCwwLDAsMCwyLjY0LDEuMzIsMS4zMiwwLDAsMCwwLTIuNjQiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0zMy42OSwxMi4wNmExLjMyLDEuMzIsMCwwLDAsMCwyLjY0LDEuMzIsMS4zMiwwLDAsMCwwLTIuNjRaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMzcsMTUuNDlhMS40NCwxLjQ0LDAsMSwwLTIuODcsMCwxLjQ0LDEuNDQsMCwxLDAsMi44NywwIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMzcsMTUuNDlhMS40NCwxLjQ0LDAsMSwwLTIuODcsMCwxLjQ0LDEuNDQsMCwxLDAsMi44NywwWiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTE4LjM2LDcuMjNhLjcyLjcyLDAsMSwxLC43Mi43Mi43Mi43MiwwLDAsMS0uNzItLjcyIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTguMzYsNy4yM2EuNzIuNzIsMCwxLDEsLjcyLjcyQS43Mi43MiwwLDAsMSwxOC4zNiw3LjIzWiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTIwLDguNzVhLjkuOSwwLDEsMS0uOS0uODkuOS45LDAsMCwxLC45Ljg5Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjAsOC43NWEuOS45LDAsMSwxLS45LS44OUEuOS45LDAsMCwxLDIwLDguNzVaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMjAuMTcsMTAuNjhBMS4wOCwxLjA4LDAsMSwxLDE5LjEsOS42MWExLjA3LDEuMDcsMCwwLDEsMS4wNywxLjA3Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjAuMTcsMTAuNjhBMS4wOCwxLjA4LDAsMSwxLDE5LjEsOS42MSwxLjA3LDEuMDcsMCwwLDEsMjAuMTcsMTAuNjhaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMjAuMzMsMTIuOTFhMS4yNiwxLjI2LDAsMSwxLTEuMjYtMS4yNSwxLjI2LDEuMjYsMCwwLDEsMS4yNiwxLjI1Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjAuMzMsMTIuOTFhMS4yNiwxLjI2LDAsMSwxLTEuMjYtMS4yNUExLjI2LDEuMjYsMCwwLDEsMjAuMzMsMTIuOTFaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMjcuMTMsMTQuMDZhMS4yOSwxLjI5LDAsMSwwLTEuMjktMS4yOSwxLjI5LDEuMjksMCwwLDAsMS4yOSwxLjI5Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjcuMTMsMTQuMDZhMS4yOSwxLjI5LDAsMSwwLTEuMjktMS4yOUExLjI5LDEuMjksMCwwLDAsMjcuMTMsMTQuMDZaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMjUuOSwxMS43M2ExLjE1LDEuMTUsMCwxLDAsMC0yLjMsMS4xNSwxLjE1LDAsMSwwLDAsMi4zIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjUuOSwxMS43M2ExLjE1LDEuMTUsMCwxLDAsMC0yLjMsMS4xNSwxLjE1LDAsMSwwLDAsMi4zWiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTI0LjM5LDEwYTEsMSwwLDEsMC0xLTEsMSwxLDAsMCwwLDEsMSIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTI0LjM5LDEwYTEsMSwwLDEsMC0xLTFBMSwxLDAsMCwwLDI0LjM5LDEwWiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTIyLjcsOC45QS44Ny44NywwLDEsMCwyMS44NCw4YS44Ny44NywwLDAsMCwuODYuODciLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0yMi43LDguOUEuODcuODcsMCwxLDAsMjEuODQsOCwuODcuODcsMCwwLDAsMjIuNyw4LjlaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMjEuODYsNy42YS43Mi43MiwwLDEsMC0uNzIuNzIuNzIuNzIsMCwwLDAsLjcyLS43MiIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTIxLjg2LDcuNmEuNzIuNzIsMCwxLDAtLjcyLjcyQS43Mi43MiwwLDAsMCwyMS44Niw3LjZaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMTcuNjQsMTUuNTZBMS40NCwxLjQ0LDAsMSwxLDE5LjA4LDE3YTEuNDMsMS40MywwLDAsMS0xLjQ0LTEuNDMiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0xNy42NCwxNS41NkExLjQ0LDEuNDQsMCwxLDEsMTkuMDgsMTcsMS40MywxLjQzLDAsMCwxLDE3LjY0LDE1LjU2WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTI5LjEzLDE1LjQ3YTEuNDQsMS40NCwwLDEsMC0xLjQ0LDEuNDMsMS40MywxLjQzLDAsMCwwLDEuNDQtMS40MyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTI5LjEzLDE1LjQ3YTEuNDQsMS40NCwwLDEsMC0xLjQ0LDEuNDNBMS40MywxLjQzLDAsMCwwLDI5LjEzLDE1LjQ3WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTExLjA2LDkuMTNhLjgzLjgzLDAsMSwxLDEuNjUsMCwuODMuODMsMCwxLDEtMS42NSwwIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTEuMDYsOS4xM2EuODMuODMsMCwxLDEsMS42NSwwLC44My44MywwLDEsMS0xLjY1LDBaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMTEsMTQuMDZhMS4yOSwxLjI5LDAsMSwxLDEuMjktMS4yOUExLjI5LDEuMjksMCwwLDEsMTEsMTQuMDYiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0xMSwxNC4wNmExLjI5LDEuMjksMCwxLDEsMS4yOS0xLjI5QTEuMjksMS4yOSwwLDAsMSwxMSwxNC4wNloiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0xMi4yMywxMS43M2ExLjE1LDEuMTUsMCwwLDEsMC0yLjMsMS4xNSwxLjE1LDAsMCwxLDAsMi4zIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMTIuMjMsMTEuNzNhMS4xNSwxLjE1LDAsMCwxLDAtMi4zLDEuMTUsMS4xNSwwLDAsMSwwLDIuM1oiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0xMy43NCwxMGExLDEsMCwxLDEsMS0xLDEsMSwwLDAsMS0xLDEiLz48cGF0aCBjbGFzcz0iY2xzLTMiIGQ9Ik0xMy43NCwxMGExLDEsMCwxLDEsMS0xQTEsMSwwLDAsMSwxMy43NCwxMFoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0xNS40Myw4LjlBLjg3Ljg3LDAsMSwxLDE2LjI5LDhhLjg3Ljg3LDAsMCwxLS44Ni44NyIvPjxjaXJjbGUgY2xhc3M9ImNscy0zIiBjeD0iMTUuNDMiIGN5PSI4LjAzIiByPSIwLjg2Ii8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMTYuMjcsNy42YS43Mi43MiwwLDEsMSwuNzIuNzIuNzIuNzIsMCwwLDEtLjcyLS43MiIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTE2LjI3LDcuNmEuNzIuNzIsMCwxLDEsLjcyLjcyQS43Mi43MiwwLDAsMSwxNi4yNyw3LjZaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMTAuMTgsOC43NGEuOTQuOTQsMCwwLDEsMCwxLjg3Ljk0Ljk0LDAsMCwxLDAtMS44NyIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTEwLjE4LDguNzRhLjk0Ljk0LDAsMCwxLDAsMS44Ny45NC45NCwwLDAsMSwwLTEuODdaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNOC4zNCw5LjQ1YTEuMDcsMS4wNywwLDAsMSwxLjA1LDEuMDcsMS4wNiwxLjA2LDAsMSwxLTIuMTEsMEExLjA3LDEuMDcsMCwwLDEsOC4zNCw5LjQ1Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNOC4zNCw5LjQ1YTEuMDcsMS4wNywwLDAsMSwxLjA1LDEuMDcsMS4wNiwxLjA2LDAsMSwxLTIuMTEsMEExLjA3LDEuMDcsMCwwLDEsOC4zNCw5LjQ1WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTYuMzksMTAuNTRhMS4xOSwxLjE5LDAsMSwxLTEuMTgsMS4xOSwxLjE5LDEuMTksMCwwLDEsMS4xOC0xLjE5Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNNi4zOSwxMC41NGExLjE5LDEuMTksMCwxLDEtMS4xOCwxLjE5QTEuMTksMS4xOSwwLDAsMSw2LjM5LDEwLjU0WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTQuNDQsMTIuMDZhMS4zMiwxLjMyLDAsMSwxLTEuMzEsMS4zMywxLjMyLDEuMzIsMCwwLDEsMS4zMS0xLjMzIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNNC40NCwxMi4wNmExLjMyLDEuMzIsMCwxLDEtMS4zMSwxLjMzQTEuMzIsMS4zMiwwLDAsMSw0LjQ0LDEyLjA2WiIvPjxwYXRoIGNsYXNzPSJjbHMtNiIgZD0iTTEuMTgsMTUuNDlBMS40NiwxLjQ2LDAsMCwxLDIuNjEsMTRhMS40NiwxLjQ2LDAsMCwxLDEuNDQsMS40NiwxLjQ0LDEuNDQsMCwxLDEtMi44NywwIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMS4xOCwxNS40OUExLjQ2LDEuNDYsMCwwLDEsMi42MSwxNGExLjQ2LDEuNDYsMCwwLDEsMS40NCwxLjQ2LDEuNDQsMS40NCwwLDEsMS0yLjg3LDBaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNOSwxNS40N2ExLjQ0LDEuNDQsMCwxLDEsMS40NCwxLjQzQTEuNDMsMS40MywwLDAsMSw5LDE1LjQ3Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNOSwxNS40N2ExLjQ0LDEuNDQsMCwxLDEsMS40NCwxLjQzQTEuNDMsMS40MywwLDAsMSw5LDE1LjQ3WiIvPjxwYXRoIGNsYXNzPSJjbHMtNyIgZD0iTTM1LjEzLDE5YTIuNSwyLjUsMCwwLDAtMS42MywwLDEuNjMsMS42MywwLDAsMC0uNTkuNDNjLS4wOCwwLC4zNS40NS4zNS40NWEuNjEuNjEsMCwwLDAtLjY1LjY0YzAsLjY2LjY1LjYyLjY1LjYycy0uNDMuNC0uMzUuNDZhMS4wNywxLjA3LDAsMCwwLC41OS40MiwxLjkyLDEuOTIsMCwwLDAsMi4wNi0uNjIsMi44LDIuOCwwLDAsMS0uMiwxLjEyLDEuNjIsMS42MiwwLDAsMS0xLjQzLDFBMi4yLDIuMiwwLDAsMSwzMiwyMi4yNGEyLjExLDIuMTEsMCwwLDEtMS44OCwxLjI1LDEuNiwxLjYsMCwwLDEtMS42Ny0xLjE2LDIuMzMsMi4zMywwLDAsMSwuMDktLjkxLDEuOTIsMS45MiwwLDAsMCwyLjA2LjYyLDEuMDYsMS4wNiwwLDAsMCwuNi0uNDNjLjA4LS4wNS0uMzYtLjQ1LS4zNi0uNDVzLjY5LDAsLjY2LS42Mi0uNjYtLjY0LS42Ni0uNjQuNDQtLjQuMzYtLjQ2YTEuMTksMS4xOSwwLDAsMC0uNi0uNDIsMS42NywxLjY3LDAsMCwwLTEuMzEsMCwxLjE1LDEuMTUsMCwwLDAsMC0xLjE0LDIuMzUsMi4zNSwwLDAsMC0uNDktLjcxYy0uMDYtLjA4LS40Ni4zNS0uNDYuMzVzMC0uNjgtLjYyLS42NWEuNi42LDAsMCwwLS42My42NXMtLjQxLS40My0uNDYtLjM1YTMsMywwLDAsMC0uNDguNywxLjA3LDEuMDcsMCwwLDAsMCwxLjEzLDEuNjIsMS42MiwwLDAsMC0xLjMzLDAsMS4xOSwxLjE5LDAsMCwwLS42LjQyYy0uMDcuMDYuMzYuNDYuMzYuNDZzLS42OSwwLS42Ni42NC42Ni42Mi42Ni42Mi0uNDMuNC0uMzYuNDVhMS4xMSwxLjExLDAsMCwwLC42LjQzLDEuOTIsMS45MiwwLDAsMCwyLjA2LS42MiwyLjM2LDIuMzYsMCwwLDEsLjEuOTEsMS42MSwxLjYxLDAsMCwxLTEuNjgsMS4xNiwyLjE0LDIuMTQsMCwwLDEtMS45Mi0xLjIyLDIuMDgsMi4wOCwwLDAsMS0xLjg4LDEuMjIsMS42MSwxLjYxLDAsMCwxLTEuNjgtMS4xNiwyLjM2LDIuMzYsMCwwLDEsLjEtLjkxQTEuOTIsMS45MiwwLDAsMCwyMiwyMmExLjExLDEuMTEsMCwwLDAsLjYtLjQzYy4wNywwLS4zNi0uNDUtLjM2LS40NXMuNjksMCwuNjYtLjYyLS42Ni0uNjQtLjY2LS42NC40My0uNC4zNi0uNDZBMS4zMywxLjMzLDAsMCwwLDIyLDE5YTEuNTUsMS41NSwwLDAsMC0xLjMzLDAsMS4xNCwxLjE0LDAsMCwwLDAtMS4xMywxLjg2LDEuODYsMCwwLDAtLjUxLS43Yy0uMDUtLjA4LS40Ni4zNS0uNDYuMzVhLjYuNiwwLDAsMC0uNjMtLjY1Yy0uNjYsMC0uNjIuNjUtLjYyLjY1cy0uNC0uNDMtLjQ1LS4zNWExLjg2LDEuODYsMCwwLDAtLjUxLjcsMS4xNCwxLjE0LDAsMCwwLDAsMS4xMywxLjUzLDEuNTMsMCwwLDAtMS4zMiwwLDEuMjYsMS4yNiwwLDAsMC0uNi40MmMtLjA4LjA2LjM2LjQ2LjM2LjQ2cy0uNjksMC0uNjYuNjQuNjYuNjIuNjYuNjItLjQ0LjQtLjM2LjQ1YTEuMDYsMS4wNiwwLDAsMCwuNi40MywxLjkyLDEuOTIsMCwwLDAsMi4wNi0uNjIsMi4zMywyLjMzLDAsMCwxLC4wOS45MSwxLjYsMS42LDAsMCwxLTEuNjcsMS4xNiwyLjEsMi4xLDAsMCwxLTEuODktMS4yMiwyLjE0LDIuMTQsMCwwLDEtMS45MiwxLjIyLDEuNjEsMS42MSwwLDAsMS0xLjY3LTEuMTYsMi4zMywyLjMzLDAsMCwxLC4wOS0uOTEsMS45MywxLjkzLDAsMCwwLDIuMDYuNjIsMS4wNiwxLjA2LDAsMCwwLC42LS40M2MuMDgsMC0uMzYtLjQ1LS4zNi0uNDVzLjY5LDAsLjY2LS42Mi0uNjYtLjY0LS42Ni0uNjQuNDQtLjQuMzYtLjQ2YTEuMTMsMS4xMywwLDAsMC0uNi0uNDJBMS42LDEuNiwwLDAsMCwxMiwxOWExLjA3LDEuMDcsMCwwLDAsMC0xLjEzLDMuNDQsMy40NCwwLDAsMC0uNDgtLjdjLS4wNi0uMDgtLjQ2LjM1LS40Ni4zNWEuNjEuNjEsMCwwLDAtLjY0LS42NWMtLjY1LDAtLjYyLjY1LS42Mi42NXMtLjQtLjQzLS40NS0uMzVhMi4xNywyLjE3LDAsMCwwLS40OS43MSwxLjE1LDEuMTUsMCwwLDAsMCwxLjE0LDEuNjcsMS42NywwLDAsMC0xLjMxLDAsMS4xMywxLjEzLDAsMCwwLS42LjQyYy0uMDguMDYuMzYuNDYuMzYuNDZzLS42OSwwLS42Ni42NC42Ni42Mi42Ni42Mi0uNDQuNC0uMzYuNDVhMS4wNiwxLjA2LDAsMCwwLC42LjQzLDEuOTMsMS45MywwLDAsMCwyLjA2LS42MiwyLjMzLDIuMzMsMCwwLDEsLjA5LjkxQTEuNjEsMS42MSwwLDAsMSw4LDIzLjQ5YTIuMTIsMi4xMiwwLDAsMS0xLjg5LTEuMjUsMi4yLDIuMiwwLDAsMS0xLjkyLDEuMjMsMS42MywxLjYzLDAsMCwxLTEuNDMtMSwzLDMsMCwwLDEtLjItMS4xMkExLjkzLDEuOTMsMCwwLDAsNC42NCwyMmExLjA3LDEuMDcsMCwwLDAsLjYtLjQyYy4wOC0uMDYtLjM2LS40Ni0uMzYtLjQ2cy42OSwwLC42Ni0uNjItLjY2LS42NC0uNjYtLjY0LjQ0LS40LjM2LS40NWExLjYxLDEuNjEsMCwwLDAtLjYtLjQzQTIuNDcsMi40NywwLDAsMCwzLDE5SDNhMi4zNywyLjM3LDAsMCwwLS4xMS0xLjEzLDIuODQsMi44NCwwLDAsMC0uOTEtMSwyLjM4LDIuMzgsMCwwLDAtLjQ0LjY2QTEuNDgsMS40OCwwLDAsMCwuMSwxNi44NWMuNjkuNzQsMSwyLjgyLDEuMzQsMy45YTE1LDE1LDAsMCwwLDEuMDgsMi43Nyw2LjA4LDYuMDgsMCwwLDAsLjkxLDEuMzZIMzQuNzJhNi4wOCw2LjA4LDAsMCwwLC45MS0xLjM2LDE1LDE1LDAsMCwwLDEuMDgtMi43N2MuMzQtMS4wOC42NS0zLjE2LDEuMzMtMy45YTEuNDcsMS40NywwLDAsMC0xLjQ2LjY2LDIuNTcsMi41NywwLDAsMC0uNDMtLjY2LDIuODQsMi44NCwwLDAsMC0uOTEsMUEyLjE1LDIuMTUsMCwwLDAsMzUuMTMsMTloMCIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTTM1LjEzLDE5YTIuNSwyLjUsMCwwLDAtMS42MywwLDEuNjMsMS42MywwLDAsMC0uNTkuNDNjLS4wOCwwLC4zNS40NS4zNS40NWEuNjEuNjEsMCwwLDAtLjY1LjY0YzAsLjY2LjY1LjYyLjY1LjYycy0uNDMuNC0uMzUuNDZhMS4wNywxLjA3LDAsMCwwLC41OS40MiwxLjkyLDEuOTIsMCwwLDAsMi4wNi0uNjIsMi44LDIuOCwwLDAsMS0uMiwxLjEyLDEuNjIsMS42MiwwLDAsMS0xLjQzLDFBMi4yLDIuMiwwLDAsMSwzMiwyMi4yNGEyLjExLDIuMTEsMCwwLDEtMS44OCwxLjI1LDEuNiwxLjYsMCwwLDEtMS42Ny0xLjE2LDIuMzMsMi4zMywwLDAsMSwuMDktLjkxLDEuOTIsMS45MiwwLDAsMCwyLjA2LjYyLDEuMDYsMS4wNiwwLDAsMCwuNi0uNDNjLjA4LS4wNS0uMzYtLjQ1LS4zNi0uNDVzLjY5LDAsLjY2LS42Mi0uNjYtLjY0LS42Ni0uNjQuNDQtLjQuMzYtLjQ2YTEuMTksMS4xOSwwLDAsMC0uNi0uNDIsMS42NywxLjY3LDAsMCwwLTEuMzEsMCwxLjE1LDEuMTUsMCwwLDAsMC0xLjE0LDIuMzUsMi4zNSwwLDAsMC0uNDktLjcxYy0uMDYtLjA4LS40Ni4zNS0uNDYuMzVzMC0uNjgtLjYyLS42NWEuNi42LDAsMCwwLS42My42NXMtLjQxLS40My0uNDYtLjM1YTMsMywwLDAsMC0uNDguNywxLjA3LDEuMDcsMCwwLDAsMCwxLjEzLDEuNjIsMS42MiwwLDAsMC0xLjMzLDAsMS4xOSwxLjE5LDAsMCwwLS42LjQyYy0uMDcuMDYuMzYuNDYuMzYuNDZzLS42OSwwLS42Ni42NC42Ni42Mi42Ni42Mi0uNDMuNC0uMzYuNDVhMS4xMSwxLjExLDAsMCwwLC42LjQzLDEuOTIsMS45MiwwLDAsMCwyLjA2LS42MiwyLjM2LDIuMzYsMCwwLDEsLjEuOTEsMS42MSwxLjYxLDAsMCwxLTEuNjgsMS4xNiwyLjE0LDIuMTQsMCwwLDEtMS45Mi0xLjIyLDIuMDgsMi4wOCwwLDAsMS0xLjg4LDEuMjIsMS42MSwxLjYxLDAsMCwxLTEuNjgtMS4xNiwyLjM2LDIuMzYsMCwwLDEsLjEtLjkxQTEuOTIsMS45MiwwLDAsMCwyMiwyMmExLjExLDEuMTEsMCwwLDAsLjYtLjQzYy4wNywwLS4zNi0uNDUtLjM2LS40NXMuNjksMCwuNjYtLjYyLS42Ni0uNjQtLjY2LS42NC40My0uNC4zNi0uNDZBMS4zMywxLjMzLDAsMCwwLDIyLDE5YTEuNTUsMS41NSwwLDAsMC0xLjMzLDAsMS4xNCwxLjE0LDAsMCwwLDAtMS4xMywxLjg2LDEuODYsMCwwLDAtLjUxLS43Yy0uMDUtLjA4LS40Ni4zNS0uNDYuMzVhLjYuNiwwLDAsMC0uNjMtLjY1Yy0uNjYsMC0uNjIuNjUtLjYyLjY1cy0uNC0uNDMtLjQ1LS4zNWExLjg2LDEuODYsMCwwLDAtLjUxLjcsMS4xNCwxLjE0LDAsMCwwLDAsMS4xMywxLjUzLDEuNTMsMCwwLDAtMS4zMiwwLDEuMjYsMS4yNiwwLDAsMC0uNi40MmMtLjA4LjA2LjM2LjQ2LjM2LjQ2cy0uNjksMC0uNjYuNjQuNjYuNjIuNjYuNjItLjQ0LjQtLjM2LjQ1YTEuMDYsMS4wNiwwLDAsMCwuNi40MywxLjkyLDEuOTIsMCwwLDAsMi4wNi0uNjIsMi4zMywyLjMzLDAsMCwxLC4wOS45MSwxLjYsMS42LDAsMCwxLTEuNjcsMS4xNiwyLjEsMi4xLDAsMCwxLTEuODktMS4yMiwyLjE0LDIuMTQsMCwwLDEtMS45MiwxLjIyLDEuNjEsMS42MSwwLDAsMS0xLjY3LTEuMTYsMi4zMywyLjMzLDAsMCwxLC4wOS0uOTEsMS45MywxLjkzLDAsMCwwLDIuMDYuNjIsMS4wNiwxLjA2LDAsMCwwLC42LS40M2MuMDgsMC0uMzYtLjQ1LS4zNi0uNDVzLjY5LDAsLjY2LS42Mi0uNjYtLjY0LS42Ni0uNjQuNDQtLjQuMzYtLjQ2YTEuMTMsMS4xMywwLDAsMC0uNi0uNDJBMS42LDEuNiwwLDAsMCwxMiwxOWExLjA3LDEuMDcsMCwwLDAsMC0xLjEzLDMuNDQsMy40NCwwLDAsMC0uNDgtLjdjLS4wNi0uMDgtLjQ2LjM1LS40Ni4zNWEuNjEuNjEsMCwwLDAtLjY0LS42NWMtLjY1LDAtLjYyLjY1LS42Mi42NXMtLjQtLjQzLS40NS0uMzVhMi4xNywyLjE3LDAsMCwwLS40OS43MSwxLjE1LDEuMTUsMCwwLDAsMCwxLjE0LDEuNjcsMS42NywwLDAsMC0xLjMxLDAsMS4xMywxLjEzLDAsMCwwLS42LjQyYy0uMDguMDYuMzYuNDYuMzYuNDZzLS42OSwwLS42Ni42NC42Ni42Mi42Ni42Mi0uNDQuNC0uMzYuNDVhMS4wNiwxLjA2LDAsMCwwLC42LjQzLDEuOTMsMS45MywwLDAsMCwyLjA2LS42MiwyLjMzLDIuMzMsMCwwLDEsLjA5LjkxQTEuNjEsMS42MSwwLDAsMSw4LDIzLjQ5YTIuMTIsMi4xMiwwLDAsMS0xLjg5LTEuMjUsMi4yLDIuMiwwLDAsMS0xLjkyLDEuMjMsMS42MywxLjYzLDAsMCwxLTEuNDMtMSwzLDMsMCwwLDEtLjItMS4xMkExLjkzLDEuOTMsMCwwLDAsNC42NCwyMmExLjA3LDEuMDcsMCwwLDAsLjYtLjQyYy4wOC0uMDYtLjM2LS40Ni0uMzYtLjQ2cy42OSwwLC42Ni0uNjItLjY2LS42NC0uNjYtLjY0LjQ0LS40LjM2LS40NWExLjYxLDEuNjEsMCwwLDAtLjYtLjQzQTIuNDcsMi40NywwLDAsMCwzLDE5SDNhMi4zNywyLjM3LDAsMCwwLS4xMS0xLjEzLDIuODQsMi44NCwwLDAsMC0uOTEtMSwyLjM4LDIuMzgsMCwwLDAtLjQ0LjY2QTEuNDgsMS40OCwwLDAsMCwuMSwxNi44NWMuNjkuNzQsMSwyLjgyLDEuMzQsMy45YTE1LDE1LDAsMCwwLDEuMDgsMi43Nyw2LjA4LDYuMDgsMCwwLDAsLjkxLDEuMzZIMzQuNzJhNi4wOCw2LjA4LDAsMCwwLC45MS0xLjM2LDE1LDE1LDAsMCwwLDEuMDgtMi43N2MuMzQtMS4wOC42NS0zLjE2LDEuMzMtMy45YTEuNDcsMS40NywwLDAsMC0xLjQ2LjY2LDIuNTcsMi41NywwLDAsMC0uNDMtLjY2LDIuODQsMi44NCwwLDAsMC0uOTEsMUEyLjE1LDIuMTUsMCwwLDAsMzUuMTMsMTlaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNMTguMjcsMjAuNDlhLjgxLjgxLDAsMCwxLDEuNjIsMCwuODEuODEsMCwxLDEtMS42MiwwIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMzAuMzEsMjAuNDlhNi4yMiw2LjIyLDAsMCwxLTEuNDktLjJtMS40OS4yYTUuOTMsNS45MywwLDAsMC0xLjQ5LjIxbS0xLjA4LTIuNzhhNiw2LDAsMCwxLS4yMSwxLjVtLjIxLTEuNWE2LDYsMCwwLDAsLjIxLDEuNW0tOS42OCwxLjA3YS44MS44MSwwLDAsMSwxLjYyLDAsLjgxLjgxLDAsMSwxLTEuNjIsMFoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0yNi45MywyMC40MWEuODEuODEsMCwxLDEsLjgxLjguODEuODEsMCwwLDEtLjgxLS44Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMjUuMTcsMjAuNDlhNS45Myw1LjkzLDAsMCwxLDEuNDkuMjFtLTEuNDktLjIxYTYuMjIsNi4yMiwwLDAsMCwxLjQ5LS4yTTEzLDIwLjQ5YTYuMjcsNi4yNywwLDAsMS0xLjUtLjJtMS41LjJhNiw2LDAsMCwwLTEuNS4yMW0tMS4wOC0yLjc4YTYuMjcsNi4yNywwLDAsMS0uMiwxLjVtLjItMS41YTYsNiwwLDAsMCwuMjEsMS41bTE2LjMzLDFhLjgxLjgxLDAsMSwxLC44MS44QS44MS44MSwwLDAsMSwyNi45MywyMC40MVoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik05LjU5LDIwLjQ5YS44MS44MSwwLDEsMSwuOC44MS44LjgsMCwwLDEtLjgtLjgxIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNNy44MiwyMC40OWE2LDYsMCwwLDEsMS41LjIxbS0xLjUtLjIxYTYuMjcsNi4yNywwLDAsMCwxLjUtLjJtMy42NS4yYTYuMjcsNi4yNywwLDAsMS0xLjUtLjJtMS41LjJhNiw2LDAsMCwwLTEuNS4yMW0tMS4wOC0yLjc4YTYuMjcsNi4yNywwLDAsMS0uMiwxLjVtLjItMS41YTYsNiwwLDAsMCwuMjEsMS41bS0xLDEuMDdhLjgxLjgxLDAsMSwxLC44LjgxQS44LjgsMCwwLDEsOS41OSwyMC40OVoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik05LjU5LDIwLjQ5YS44MS44MSwwLDEsMSwuOC44MS44LjgsMCwwLDEtLjgtLjgxIi8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNNy44MiwyMC40OWE2LDYsMCwwLDEsMS41LjIxbS0xLjUtLjIxYTYuMjcsNi4yNywwLDAsMCwxLjUtLjJtNy4xOC4yYTYuMjcsNi4yNywwLDAsMCwxLjUtLjJtLTEuNi4yYTYsNiwwLDAsMSwxLjUuMjFtMS4xOC0yLjc4YTYsNiwwLDAsMCwuMjEsMS41bS0uMjEtMS41YTYsNiwwLDAsMS0uMjEsMS41bTIuODgsMS4wN2E2LDYsMCwwLDAtMS41LjIxbTEuNS0uMjFhNi4yNyw2LjI3LDAsMCwxLTEuNS0uMm0tMTAuNjYuMmEuODEuODEsMCwxLDEsLjguODFBLjguOCwwLDAsMSw5LjU5LDIwLjQ5WiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTE2LjgyLDQuODZIMTguNlYzLjA1YTQuNSw0LjUsMCwwLDEsLjQ5LDAsMy4yNiwzLjI2LDAsMCwxLC40NiwwdjEuOGgxLjc5YTIuMzgsMi4zOCwwLDAsMSwwLC40NiwyLjM0LDIuMzQsMCwwLDEtLjA1LjQ3SDE2LjgyYTIuNDIsMi40MiwwLDAsMS0uMDUtLjQ3LDIuMTQsMi4xNCwwLDAsMSwuMDUtLjQ1Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMzQuMTIsMjAuNTFhOC40OCw4LjQ4LDAsMCwxLDEuOS4yMW0tMi4wOC0uMjNBMTAuMywxMC4zLDAsMCwwLDM2LDIwLjI2TTQsMjAuNTFhOC40OCw4LjQ4LDAsMCwwLTEuOS4yMW0yLjA4LS4yM2ExMC4zLDEwLjMsMCwwLDEtMi4wOC0uMjNNMTYuODIsNC44NkgxOC42VjMuMDVhNC41LDQuNSwwLDAsMSwuNDksMCwzLjI2LDMuMjYsMCwwLDEsLjQ2LDB2MS44aDEuNzlhMi4zOCwyLjM4LDAsMCwxLDAsLjQ2LDIuMzQsMi4zNCwwLDAsMS0uMDUuNDdIMTYuODJhMi40MiwyLjQyLDAsMCwxLS4wNS0uNDdBMi4xNCwyLjE0LDAsMCwxLDE2LjgyLDQuODZaIi8+PHBhdGggY2xhc3M9ImNscy02IiBkPSJNLjYyLDIwLjY5YS44MS44MSwwLDAsMSwuNTYtMSwxLjA5LDEuMDksMCwwLDEsLjUuNjYsMS4xOCwxLjE4LDAsMCwxLS4wNi44OS44MS44MSwwLDAsMS0xLS41NSIvPjxwYXRoIGNsYXNzPSJjbHMtMyIgZD0iTS42MiwyMC42OWEuODEuODEsMCwwLDEsLjU2LTEsMS4wOSwxLjA5LDAsMCwxLC41LjY2LDEuMTgsMS4xOCwwLDAsMS0uMDYuODlBLjgxLjgxLDAsMCwxLC42MiwyMC42OVoiLz48cGF0aCBjbGFzcz0iY2xzLTYiIGQ9Ik0zNy41MiwyMC42OWEuOC44LDAsMCwwLS41NS0xLDEuMDUsMS4wNSwwLDAsMC0uNS42NiwxLjIxLDEuMjEsMCwwLDAsLjA1Ljg5LjgxLjgxLDAsMCwwLDEtLjU1Ii8+PHBhdGggY2xhc3M9ImNscy0zIiBkPSJNMzcuNTIsMjAuNjlhLjguOCwwLDAsMC0uNTUtMSwxLjA1LDEuMDUsMCwwLDAtLjUuNjYsMS4yMSwxLjIxLDAsMCwwLC4wNS44OUEuODEuODEsMCwwLDAsMzcuNTIsMjAuNjlaIi8+PHBhdGggY2xhc3M9ImNscy00IiBkPSJNMjAuMzIsNTguMjZsMCwuMjZhMi4zOSwyLjM5LDAsMCwxLC4wOC41MywxLjk0LDEuOTQsMCwwLDEtLjEuNTIsMS41NSwxLjU1LDAsMCwxLC4xNC43MiwxLDEsMCwwLDEtLjIzLjQ1LDEsMSwwLDAsMSwuMjMuNjYsMS43NiwxLjc2LDAsMCwxLS4xOS40OSwzLjYsMy42LDAsMCwxLDAsLjY1LDEuNDMsMS40MywwLDAsMS0uMTYuNTIsMS40NSwxLjQ1LDAsMCwxLDAsLjgyLDEuNTcsMS41NywwLDAsMS0uMTcuNDlsLTEuODMsMGE4LjI3LDguMjcsMCwwLDEtLjE3LS44MiwxLjc0LDEuNzQsMCwwLDEsMC0uNDgsMS40MywxLjQzLDAsMCwxLS4xNy0uNjQsMS40NSwxLjQ1LDAsMCwxLC4wOC0uNDMsMi40NiwyLjQ2LDAsMCwxLS4xOS0uNzFjMC0uMi4wNS0uMzcuMDUtLjM3YTQuMDYsNC4wNiwwLDAsMS0uMTEtLjc1LDEuMzksMS4zOSwwLDAsMSwuMDYtLjMsNi40Niw2LjQ2LDAsMCwxLS4wOC0uODYuNjUuNjUsMCwwLDEsLjEtLjI5bC0uMTMtLjUzLDIuNzUsMCIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LDYwLjE0Yy0uNjguMzQtMS4yOS42Ny0xLjMxLDEuMWE0LjA1LDQuMDUsMCwwLDAsLjE0Ljg4LDYuMjcsNi4yNywwLDAsMSwwLS43OWMwLS40My42LS42NSwxLjIyLS45NC45MS0uNDMsMS4zNS0uNzUsMS4zNS0xLjIxYTMuMzUsMy4zNSwwLDAsMC0uMDgtLjgyLDMuMzcsMy4zNywwLDAsMS0uMDYuN2MwLC40My0uNTQuNzUtMS4yMSwxLjA4Ii8+PHBhdGggY2xhc3M9ImNscy04IiBkPSJNMTksNjAuMTRjLS42OC4zNC0xLjI5LjY3LTEuMzEsMS4xYTQuMDUsNC4wNSwwLDAsMCwuMTQuODgsNi4yNyw2LjI3LDAsMCwxLDAtLjc5YzAtLjQzLjYtLjY1LDEuMjItLjk0LjkxLS40MywxLjM1LS43NSwxLjM1LTEuMjFhMy4zNSwzLjM1LDAsMCwwLS4wOC0uODIsMy4zNywzLjM3LDAsMCwxLS4wNi43QzIwLjE5LDU5LjQ5LDE5LjY1LDU5LjgxLDE5LDYwLjE0WiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LDU5Yy0uNjguMzQtMS4zOS42OC0xLjM5LDEuMTJhMy4zMiwzLjMyLDAsMCwwLC4xNC45NCw2LDYsMCwwLDEsMC0uNzljMC0uNDQuNjctLjczLDEuMjktMSwuOTEtLjQzLDEuNDMtLjcyLDEuNDMtMS4xOWExLjMsMS4zLDAsMCwwLS4xLS41NSw0LjQ0LDQuNDQsMCwwLDEsMCwuNzJjMCwuNDQtLjY3LjQ0LTEuMzQuNzciLz48cGF0aCBjbGFzcz0iY2xzLTgiIGQ9Ik0xOSw1OWMtLjY4LjM0LTEuMzkuNjgtMS4zOSwxLjEyYTMuMzIsMy4zMiwwLDAsMCwuMTQuOTQsNiw2LDAsMCwxLDAtLjc5YzAtLjQ0LjY3LS43MywxLjI5LTEsLjkxLS40MywxLjQzLS43MiwxLjQzLTEuMTlhMS4zLDEuMywwLDAsMC0uMS0uNTUsNC40NCw0LjQ0LDAsMCwxLDAsLjcyQzIwLjMyLDU4LjcsMTkuNjUsNTguNywxOSw1OVoiLz48cGF0aCBjbGFzcz0iY2xzLTkiIGQ9Ik0xOSw1OC4xOWMtLjY4LjM0LTEuNDEuNC0xLjQxLjg0YTUsNSwwLDAsMCwuMDYuOTMsNC4zMyw0LjMzLDAsMCwxLDAtLjc2YzAtMSwuNzctLjc2LDEuMzgtMS4wNXYwIi8+PHBhdGggY2xhc3M9ImNscy04IiBkPSJNMTksNTguMTljLS42OC4zNC0xLjQxLjQtMS40MS44NGE1LDUsMCwwLDAsLjA2LjkzLDQuMzMsNC4zMywwLDAsMSwwLS43NmMwLTEsLjc3LS43NiwxLjM4LTEuMDVaIi8+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMTksNjEuMjNjLS42OC4zMy0xLjIuNjMtMS4yMSwxLjA2YTMuNiwzLjYsMCwwLDAsLjE0Ljg4LDYuNTYsNi41NiwwLDAsMS0uMDYtLjc5YzAtLjQ0LjUxLS42MiwxLjEzLS45MS45MS0uNDMsMS40MS0uNzEsMS40MS0xLjE3YTMuMjIsMy4yMiwwLDAsMC0uMTYtLjg2LDQuNzUsNC43NSwwLDAsMSwwLC43M2MwLC40NC0uNi43Mi0xLjI3LDEuMDYiLz48cGF0aCBjbGFzcz0iY2xzLTgiIGQ9Ik0xOSw2MS4yM2MtLjY4LjMzLTEuMi42My0xLjIxLDEuMDZhMy42LDMuNiwwLDAsMCwuMTQuODgsNi41Niw2LjU2LDAsMCwxLS4wNi0uNzljMC0uNDQuNTEtLjYyLDEuMTMtLjkxLjkxLS40MywxLjQxLS43MSwxLjQxLTEuMTdhMy4yMiwzLjIyLDAsMCwwLS4xNi0uODYsNC43NSw0Ljc1LDAsMCwxLDAsLjczQzIwLjI1LDYwLjYxLDE5LjY1LDYwLjg5LDE5LDYxLjIzWiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LDYyLjNjLS42OC4zNC0xLjA4LjU1LTEuMDksMWEzLjE4LDMuMTgsMCwwLDAsLjE0Ljg4LDUuNTgsNS41OCwwLDAsMS0uMDUtLjc0YzAtLjQ0LjM4LS41OCwxLS44Ny45MS0uNDMsMS4zNC0uNjYsMS4zNC0xLjEyYTQuMDksNC4wOSwwLDAsMC0uMDctLjg4LDMuMTMsMy4xMywwLDAsMS0uMDcuNzVjMCwuNDQtLjUzLjY3LTEuMiwxIi8+PHBhdGggY2xhc3M9ImNscy04IiBkPSJNMTksNjIuM2MtLjY4LjM0LTEuMDguNTUtMS4wOSwxYTMuMTgsMy4xOCwwLDAsMCwuMTQuODgsNS41OCw1LjU4LDAsMCwxLS4wNS0uNzRjMC0uNDQuMzgtLjU4LDEtLjg3LjkxLS40MywxLjM0LS42NiwxLjM0LTEuMTJhNC4wOSw0LjA5LDAsMCwwLS4wNy0uODgsMy4xMywzLjEzLDAsMCwxLS4wNy43NUMyMC4xOCw2MS43NCwxOS42NSw2MiwxOSw2Mi4zWiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LjM1LDY1YTEuNTQsMS41NCwwLDAsMCwuNzgtMS40MywzLjQsMy40LDAsMCwwLS4wNi0uNzQsMywzLDAsMCwxLS4wOS43NWMtLjA3LjY4LS40Ny44Ni0xLjkxLjY3bDAsLjI1LDEuMzEuNSIvPjxwYXRoIGNsYXNzPSJjbHMtOCIgZD0iTTE5LjM1LDY1YTEuNTQsMS41NCwwLDAsMCwuNzgtMS40MywzLjQsMy40LDAsMCwwLS4wNi0uNzQsMywzLDAsMCwxLS4wOS43NWMtLjA3LjY4LS40Ny44Ni0xLjkxLjY3bDAsLjI1WiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LDYzLjM5Yy0uNjguMzMtMSwuNTQtMSwxYTQsNCwwLDAsMCwuMTQuODgsNS4xOCw1LjE4LDAsMCwxLDAtLjc0YzAtLjQzLjI3LS41OC44OS0uODYuOTEtLjQzLDEuMjctLjYzLDEuMjctMS4wOWE0LjA5LDQuMDksMCwwLDAtLjA3LS44OCwzLjEzLDMuMTMsMCwwLDEtLjA3Ljc1YzAsLjQ0LS40Ni42My0xLjEzLDEiLz48cGF0aCBjbGFzcz0iY2xzLTgiIGQ9Ik0xOSw2My4zOWMtLjY4LjMzLTEsLjU0LTEsMWE0LDQsMCwwLDAsLjE0Ljg4LDUuMTgsNS4xOCwwLDAsMSwwLS43NGMwLS40My4yNy0uNTguODktLjg2LjkxLS40MywxLjI3LS42MywxLjI3LTEuMDlhNC4wOSw0LjA5LDAsMCwwLS4wNy0uODgsMy4xMywzLjEzLDAsMCwxLS4wNy43NUMyMC4xMSw2Mi44NiwxOS42NSw2My4wNSwxOSw2My4zOVoiLz48cGF0aCBjbGFzcz0iY2xzLTEwIiBkPSJNMjAuMzgsNTlsLS4wOC0uNDYuMTktLjI3LS4wNi4yNVY1OWEyLjEzLDIuMTMsMCwwLDEtLjA5LjUyLDEuNjcsMS42NywwLDAsMSwuMTMuNzMsMS4zMywxLjMzLDAsMCwxLS4xMy40NCwyLDIsMCwwLDEsLjA2LjcsMiwyLDAsMCwxLS4xMi40NiwyLjc3LDIuNzcsMCwwLDEsMCwuNjQsMS40NSwxLjQ1LDAsMCwxLS4xNS41MywxLjUxLDEuNTEsMCwwLDEsMCwuODEsMS43NSwxLjc1LDAsMCwxLS4xNy41Ii8+PHBhdGggY2xhc3M9ImNscy00IiBkPSJNMTksNjUuOGMuNTgsMCwxLjI1LS4wOSwxLjE3LS40OXMtLjE0LS41Ni0uMTgtLjcyLS41NS0uMTYtMS0uMTYtLjk0LDAtMSwuMTYtLjEzLjQxLS4xOS43Mi41OS40OSwxLjE4LjQ5Ii8+PHBhdGggY2xhc3M9ImNscy0xMSIgZD0iTTE5LDY1LjhjLjU4LDAsMS4yNS0uMDksMS4xNy0uNDlzLS4xNC0uNTYtLjE4LS43Mi0uNTUtLjE2LTEtLjE2LS45NCwwLTEsLjE2LS4xMy40MS0uMTkuNzJTMTguMzYsNjUuOCwxOSw2NS44WiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTE5LjQ0LDY1Ljk0YzAsLjExLS4yMS4yMS0uNDcuMjFzLS40Ny0uMS0uNDctLjIxYS4xNS4xNSwwLDAsMCwwLS4wOCwyLjcsMi43LDAsMCwwLDEsLjA4Ii8+PHBhdGggY2xhc3M9ImNscy0xMiIgZD0iTTE5LjQ0LDY1Ljk0YzAsLjExLS4yMS4yMS0uNDcuMjFzLS40Ny0uMS0uNDctLjIxYS4xNS4xNSwwLDAsMCwwLS4wOEEyLjcsMi43LDAsMCwwLDE5LjQ0LDY1Ljk0WiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LjA4LDU3LjYyaDEuMjhTMjAsMzMuODQsMjAsMzIuODVhNC4xMyw0LjEzLDAsMCwwLTEtMi4wN2wuMSwyNi44NCIvPjxwYXRoIGNsYXNzPSJjbHMtMTMiIGQ9Ik0xOS4wOCw1Ny42MmgxLjI4UzIwLDMzLjg0LDIwLDMyLjg1YTQuMTMsNC4xMywwLDAsMC0xLTIuMDdaIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNCIgcG9pbnRzPSIxOC45NSA1Ny42MiAxNy42IDU3LjYxIDE3Ljc3IDMyLjA0IDE4Ljk1IDMwLjc2IDE4Ljk1IDU3LjYyIi8+PHBvbHlnb24gY2xhc3M9ImNscy0xNCIgcG9pbnRzPSIxOC45NSA1Ny42MiAxNy42IDU3LjYxIDE3Ljc3IDMyLjA0IDE4Ljk1IDMwLjc2IDE4Ljk1IDU3LjYyIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNCIgcG9pbnRzPSIxOC45NSA1Ny42MiAyMC4yMiA1Ny42MiAyMC4xMyAzMi4wNCAxOC45NSAzMC43NiAxOC45NSA1Ny42MiIvPjxwb2x5Z29uIGNsYXNzPSJjbHMtMTQiIHBvaW50cz0iMTguOTUgNTcuNjIgMjAuMjIgNTcuNjIgMjAuMTMgMzIuMDQgMTguOTUgMzAuNzYgMTguOTUgNTcuNjIiLz48cGF0aCBjbGFzcz0iY2xzLTEiIGQ9Ik0xOC43Niw1Ny41NXMuMTYtOC43My4xNi05LjE1LjEyLS40My4xMiwwLDAsOS4xOSwwLDkuMTlsLS4zMSwwIi8+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMTcuNTcsNTdsMi44OS0uMXYxLjg5bC0uMjMuNzRjMC0uNTctMS4xMi0uNzEtMS4xMi0uNzEtMS40OSwwLTEtLjA5LTEtLjA5aC0uNDlWNTciLz48cGF0aCBjbGFzcz0iY2xzLTE1IiBkPSJNMTcuNTcsNTdsMi44OS0uMXYxLjg5bC0uMjMuNzRjMC0uNTctMS4xMi0uNzEtMS4xMi0uNzEtMS40OSwwLTEtLjA5LTEtLjA5aC0uNDlaIi8+PHBhdGggY2xhc3M9ImNscy0xIiBkPSJNMjAuMTEsNTcuNDhhMjEuNzQsMjEuNzQsMCwwLDAsNS4zMy0uOTFMMjYsNTcuOWwtLjQ4LDEuMTdhNDcuOSw0Ny45LDAsMCwwLTUuMzktLjQxSDE4YTQ5LjMxLDQ5LjMxLDAsMCwwLTUuNDMuNDFsLS4xNy0uMTUuMTctMi4zYTI0LjM2LDI0LjM2LDAsMCwwLDUuNDMuODZoMi4wOSIvPjxwYXRoIGNsYXNzPSJjbHMtMTYiIGQ9Ik0yMC4xMSw1Ny40OGEyMS43NCwyMS43NCwwLDAsMCw1LjMzLS45MUwyNiw1Ny45bC0uNDgsMS4xN2E0Ny45LDQ3LjksMCwwLDAtNS4zOS0uNDFIMThhNDkuMzEsNDkuMzEsMCwwLDAtNS40My40MWwtLjE3LS4xNS4xNy0yLjNhMjQuMzYsMjQuMzYsMCwwLDAsNS40My44NloiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0yMCw1N2EzOCwzOCwwLDAsMCw1LjM5LS41MmwuNDMsMS4yN0wyNS40LDU5QTM4LDM4LDAsMCwwLDIwLDU4LjQ0SDE3LjkyQTM4LjksMzguOSwwLDAsMCwxMi41LDU5bC0uNDQtMS4xOC40NC0xLjI3YTM4LjksMzguOSwwLDAsMCw1LjQyLjUySDIwIi8+PHBhdGggY2xhc3M9ImNscy0xMiIgZD0iTTIwLDU3YTM4LDM4LDAsMCwwLDUuMzktLjUybC40MywxLjI3TDI1LjQsNTlBMzgsMzgsMCwwLDAsMjAsNTguNDRIMTcuOTJBMzguOSwzOC45LDAsMCwwLDEyLjUsNTlsLS40NC0xLjE4LjQ0LTEuMjdhMzguOSwzOC45LDAsMCwwLDUuNDIuNTJaIi8+PHBvbHlsaW5lIGNsYXNzPSJjbHMtNCIgcG9pbnRzPSIxNy40NCA1Ni44MSAyMC40MyA1Ni44MSAyMC41MiA1Ny44IDIwLjQzIDU4LjczIDE3LjQ0IDU4LjczIDE3LjM0IDU3LjggMTcuNDQgNTYuODEiLz48cG9seWdvbiBjbGFzcz0iY2xzLTE3IiBwb2ludHM9IjE3LjQ0IDU2LjgxIDIwLjQzIDU2LjgxIDIwLjUyIDU3LjggMjAuNDMgNTguNzMgMTcuNDQgNTguNzMgMTcuMzQgNTcuOCAxNy40NCA1Ni44MSIvPjxsaW5lIGNsYXNzPSJjbHMtMTgiIHgxPSIxOC45NSIgeTE9IjM1Ljg0IiB4Mj0iMTguOTUiIHkyPSIzMS4xOCIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTkuNTUsNTMuMzFjMi4xOCwwLDUuMTgtMS4xMyw1LjUzLTIuNjRoLTExYy4yNiwxLjQ3LDMuMzIsMi42NCw1LjQ5LDIuNjQiLz48cGF0aCBjbGFzcz0iY2xzLTE5IiBkPSJNOS41NSw1My4zMWMyLjE4LDAsNS4xOC0xLjEzLDUuNTMtMi42NGgtMTFDNC4zMiw1Mi4xNCw3LjM4LDUzLjMxLDkuNTUsNTMuMzFaIi8+PHBhdGggY2xhc3M9ImNscy00IiBkPSJNMjguMzcsNTMuMzFjMi4xNywwLDUuMTgtMS4xMyw1LjUzLTIuNjRoLTExYy4yNiwxLjQ3LDMuMzEsMi42NCw1LjQ5LDIuNjQiLz48cGF0aCBjbGFzcz0iY2xzLTE5IiBkPSJNMjguMzcsNTMuMzFjMi4xNywwLDUuMTgtMS4xMyw1LjUzLTIuNjRoLTExQzIzLjE0LDUyLjE0LDI2LjE5LDUzLjMxLDI4LjM3LDUzLjMxWiIvPjxwYXRoIGNsYXNzPSJjbHMtMSIgZD0iTTE5LjMyLDM5bC0uNywwYy0yLTEuODUtNi44LS40OC05LS4xNGExLjI4LDEuMjgsMCwwLDEtMS40MS0xYy0uMDktLjY5LjEzLS43LjM0LS43cy4zMS4yMS4zMy4zM2MuMS42Ni40LjU2LjcyLjU3YS43My43MywwLDAsMCwuNjktLjc5YzEuOTQtLjA5LDQuMjktMS4zNiw2LjI0LTFhMy43MywzLjczLDAsMCwxLDIsLjgxaDFhMy43MywzLjczLDAsMCwxLDItLjgxYzEuOTUtLjMyLDQuMy45NSw2LjI0LDFhLjczLjczLDAsMCwwLC42OC43OWMuMzMsMCwuNjMuMDkuNzMtLjU3LDAtLjEyLjE2LS4zMy4zMy0uMzNzLjQzLDAsLjMzLjdhMS4yNywxLjI3LDAsMCwxLTEuNCwxYy0yLjIyLS4zNC03LjA2LTEuNzMtOS4wOS4xMiIvPjxwYXRoIGNsYXNzPSJjbHMtMjAiIGQ9Ik0xOS4zMiwzOWwtLjcsMGMtMi0xLjg1LTYuOC0uNDgtOS0uMTRhMS4yOCwxLjI4LDAsMCwxLTEuNDEtMWMtLjA5LS42OS4xMy0uNy4zNC0uN3MuMzEuMjEuMzMuMzNjLjEuNjYuNC41Ni43Mi41N2EuNzMuNzMsMCwwLDAsLjY5LS43OWMxLjk0LS4wOSw0LjI5LTEuMzYsNi4yNC0xYTMuNzMsMy43MywwLDAsMSwyLC44MWgxYTMuNzMsMy43MywwLDAsMSwyLS44MWMxLjk1LS4zMiw0LjMuOTUsNi4yNCwxYS43My43MywwLDAsMCwuNjguNzljLjMzLDAsLjYzLjA5LjczLS41NywwLS4xMi4xNi0uMzMuMzMtLjMzcy40MywwLC4zMy43YTEuMjcsMS4yNywwLDAsMS0xLjQsMUMyNi4xOSwzOC41LDIxLjM1LDM3LjExLDE5LjMyLDM5WiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTE5LjMyLDM4Ljg2bC0uNywwYy0yLTEuODYtNi44LS40OS05LS4xNWExLjI4LDEuMjgsMCwwLDEtMS40MS0xYy0uMDktLjY5LjEzLS43LjM0LS43YS42LjYsMCwwLDEsLjQzLjMzLjYzLjYzLDAsMCwwLC42Mi41OGMuMjYsMCwuNTktLjE1LjU5LS43LDEuOTQtLjA5LDQuMzktMS40NSw2LjM0LTEuMTRhMy43MywzLjczLDAsMCwxLDIsLjgxaDFhMy43MywzLjczLDAsMCwxLDItLjgxYzEuOTUtLjMxLDQuNCwxLDYuMzMsMS4xNCwwLC41NS4zNC43MS41OS43YS42NS42NSwwLDAsMCwuNjMtLjU4LjU2LjU2LDAsMCwxLC40My0uMzNjLjIsMCwuNDMsMCwuMzMuN2ExLjI3LDEuMjcsMCwwLDEtMS40LDFjLTIuMjItLjM0LTcuMDYtMS43My05LjA5LjEyIi8+PHBhdGggY2xhc3M9ImNscy0yMSIgZD0iTTE5LjMyLDM4Ljg2bC0uNywwYy0yLTEuODYtNi44LS40OS05LS4xNWExLjI4LDEuMjgsMCwwLDEtMS40MS0xYy0uMDktLjY5LjEzLS43LjM0LS43YS42LjYsMCwwLDEsLjQzLjMzLjYzLjYzLDAsMCwwLC42Mi41OGMuMjYsMCwuNTktLjE1LjU5LS43LDEuOTQtLjA5LDQuMzktMS40NSw2LjM0LTEuMTRhMy43MywzLjczLDAsMCwxLDIsLjgxaDFhMy43MywzLjczLDAsMCwxLDItLjgxYzEuOTUtLjMxLDQuNCwxLDYuMzMsMS4xNCwwLC41NS4zNC43MS41OS43YS42NS42NSwwLDAsMCwuNjMtLjU4LjU2LjU2LDAsMCwxLC40My0uMzNjLjIsMCwuNDMsMCwuMzMuN2ExLjI3LDEuMjcsMCwwLDEtMS40LDFDMjYuMTksMzguNCwyMS4zNSwzNywxOS4zMiwzOC44NloiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0xOSw0Ny41NmMtLjA3LS4yNS0uNC04LjM1LS40LTguMzVoLjc5UzE5LDQ3LjMxLDE5LDQ3LjU2Ii8+PHBhdGggY2xhc3M9ImNscy0yMCIgZD0iTTE5LDQ3LjU2Yy0uMDctLjI1LS40LTguMzUtLjQtOC4zNWguNzlTMTksNDcuMzEsMTksNDcuNTZaIi8+PHJlY3QgY2xhc3M9ImNscy00IiB4PSIxOC4yMiIgeT0iMzYuMjUiIHdpZHRoPSIxLjQ3IiBoZWlnaHQ9IjIuODgiLz48cmVjdCBjbGFzcz0iY2xzLTIyIiB4PSIxOC4yMiIgeT0iMzYuMjUiIHdpZHRoPSIxLjQ3IiBoZWlnaHQ9IjIuODgiLz48cGF0aCBjbGFzcz0iY2xzLTIzIiBkPSJNOS41OSw0MC4zNWwtNSwxMC40MW01LTEwLjQxLDQuOTUsMTAuMzZNOS41OSw0MC4zNVY1MC44NCIvPjxwYXRoIGNsYXNzPSJjbHMtNyIgZD0iTTEwLjA2LDQwYS40OS40OSwwLDAsMS0xLDAsLjQ5LjQ5LDAsMCwxLDEsMG0uNCwwYS44OS44OSwwLDEsMC0uODkuODlBLjg4Ljg4LDAsMCwwLDEwLjQ2LDQwWiIvPjxwYXRoIGNsYXNzPSJjbHMtNCIgZD0iTTkuMjksMzcuMzhjMC0uMTIuMTgtLjIyLjI5LS4yMmEuMjcuMjcsMCwwLDEsLjI2LjIzVjQwYS4yNy4yNywwLDAsMS0uMjYuMjNjLS4xMSwwLS4yOS0uMTEtLjI5LS4yNHYtMi42Ii8+PHBhdGggY2xhc3M9ImNscy0yNCIgZD0iTTkuMjksMzcuMzhjMC0uMTIuMTgtLjIyLjI5LS4yMmEuMjcuMjcsMCwwLDEsLjI2LjIzVjQwYS4yNy4yNywwLDAsMS0uMjYuMjNjLS4xMSwwLS4yOS0uMTEtLjI5LS4yNFoiLz48cGF0aCBjbGFzcz0iY2xzLTEiIGQ9Ik0xNC4zNCw1MC45M2wtLjU2LjA5YTUuNjYsNS42NiwwLDAsMS0zLjY5LDJjMi41MS0uMDgsNC0xLjQxLDQuMjUtMi4wOCIvPjxwYXRoIGNsYXNzPSJjbHMtMjMiIGQ9Ik0yOC40LDQwLjM1bC01LDEwLjQxbTUtMTAuNDEsNSwxMC4zNm0tNS0xMC4zNlY1MC44NCIvPjxwYXRoIGNsYXNzPSJjbHMtNyIgZD0iTTI4Ljg3LDQwYS40OC40OCwwLDEsMS0xLDAsLjQ4LjQ4LDAsMSwxLDEsMG0uNDEsMGEuODkuODksMCwxLDAtLjg5Ljg5QS44OC44OCwwLDAsMCwyOS4yOCw0MFoiLz48cGF0aCBjbGFzcz0iY2xzLTQiIGQ9Ik0yOC4xMSwzNy4zOGMwLS4xMi4xOC0uMjIuMjktLjIyYS4yNy4yNywwLDAsMSwuMjYuMjNWNDBhLjI3LjI3LDAsMCwxLS4yNi4yM2MtLjExLDAtLjI5LS4xMS0uMjktLjI0di0yLjYiLz48cGF0aCBjbGFzcz0iY2xzLTI0IiBkPSJNMjguMTEsMzcuMzhjMC0uMTIuMTgtLjIyLjI5LS4yMmEuMjcuMjcsMCwwLDEsLjI2LjIzVjQwYS4yNy4yNywwLDAsMS0uMjYuMjNjLS4xMSwwLS4yOS0uMTEtLjI5LS4yNFoiLz48cGF0aCBjbGFzcz0iY2xzLTEiIGQ9Ik0zMy4xNiw1MC45M2MtLjE5LDAtLjU2LjA5LS41Ni4wOWE1LjY2LDUuNjYsMCwwLDEtMy42OSwyYzIuNS0uMDgsNC0xLjQxLDQuMjUtMi4wOCIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik01OC4xLDMxYy4yLjA2LjM5LjU0LjQyLjY0LDAsLjU0LjMyLDIuNTIuMzIsMi42NSwwLC41NCwwLC44Mi0uMjYuODJhLjkuOSwwLDAsMS0uNzktLjY3LDUuNjIsNS42MiwwLDAsMC0xLjU0LTIuMjksMy42OCwzLjY4LDAsMCwwLTIuMzItLjc3QTMuNTQsMy41NCwwLDAsMCw1MC4zNSwzNWMwLDIuMTcsMS41NywzLjE2LDQuNDEsNXM0LjQ2LDMuNTQsNC40Niw2LjIyYTUuNTcsNS41NywwLDAsMS0yLjY4LDQuNTNBOC45Myw4LjkzLDAsMCwxLDUyLjIsNTJhMTIsMTIsMCwwLDEtNC4yNy0uODMsMi40NCwyLjQ0LDAsMCwxLS43Ni0xLDI3LDI3LDAsMCwxLS40OC0zLjFjMC0uMTYuMzItLjYuNDQtLjZzLjc3Ljc5LDEuMjIsMS43OGE1LDUsMCwwLDAsNC4yMSwyLjY1LDMuNjQsMy42NCwwLDAsMCwzLjczLTMuN2MwLTEuMzctLjY0LTIuNzctMy44OS00Ljg1LTIuODQtMS44MS00LjcyLTMuNjYtNC43Mi02LjQxQTUuMzUsNS4zNSwwLDAsMSw0OS40NiwzMmE3LDcsMCwwLDEsNC43OS0xLjUzQTIyLjQxLDIyLjQxLDAsMCwxLDU4LjEsMzFaIi8+PHBhdGggY2xhc3M9ImNscy0yNSIgZD0iTTYxLjM2LDM2Ljg2Yy42MywwLDIsLjE2LDMsLjE2czEuOTEtLjEsMi42NC0uMS44Ni4yLjg2LjM5LS4yMi4zOC0uNzYuNTRjLTEuMTUuMjUtMS4xMi43Ni0uODMsMS41LjQxLDEsLjg5LDIuMzYsMS41OSwzLjk1YTI1LjkzLDI1LjkzLDAsMCwwLDEuODIsNGMuMS4xMi4yMi4yNS4zNS0uMDcuMzgtLjg2LDIuMzktNS43NCwyLjg3LTcuMjdzLjQ4LTEuODItLjc5LTIuMWMtLjMyLS4xLS43MS0uMzItLjcxLS41NHMuMjYtLjM2LjgtLjM2Yy44NiwwLDEuMjguMSwyLjA3LjEsMS4xMiwwLDIuMDgtLjE2LDIuNjItLjE2LjM1LDAsLjcuMS43LjM1cy0uMzUuNDUtLjgzLjU0Yy0xLC4yOS0xLjU5Ljc3LTIuNDUsMi4zMy0uNzQsMS4zMS0xLjU3LDMuNTQtMi41Niw1LjcxLTEuNTMsMy4zOC0yLDUtMi4yLDUuMzZTNjksNTIsNjguNjksNTJzLS40MS0uMzUtLjUxLS42N0EyOS42MywyOS42MywwLDAsMCw2Nyw0OC4wNWMtLjgtMS44MS0yLjkzLTYuOTUtMy44OS04LjgzYTIuNzgsMi43OCwwLDAsMC0yLTEuNWMtLjMxLS4wNi0uNzMtLjIyLS43My0uNDhTNjAuOTQsMzYuODYsNjEuMzYsMzYuODZaIi8+PHBhdGggY2xhc3M9ImNscy0yNSIgZD0iTTg1LjQzLDQzLjUzYzEuMzcsMCwxLjUzLS4yLDItMS4yOC4xMy0uMzIuMzUtLjY0LjYxLS42NHMuMjguMzIuMjguNzdjMCwuMjItLjA5LjctLjA5LDEuNXMuMDksMSwuMDksMS43NS0uMjIuODYtLjQ3Ljg2LS4zNS0uMjUtLjUxLS42N2MtLjI5LS42NC0uNDItLjkyLS43LTFhMTIuMjQsMTIuMjQsMCwwLDAtMi43Mi0uMTNjLS4xMiwwLS4yNS4yMy0uMzEuNDVhMjAuOTMsMjAuOTMsMCwwLDAsLjA2LDQuNDYsMi4xMSwyLjExLDAsMCwwLC41MS41OCw2LjU5LDYuNTksMCwwLDAsMS45NC4zMiw4LjIxLDguMjEsMCwwLDAsMi0uMiwzLjYyLDMuNjIsMCwwLDAsMi4zNi0xLjk0Yy4yNi0uMzguNDItLjYxLjY0LS42MXMuMzIuNTUuMzIuNzFhMTAsMTAsMCwwLDEtLjg2LDIuODNjLS4xMy4yMy0uMzUuMzItMSwuMzItMi43NCwwLTMuMTItLjE2LTcuNDktLjE2LTEsMC0yLjI0LjE2LTMsLjE2LS40OCwwLTEtLjEyLTEtLjQ0cy40NC0uNDUuOC0uNTVjMS43Mi0uMzgsMS43OC0uNzYsMS45MS0xLjkxLjA2LS44OS4wOS0yLjkuMDktNC45NCwwLTEuNDcsMC0zLjE2LS4wNi00LjQ3LDAtLjY3LS4yMi0xLjExLTEuNTMtMS40My0uMzgtLjEtLjc3LS4yNi0uNzctLjU0cy4zMi0uMzkuODctLjM5LDEuNjUuMTMsMi45My4xM2M1LjkzLDAsNi4zNSwwLDcuMTEtLjEzYS4zNS4zNSwwLDAsMSwuMzguMjljMCwuOTIuMjMsMi4xNy4yNiwyLjY4cy0uMjIuNy0uMzguNy0uNDItLjE5LS42Ny0uNzNjLS41NS0xLjE1LTEtMS42LTItMS42OUExOC43NSwxOC43NSwwLDAsMCw4NCwzOGMtLjE2LDAtLjI2LjI5LS4yOS40NGEzNC40LDM0LjQsMCwwLDAtLjA2LDQuNjMuNDEuNDEsMCwwLDAsLjM1LjM4Qzg0LjQ0LDQzLjQ5LDg1LjExLDQzLjUzLDg1LjQzLDQzLjUzWiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik05NSwzN2MuODMsMCwxLjU2LDAsMS45MSwwLC43NywwLDItLjEzLDQuNzItLjEzLDIuMDgsMCwzLjUxLjQ4LDQuMjEsMS4xOEEzLjI2LDMuMjYsMCwwLDEsMTA3LDQwLjU2YTMuNzMsMy43MywwLDAsMS0yLjcxLDMuNTFjLS4wNiwwLS4xNi4xNi0uMTMuMTlBMjQuOTMsMjQuOTMsMCwwLDAsMTA3LjM3LDQ5LDQuODksNC44OSwwLDAsMCwxMTAsNTAuNzNjLjQ0LjEuNTcuMTkuNTcuNDVzLS43Ni42NC0yLC42NGE1LjEsNS4xLDAsMCwxLTQtMmMtLjU1LS42NC0yLjI0LTMuNDEtMi44Ny00LjMxYTIuNDEsMi40MSwwLDAsMC0xLjc5LS44Mi43MS43MSwwLDAsMC0uNDguMTkuNDQuNDQsMCwwLDAtLjE2LjI4YzAsLjY0LDAsMi4zNi4xLDQsLjA2LDEsLjU3LDEuMTIsMS40LDEuMzcuMjYuMDcuNjcuMjYuNjcuNDgsMCwuMzgtLjU0LjQ4LS44Ni40OC0xLDAtMS43Mi0uMS0yLjU4LS4xLTEuMDksMC0yLC4yMy0zLC4yMy0uNTUsMC0uOS0uMTktLjktLjQycy4yOS0uNDQuOC0uNTdjMS40LS4zNSwxLjYzLS42NCwxLjY2LTIsMC0uNjQuMTYtMy4yOS4xNi02LjE2LDAtMS41NiwwLTIuMzYsMC0zLjEycy0uMS0xLjE4LTEuNjMtMS40N2MtLjQ4LS4wOS0uODMtLjMyLS44My0uNTFTOTQuNTgsMzcsOTUsMzdabTQuNjYsMWEuNTMuNTMsMCwwLDAtLjMyLjQ4YzAsLjMyLS4xLDQuNjgtLjEsNXMuMTMuMzUuMzUuMzVhOC4zMSw4LjMxLDAsMCwwLDMuMzItLjU0LDIuOSwyLjksMCwwLDAsMS4zMS0yLjM5YzAtMS40LTEuMDktMy4wNi0zLjctMy4wNkEyLjIsMi4yLDAsMCwwLDk5LjY2LDM4WiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik0xMTIuNzksMzYuOTJjLjI2LDAsMi40Ni4xLDMuMzguMXMyLjQ2LS4xLDMuMTktLjE5Yy4yNiwwLC42Ny4xOS42Ny4zNXMtLjQxLjUxLS43Ni42MWMtMS41My40MS0xLjYzLjY2LTEuNzIsMS44MSwwLC43LDAsMi40OSwwLDQuNTYsMCwxLjY5LDAsMy4yOSwwLDQsLjA2LDEuNzguMjIsMi4wNywxLjcyLDIuNDIuMzguMTMuNzMuMzUuNzMuNjRzLS4zMi4zMi0uNjcuMzJjLTEsMC0xLjc4LS4xLTMuMDktLjEtLjkzLDAtMi43NC4xNi0zLjM1LjE2cy0uNzctLjEyLS43Ny0uMzUuNDUtLjU0Ljc0LS42YzEuNTMtLjM5LDEuNzgtLjc3LDEuODUtMiwwLS41OC4wNi0xLjYzLjA2LTIuNzEsMC0zLjMyLDAtNS40MywwLTYtLjEtMS4yOC0uNTctMS42OS0xLjc1LTItLjU4LS4xOS0uNzEtLjQyLS43MS0uNjRTMTEyLjQxLDM2Ljg5LDExMi43OSwzNi45MloiLz48cGF0aCBjbGFzcz0iY2xzLTI1IiBkPSJNMTI1LjM5LDM4LjMzYTkuNzgsOS43OCwwLDAsMSw1Ljg3LTEuODUsMTMsMTMsMCwwLDEsMy4xMi4zOGMuNzcuMTksMS4zMS4yOSwxLjUzLjMyYS41NS41NSwwLDAsMSwuNTEuNTdjMCwuNDguMjMsMi4yNy4yNiwyLjY4cy0uMTYuNzctLjQyLjc3LS40MS0uMjMtLjU3LS42Ny0uMzgtLjgtLjY3LTEuMjhhNC44LDQuOCwwLDAsMC0zLjkyLTEuODUsNS40LDUuNCwwLDAsMC0zLjg2LDEuOTIsNy4wOSw3LjA5LDAsMCwwLTEuNTMsNC40Niw3LjU1LDcuNTUsMCwwLDAsMS43OCw1LjFBNS44Miw1LjgyLDAsMCwwLDEzMS42NCw1MWEyLjIsMi4yLDAsMCwwLDEuNjktLjUxLDEsMSwwLDAsMCwuNDUtLjcxLDcuOSw3LjksMCwwLDAsLjA5LTEuOTFjLS4wNi0xLjIxLS40MS0xLjUtMS44NS0xLjc4LS41MS0uMS0uNzktLjI5LS43OS0uNTJzLjM4LS4zOC44Ni0uMzhjLjc5LDAsMi4yNi4xLDMuMDkuMXMxLjMxLS4wNywyLjA3LS4wN2MuNTgsMCwuODYuMDcuODYuMzlzLS40NC40MS0uNzMuNDhjLS44LjI1LS44Ni42LS44NiwxLjcyLDAsMS44NSwwLDEuODUuMjIsMnMuNTUuMzIuNTUuNTctLjIzLjM5LS43MS41OGExNy42NSwxNy42NSwwLDAsMS01LjQyLjk1LDkuNjIsOS42MiwwLDAsMS02LjE4LTIsNy4zLDcuMywwLDAsMS0yLjU5LTUuN0E3LjQ4LDcuNDgsMCwwLDEsMTI1LjM5LDM4LjMzWiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik0xNDcuNjgsNDMuNTNjMS4zNywwLDEuNTMtLjIsMi0xLjI4LjEzLS4zMi4zNS0uNjQuNjEtLjY0cy4yOC4zMi4yOC43N2MwLC4yMi0uMDkuNy0uMDksMS41cy4wOSwxLC4wOSwxLjc1LS4yMi44Ni0uNDcuODYtLjM2LS4yNS0uNTItLjY3Yy0uMjgtLjY0LS40MS0uOTItLjctMWExMi4xMSwxMi4xMSwwLDAsMC0yLjcxLS4xM2MtLjEzLDAtLjI1LjIzLS4zMi40NWEyMS42NCwyMS42NCwwLDAsMCwuMDcsNC40NiwyLjExLDIuMTEsMCwwLDAsLjUxLjU4LDYuNTksNi41OSwwLDAsMCwxLjk0LjMyLDguMjcsOC4yNywwLDAsMCwyLS4yLDMuNjIsMy42MiwwLDAsMCwyLjM2LTEuOTRjLjI2LS4zOC40MS0uNjEuNjQtLjYxcy4zMi41NS4zMi43MWExMCwxMCwwLDAsMS0uODYsMi44M2MtLjEzLjIzLS4zNi4zMi0xLC4zMi0yLjc0LDAtMy4xMy0uMTYtNy41LS4xNi0xLDAtMi4yMy4xNi0zLC4xNi0uNDgsMC0xLS4xMi0xLS40NHMuNDQtLjQ1Ljc5LS41NWMxLjczLS4zOCwxLjc5LS43NiwxLjkyLTEuOTEuMDYtLjg5LjA5LTIuOS4wOS00Ljk0LDAtMS40NywwLTMuMTYtLjA2LTQuNDcsMC0uNjctLjIyLTEuMTEtMS41My0xLjQzLS4zOC0uMS0uNzctLjI2LS43Ny0uNTRzLjMyLS4zOS44Ni0uMzksMS42Ni4xMywyLjk0LjEzYzUuOTMsMCw2LjM0LDAsNy4xMS0uMTNhLjM1LjM1LDAsMCwxLC4zOC4yOWMwLC45Mi4yMywyLjE3LjI2LDIuNjhzLS4yMy43LS4zOS43LS40MS0uMTktLjY3LS43M2MtLjU0LTEuMTUtMS0xLjYtMi0xLjY5YTE4LjgyLDE4LjgyLDAsMCwwLTMuMDctLjEzYy0uMTYsMC0uMjUuMjktLjI4LjQ0YTM2LDM2LDAsMCwwLS4wNyw0LjYzLjQyLjQyLDAsMCwwLC4zNS4zOEMxNDYuNjksNDMuNDksMTQ3LjM2LDQzLjUzLDE0Ny42OCw0My41M1oiLz48cGF0aCBjbGFzcz0iY2xzLTI1IiBkPSJNMTY2LDM3Yy4yLDAsLjI5LjQxLjI5LjczLDAsLjkzLDAsMS43OSwwLDIuMi0uMS42MS0uMzUuNy0uNDguNy0uMjksMC0uMzgtLjM1LS40OC0uNzNhMy40NSwzLjQ1LDAsMCwwLTEuMDgtMS44MiwzLjIsMy4yLDAsMCwwLTEuOTUtLjY3LDIuNDIsMi40MiwwLDAsMC0yLjYxLDIuMzYsMy4xNiwzLjE2LDAsMCwwLDEuODUsMi40OWMxLC41NywxLjk0LDEsMi45LDEuNTlhNC4yOSw0LjI5LDAsMCwxLDIuNDYsMy43NCw0LjE2LDQuMTYsMCwwLDEtMiwzLjM4LDcuNDcsNy40NywwLDAsMS0zLjYxLjk1LDcuNjEsNy42MSwwLDAsMS00LS45NS44OS44OSwwLDAsMS0uMzgtLjY3YzAtLjM5LS4yNS0xLjk1LS4yNS0yLjQ2cy4xOS0uODkuNDQtLjg5LjM5LjM4LjU1Ljc2YTcuNTcsNy41NywwLDAsMCwuNzYsMS40N0E0LjEzLDQuMTMsMCwwLDAsMTYxLjU4LDUxYTIuMzksMi4zOSwwLDAsMCwyLjU5LTIuM2MwLTEuMjEtLjctMS44OC0xLjc5LTIuNTVzLTEuOTEtMS0yLjU4LTEuNWE0Ljg0LDQuODQsMCwwLDEtMi42Mi0zLjkyYzAtMi4zOSwxLjk1LTQuMjEsNS4zLTQuMjFBMTkuNjcsMTkuNjcsMCwwLDEsMTY2LDM3WiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik0xOTUuMjksMzMuNzdhMTAuNCwxMC40LDAsMCwxLDIuOTQsN0ExMC44MiwxMC44MiwwLDAsMSwxOTMuMTYsNTBhMTUuNTYsMTUuNTYsMCwwLDEtNy41NiwxLjc1Yy0xLjMxLDAtNC4yMS0uMDktNi4yOS0uMjItLjY2LDAtMS4yNywwLTEuNzgsMC0uNywwLTEtLjIzLTEtLjQ4cy4zMi0uNDUuNzMtLjQ4YzIuMTQtLjI2LDIuMy0uODMsMi4zOS0zLjQ0LjA3LTEuNTQuMS0yLjU5LjEtNC4zNHMwLTUuNTItLjE2LThjLS4wNi0yLS4xLTIuNTItMi0yLjgtLjM1LS4wNy0uNzMtLjI2LS43My0uNDhzLjMyLS40NS43OS0uNDVoMS4wNmMxLjU5LDAsNS4yLS4yNSw3Ljg0LS4yNUExMy4xMSwxMy4xMSwwLDAsMSwxOTUuMjksMzMuNzdaTTE4My4wNSwzMmMtLjIzLjE2LS4yOS4yNi0uMzIuNDItLjA3LjQ3LS4xMywzLjEyLS4xMyw2VjQzYzAsMi4yLDAsNC4wOS4xMyw1LjQ5YTIuMjksMi4yOSwwLDAsMCwuNywxLjQ3LDUuNjYsNS42NiwwLDAsMCwyLjUyLjgzLDkuNzIsOS43MiwwLDAsMCw1LjcxLTIuMDUsMTAuMjgsMTAuMjgsMCwwLDAsMy4yMi03LjkxLDkuNjksOS42OSwwLDAsMC0zLjI1LTcuMTcsMTEuMjgsMTEuMjgsMCwwLDAtNi41MS0xLjk1QTQuNjYsNC42NiwwLDAsMCwxODMuMDUsMzJaIi8+PHBhdGggY2xhc3M9ImNscy0yNSIgZD0iTTIxNi4yOCw0NGE3LjM1LDcuMzUsMCwwLDEtMi41OSw2LDguMjMsOC4yMywwLDAsMS01LjIsMS45MWMtNS40OCwwLTguMjktNC04LjI5LTcuNjhhNy4zNiw3LjM2LDAsMCwxLDIuMzMtNS40OSw4LjI0LDguMjQsMCwwLDEsNS43MS0yLjIzQzIxMi44MywzNi41MSwyMTYuMjgsMzkuODYsMjE2LjI4LDQ0Wm0tMTEuNDItNS4xYy0uOC44Ni0xLjUsMi4zOS0xLjUsNSwwLDQuNDMsMy4xMyw3LDUuMjYsN2E0LjIxLDQuMjEsMCwwLDAsMy4zMi0xLjY1LDguOTQsOC45NCwwLDAsMCwxLjI0LTUuMTFjMC0xLjg1LTEuNC02LjY5LTUuMzYtNi42OUE0LjMzLDQuMzMsMCwwLDAsMjA0Ljg2LDM4Ljg3WiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik0yMTkuNDMsMzYuODNjLjY3LDAsMi4xNy4xOSw0LC4xOS4xMywwLC40Mi4yOS40NS40NWExNi4xNSwxNi4xNSwwLDAsMCwuOCwyLjIzYy43LDEuNTksMi45Myw1LjkzLDMuNzMsNy40MywwLC4xMy4yMiwwLC4zMi0uMS40Ny0uNywzLjIyLTYuMzQsMy43Ni03LjQ2YTEyLjU1LDEyLjU1LDAsMCwwLC44My0yLjJjMC0uMTMuMjItLjM1LjM1LS4zNSwxLjc4LDAsMi42MS0uMTksNC4wOC0uMTkuMzUsMCwuNy4wOS43LjM1cy0uMjIuNDEtMS4wOC41N2MtMS4zNy4yMy0xLjc5LDEtMS43OSwxLjY2LDAsMy44Ni4wNyw2LjU0LjE5LDguNjEuMSwxLjc2LjQyLDIuMzYsMS44NSwyLjU5LjY3LjEyLjkzLjI4LjkzLjU0cy0uNTguNDEtLjg5LjQxYy0xLjE4LDAtMi4zNi0uMTYtMy4yMy0uMTZzLTEuNTkuMS0yLjQ4LjFjLS41OCwwLS44Ni0uMTktLjg2LS40OHMuMTktLjM1LjgzLS41N2ExLjY1LDEuNjUsMCwwLDAsMS4xNC0xLjc2YzAtMSwuMS01LjEzLjEtNy42OCwwLS4yMy0uMjItLjE2LS4zMiwwLTIsNC4zNC0zLjkyLDgtNC40Niw5LjYtLjE2LjU1LS41NSwxLS44Mywxcy0uNjQtLjU0LTEuMzEtMi4zM2MtLjc3LTIuMS0yLjU4LTUuNjctMy43Ni04LjIyLS4xLS4yMy0uMjYsMC0uMjkuMDZhNzUuNzIsNzUuNzIsMCwwLDAtLjI2LDcuODVjMCwuNi4xOSwxLjMzLDEuNTMsMS42OS4yNi4wNi42Ny4yNS42Ny40NHMtLjM1LjQ4LS44Mi40OGMtLjY0LDAtMS41Ny0uMTMtMi4yNC0uMTMtLjQxLDAtMi4yMy4xNi0yLjYxLjE2cy0uOC0uMTktLjgtLjQ0LjQyLS4zNS44OS0uNDhhMi4zMiwyLjMyLDAsMCwwLDEuODgtMi4yYy40Mi0yLjMzLjktOC4yNi45LTguOTMsMC0uOTMtLjI5LTEuNDEtMS44OC0xLjc5LS43NC0uMTktLjg2LS4zMi0uODYtLjU3UzIxOC44NiwzNi44MywyMTkuNDMsMzYuODNaIi8+PHBhdGggY2xhc3M9ImNscy0yNSIgZD0iTTI1MC41MywzN2MuMTksMCwuMjguNDEuMjguNzMsMCwuOTMsMCwxLjc5LDAsMi4yLS4xLjYxLS4zNS43LS40OC43LS4yOSwwLS4zOC0uMzUtLjQ4LS43M2EzLjQ1LDMuNDUsMCwwLDAtMS4wOC0xLjgyLDMuMiwzLjIsMCwwLDAtMi0uNjcsMi40MiwyLjQyLDAsMCwwLTIuNjEsMi4zNkEzLjE2LDMuMTYsMCwwLDAsMjQ2LDQyLjI1YzEuMDUuNTcsMS45NCwxLDIuOSwxLjU5YTQuMjksNC4yOSwwLDAsMSwyLjQ2LDMuNzQsNC4xNCw0LjE0LDAsMCwxLTIsMy4zOCw3LjQ3LDcuNDcsMCwwLDEtMy42MS45NSw3LjYxLDcuNjEsMCwwLDEtNC4wNS0uOTUuODkuODksMCwwLDEtLjM4LS42N2MwLS4zOS0uMjUtMS45NS0uMjUtMi40NnMuMTktLjg5LjQ0LS44OS4zOS4zOC41NS43NmE3LjU3LDcuNTcsMCwwLDAsLjc2LDEuNDdBNC4xMyw0LjEzLDAsMCwwLDI0Ni4xNiw1MWEyLjM5LDIuMzksMCwwLDAsMi41OC0yLjNjMC0xLjIxLS43LTEuODgtMS43OS0yLjU1cy0xLjkxLTEtMi41OC0xLjVhNC44NCw0Ljg0LDAsMCwxLTIuNjItMy45MmMwLTIuMzksMS45NS00LjIxLDUuMy00LjIxQTE5LjgxLDE5LjgxLDAsMCwxLDI1MC41MywzN1oiLz48cGF0aCBjbGFzcz0iY2xzLTI1IiBkPSJNMjYzLjg1LDM3YzMuNTEsMCwzLjgzLS4yMiw0LjY2LS43My4xMy0uMDcuNDguMDkuNDUuNTEtLjA3LDEuMzcuMDksMi43Ny4wOSwzLjE1cy0uMjguNzEtLjQ4LjcxLS4zOC0uMjMtLjUxLS42MWMtLjU3LTEuNi0xLjA1LTEuNzItMS43Mi0xLjc5YTI0LjU5LDI0LjU5LDAsMCwwLTMuMzguMDdjLS4xMywwLS4yMi4yOC0uMjUuNDQtLjA3LjQ4LDAsNCwwLDcuMjhhMTQuNDksMTQuNDksMCwwLDAsLjIsMy4yOGMuMTYuNy40NC44OSwxLjcyLDEuMjEuNTcuMTMuNzkuMzIuNzkuNTRzLS40NC40NS0uODYuNDVjLTEuMzQsMC0xLjcyLS4xMy0zLjI1LS4xMy0uODMsMC0yLjY1LjE2LTMuNDEuMTYtLjQ1LDAtLjgzLS4xOS0uODMtLjQ0cy40OC0uNDIuODktLjUxYzEuNzItLjQ4LDEuNzktLjg3LDEuODUtMi4xNC4xMy0yLjc0LjIzLTYsLjIzLTkuNywwLS4wOS0uMTMtLjM4LS4zMi0uNDFhMTQuMjgsMTQuMjgsMCwwLDAtMy4xNi0uMTZjLS42MS4xLTEsLjM1LTEuNiwxLjI4LS4zOC42LS40Ny44Ni0uNzMuODZzLS40MS0uMzUtLjQxLS42NGMwLS41NC4zOC0yLjIzLjQxLTNhLjU3LjU3LDAsMCwxLC40OC0uNTRjLjIyLDAsLjQ1LjI1LjYxLjM4LjMxLjI2LDEsLjQ4LDQuMjEuNDhaIi8+PHBhdGggY2xhc3M9ImNscy0yNSIgZD0iTTI4Ni43OCw0NGE3LjM3LDcuMzcsMCwwLDEtMi41OCw2LDguMjMsOC4yMywwLDAsMS01LjIsMS45MWMtNS40OCwwLTguMjktNC04LjI5LTcuNjhBNy4zMyw3LjMzLDAsMCwxLDI3MywzOC43NGE4LjI0LDguMjQsMCwwLDEsNS43MS0yLjIzQzI4My4zNCwzNi41MSwyODYuNzgsMzkuODYsMjg2Ljc4LDQ0Wm0tMTEuNDEtNS4xYy0uOC44Ni0xLjUsMi4zOS0xLjUsNSwwLDQuNDMsMy4xMiw3LDUuMjYsN2E0LjIxLDQuMjEsMCwwLDAsMy4zMi0xLjY1LDguOTQsOC45NCwwLDAsMCwxLjI0LTUuMTFjMC0xLjg1LTEuNC02LjY5LTUuMzYtNi42OUE0LjMzLDQuMzMsMCwwLDAsMjc1LjM3LDM4Ljg3WiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik0yODkuNTIsMzYuODljLjQyLDAsMS4zOC4xMywyLjc4LjEzLDEuMTIsMCwyLjU4LS4wNiwzLjQxLS4xMy4yNiwwLC41NC4xMy41NC4zMnMtLjIyLjQ4LTEsLjY3YTEuNiwxLjYsMCwwLDAtMS40LDEuMThjLS4xMywxLjE4LS4xOSw1LjU1LS4xOSw3LjYyLDAsMSwuMDYsMiwuMTMsMi44N2ExLjE0LDEuMTQsMCwwLDAsLjc2Ljc3LDE3LjQ2LDE3LjQ2LDAsMCwwLDIuNzgsMCwyLjYyLDIuNjIsMCwwLDAsMS41LS40OCw4LjEzLDguMTMsMCwwLDAsMS41My0xLjc4Yy4zOC0uNTguNjQtLjc3LjgzLS43N3MuMzIuNTguMTYuOTNBMjMsMjMsMCwwLDAsMzAwLjIxLDUxYS45MS45MSwwLDAsMS0uNDUuNTQsMTEuOTIsMTEuOTIsMCwwLDEtMiwuMDZjLTEuMzQsMC0yLjg0LS4xNi01LjEtLjE2LTIsMC0yLjU1LjEzLTMuNTcuMTMtLjU4LDAtLjktLjE2LS45LS40MXMuMTktLjQyLjkzLS41OGMxLjU2LS4yNSwxLjc4LS44NiwxLjg1LTEuNjksMC0uNjQuMDktMS40Ny4wOS01LjQ1LDAtMS4yNSwwLTIuNzEsMC00LDAtLjk1LS4yOC0xLjMtMS40LTEuNTYtLjgtLjE5LS45My0uNDUtLjkzLS43UzI4OSwzNi44OSwyODkuNTIsMzYuODlaIi8+PHBhdGggY2xhc3M9ImNscy0yNSIgZD0iTTMxMS45MSwzNi44OWE5LjE3LDkuMTcsMCwwLDAsLjM4LDEuNzJjLjQ1LDEuMTUsMy4xMyw4LDQsOS43My43LDEuNi45MiwxLjg4LDIuMjMsMi4yLjYxLjE2LjgzLjMyLjgzLjUxcy0uMzIuNTEtLjY3LjUxYy0xLjUsMC0yLjktLjE2LTMuOTUtLjE2LS44LDAtMS4zMS4xLTIuMzMuMS0uNTEsMC0uOC0uMjItLjgtLjQ4cy4yMi0uMzIuNzctLjQ1Yy45NS0uMjUsMS4yNy0uNzMsMS4yNy0xLjExYTE4LjI3LDE4LjI3LDAsMCwwLS43My0yLjNjLS4wNy0uMTYtLjIyLS4yOS0uNzctLjMycy0yLjY0LS4wNi0zLjczLDBjLS41NCwwLS44MywwLS45NS4yM2E3LjI5LDcuMjksMCwwLDAtLjcxLDIuMjZjMCwuNjQuMi45MiwxLjI1LDEuMjguMzguMDkuNy4xOS43LjQ3cy0uMzUuNDItLjc3LjQyYy0uODYsMC0xLjQ2LS4xLTIuMjYtLjEtMS4wOSwwLTEuODguMTYtMi42OC4xNi0uMzUsMC0uNjctLjEyLS42Ny0uMzhzLjMyLS40MS43Ny0uNTRjMS4xNC0uMjksMS41OS0uNjQsMi4zNi0yLjExLjU3LTEuMDgsMy4wOS03LjA1LDMuNTctOC4xOWExMS4xNCwxMS4xNCwwLDAsMCwuNy0yLDEuNDUsMS40NSwwLDAsMSwuMzgtLjU1Yy4yMy0uMjguNjQtLjU0LjktLjg2cy40NC0uMzguNTctLjM4QS40LjQsMCwwLDEsMzExLjkxLDM2Ljg5Wm0uMjMsOC4yNmMtLjU4LTEuNS0xLjY2LTQuMjQtMS44Mi00LjYyLDAsMC0uMjYtLjEzLS4zMiwwLS41OCwxLjQ2LTEuNCwzLjQxLTEuODgsNC43MiwwLC4wOS4wOS4yNS4yMi4yNS42NCwwLDMsLjA3LDMuNTcsMEEuMzMuMzMsMCwwLDAsMzEyLjE0LDQ1LjE1WiIvPjxwYXRoIGNsYXNzPSJjbHMtMjUiIGQ9Ik0zMjEuNTcsMzdjLjgzLDAsMS41NywwLDEuOTIsMCwuNzYsMCwyLS4xMyw0LjcyLS4xMywyLjA3LDAsMy41LjQ4LDQuMjEsMS4xOGEzLjI4LDMuMjgsMCwwLDEsMS4xNCwyLjUyLDMuNzMsMy43MywwLDAsMS0yLjcxLDMuNTFjLS4wNiwwLS4xNi4xNi0uMTIuMTlBMjQsMjQsMCwwLDAsMzM0LDQ5YTQuOSw0LjksMCwwLDAsMi42MSwxLjcyYy40NS4xLjU4LjE5LjU4LjQ1cy0uNzcuNjQtMiwuNjRhNS4xMiw1LjEyLDAsMCwxLTQtMmMtLjU0LS42NC0yLjIzLTMuNDEtMi44Ny00LjMxYTIuNDEsMi40MSwwLDAsMC0xLjc5LS44Mi43NC43NCwwLDAsMC0uNDguMTkuNDMuNDMsMCwwLDAtLjE1LjI4YzAsLjY0LDAsMi4zNi4wOSw0LC4wNiwxLC41OCwxLjEyLDEuNCwxLjM3LjI2LjA3LjY3LjI2LjY3LjQ4LDAsLjM4LS41NC40OC0uODYuNDgtLjk1LDAtMS43Mi0uMS0yLjU4LS4xLTEuMDgsMC0yLC4yMy0zLC4yMy0uNTQsMC0uODktLjE5LS44OS0uNDJzLjI4LS40NC43OS0uNTdjMS40MS0uMzUsMS42My0uNjQsMS42Ni0yLDAtLjY0LjE2LTMuMjkuMTYtNi4xNiwwLTEuNTYsMC0yLjM2LDAtMy4xMnMtLjEtMS4xOC0xLjYzLTEuNDdjLS40Ny0uMDktLjgyLS4zMi0uODItLjUxUzMyMS4xNiwzNywzMjEuNTcsMzdabTQuNjYsMWEuNTMuNTMsMCwwLDAtLjMyLjQ4YzAsLjMyLS4wOSw0LjY4LS4wOSw1cy4xMi4zNS4zNS4zNWE4LjI1LDguMjUsMCwwLDAsMy4zMS0uNTQsMi45LDIuOSwwLDAsMCwxLjMxLTIuMzljMC0xLjQtMS4wOC0zLjA2LTMuNy0zLjA2QTIuMiwyLjIsMCwwLDAsMzI2LjIzLDM4WiIvPjwvZz48L2c+PC9zdmc+</mdui:Logo>
            </mdui:UIInfo>
            <idpdisco:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://dss.test.underskriftstjanst.se/Authn/DiscoResponse" index="1" xmlns:idpdisco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"/>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>MIIEtTCCAp2gAwIBAgIJAP+E9nL/hpPeMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjExMC8GA1UEAwwoVW5kZXJza3JpZnRzdGrDpG5zdGVuIEludGVybiBQS0kgVEVTVCBDQTAeFw0xOTAxMjMxMDU1MzlaFw0yOTAxMjAxMDU1MzlaMFcxCzAJBgNVBAYTAlNFMRowGAYDVQQKDBFDeWJlcmNvbSBHcm91cCBBQjEsMCoGA1UEAwwjU2lnbmluZ1NlcnZpY2VTYW1sRG9tc3RvbHN2ZXJrZXRETVowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqIFJ5RNh1U3HNnLPjNjTkYdh8ihXdUfZ1MBK3RlsK3e77/h8YCMma4LKOlnjJgRaH7kgN8kxlklF2BGyP98BVRx4f1DO9nel9UCx93hhfdxQ+iIabhhjYoIe29Q3KxcLHfP/ndw4HkdSu7X2BTJ4zk2yHtg6oPORBPoWOq/7y1rUPV/FjhLfy34z26wlJ+Z8ScrJi13IP4ekkyJE84l5ePf7YqyigF5gHgbPErnzokxpq3w0VwxGMJ3NTLPWrLm7rDOwcnzlTs6YKgk3Ld9LEZDv9uBdM9xR0XOG8hgP8WNoghFEQH6y3cAqS9qGvkTRVD3i4Xf/ZlEjh+gjq4L9PAgMBAAGjfzB9MB8GA1UdIwQYMBaAFILIQfQ9kC41ig1K1i8h2luvEEagMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUlmmRWl1vG4A3zZqLEckN7leKT9MwDQYJKoZIhvcNAQELBQADggIBAGAEpFIsk9Nnha/TyIzo5YyrtFricj7dtp4hU8I9lJtkJWeNC+x/SjR1YdnCDLK3jW27lg8QTi66lGPt3Cg8C8FKBbPkM8eKIcwNhmS61bn+Qw2T2qmxoycCEFje1FuXvNBIm9+W020pVgWzRd5kjMFQC/9ZRP1Ysydf7nDxX0F0R4yO7dk0y9pQEJ0zg5/e7aGSuCF8ylahqrHXfwIxOoWFQdLaN8gHIF57twGkEmAi0Ei5KnVlfmqQIMIhu18JA4eOxhw5/M+nCdz070IdMQfP9UuYZ999fLJ6tAR4BP2oAxB+92OGAMjKJrSzXQUkCCA+DGCqZBuSIsHUYvKuTwdo4RdVpd0YDnMWWsrGSOneYGJNnKwwNiodYwuRR+ZVazlKTKYPTNZP0eSxjwkjljjzv//SIJvlQwwVCLh8JIXxn2/ADcibYzdVicmiBPYF91NojCxDcHdGikU1nxsQ5oIt43r9JItUeUQLrQoE6atotBlTz5czwNpgqA4dgDnVUaMbkrV8S1u+YdvGWaAliVLQGqvhWLJgbmCmo8aAGWU62bXEdizSchHOiX1G9d3tJDdqvp//jiQudYaO4dANflyAMGGc9Kgc3vsz3Qatsu0huZigvYAc+qQAhMhNRU3Ayja2RyjPSicgjD5mpAa5RePnzEcghNtwkUX/YdnDzHBw</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dss.test.underskriftstjanst.se/Sign/ContinueSigning" index="0"/>
        <md:AttributeConsumingService index="0">
            <md:ServiceName xml:lang="sv">Domstolsverket</md:ServiceName>
            <md:ServiceName xml:lang="en">Swedish National Courts Administration</md:ServiceName>
            <md:RequestedAttribute FriendlyName="signature" Name="urn:oid:1.2.752.201.3.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
            <md:RequestedAttribute FriendlyName="transactionIdentifier" Name="urn:oid:1.2.752.201.3.2" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="sv">Domstolsverket</md:OrganizationName>
        <md:OrganizationName xml:lang="en">Swedish National Courts Administration</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="sv">Domstolsverket</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">Swedish National Courts Administration</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="sv">http://www.domstol.se</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">http://www.domstol.se</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
        <md:EmailAddress>operations@dom.se</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:EmailAddress>operations@dom.se</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>

Test Results Results from defined test cases

Test Results

Status

Test

Message

SCHEMA

Entity Descriptor pass basic XML schema validation

Roles

This service is declared as a signature service and has no other conflicting roles

Signed Request

This sign service has declared AuthnRequestsSigned="true" in the SPSSODescriptor

Certificates

This service has a key for signing and a key for encryption using separate certificates in metadata

EntityCategory-Sig-RequiredVal

This signature service has the required EntityCategory value "http://id.elegnamnden.se/st/1.0/sigservice"

EntityCategory-Sp

This Service Provider has the following EntityCategory values for LoA and attribute profile:

-	*http://id.elegnamnden.se/ec/1.0/loa3-pnr*
-	*http://id.elegnamnden.se/ec/1.0/eidas-naturalperson*

MDUI

mdui:UIInfo element is present

MDUI-DisplayName

Display text in Swedish and English present in mdui:

-	*sv: Sveriges Domstolar*
-	*en: The Swedish Courts*

MDUI-Description

Description in Swedish and English present in mdui:

-	*sv: Sveriges Domstolars e-tjänster*
-	*en: The Swedish Courts public e-services*

MDUI-Logotype

Working logotypes present:

H:69

W:337

Type:SVG