...

.

Moa Technical Profile

• when uploading metadata to the Moa production environment the member MUST NOT upload anything other than production metadata. Test environment metadata MUST NOT occur in the production environment,
• the member's metadata MUST be in accordance with actual version of Federated TLS Authentication (see respective environment under Moa environments for more information),
• for every client's claim tags there MUST exist at least one value in accordance with Strengthened Tags Profile.
• for every server's claim  claim tags there MUST exist at least one value in accordance with Strengthened Tags Profile.
• for every  entity's claim organization there MUST exist a value for the member organization's legal name,
• for every entity's claim organization_id there MUST exist a value for the member organization's organization number in format LLYYMMDDXXXX where LL stands for the country code in accordance with ISO 3166-1 alpha 2

...

egilv1

bolv1

userlistv1

gnapv1

Metadata signature

The aggregated metadata is signed with JWS and published with JWS JSON Serialization. The metadata signatures are created with the algorithm ECDSA using P-256 and SHA-256 ("ES256"), according to the definition in RFC7518.

...