<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shib.bsdc.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">bsdc.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at shib.bsdc.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at shib.bsdc.ac.uk</mdui:Description>
                <mdui:Logo height="HeightInPixels" width="WidthInPixels">https://shib.bsdc.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.bsdc.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.bsdc.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib.bsdc.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib.bsdc.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib.bsdc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.bsdc.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib.bsdc.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib.bsdc.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib.bsdc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib.bsdc.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">bsdc.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJzCCAg+gAwIBAgIUTbwjzHy1V/QauduA1UWBe4i3xUwwDQYJKoZIhvcNAQEL
BQAwGjEYMBYGA1UEAwwPc2hpYi5ic2RjLmFjLnVrMB4XDTE1MDcyMjExMDkwMFoX
DTM1MDcyMjExMDkwMFowGjEYMBYGA1UEAwwPc2hpYi5ic2RjLmFjLnVrMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIEvn9RF5E6Oae2UsQZx/wyV4taa
1LyvNNew/XYBVzULQqETqNxCMDyKVhj74s6b6Kl0rim9y4ACSOTU/rGtYbg+WnFP
b6iRQnm0+hH/PJxlulPmp+ExqO+LUblY8+5/iohek7ybhpv5ysebuZbWlEJRutKK
AX5N4wLKNKjwXI9B2iZ9IBNfqPrsNLFs7cr3/C2le318BbKK2x37eGSqx/1VgHt6
JqCzZty6Y2EXRiVqktNOnPQKTrU6ycxmAhydZKVVpcOQ7MxlzbawV6Lq8xg3a1yP
DS533vVEAWhatvqvwk6GPhfZpF62r4uFe121gV+fMWPU2U3Kmz5730ZDgQIDAQAB
o2UwYzAdBgNVHQ4EFgQUvBymfqNxuuhIloDW66n/XjoR8ZIwQgYDVR0RBDswOYIP
c2hpYi5ic2RjLmFjLnVrhiZodHRwczovL3NoaWIuYnNkYy5hYy51ay9pZHAvc2hp
YmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAlGqFXhgYDq2lmraBfGT7hXai/+kX
UUnYoAx6rn0g4HXuRGLN5sdQdyjUDenHZBdUkB7iiUTKjYDIaDfFCqf7BhyTZVVp
AufFQSZkGobPNF7ryr13Nz1fxYChjg85MSfdLrHy5KzDZHGkbdK6OqJK1GQQmjg7
Etkz0PrgplwJvWoY1fwQOT2vZLYN1ZPFbxM40Q9p6cJ3TQze8FCaSeCu1gIcHlZD
/v833iBKd3o2FdR4hoajUlNy5qida3w+5tgQjCkIg5Uv34TZekf9KpbJeo9aC7rs
Js7zvcVri+nme42f+NejEW+w6qOYYYZVUT09NhIEKgqUrBJuF7KVi1ELlw==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.bsdc.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.bsdc.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
