<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.shibboleth.yorksj.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">yorksj.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.shibboleth.yorksj.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.shibboleth.yorksj.ac.uk</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.shibboleth.yorksj.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDVzCCAj+gAwIBAgIUR0FN1iuXsIOeLcEsnu2Ay8j/1V0wDQYJKoZIhvcNAQEL
BQAwJjEkMCIGA1UEAwwbaWRwLnNoaWJib2xldGgueW9ya3NqLmFjLnVrMB4XDTE3
MDIyMjE1NTUyMVoXDTM3MDIyMjE1NTUyMVowJjEkMCIGA1UEAwwbaWRwLnNoaWJi
b2xldGgueW9ya3NqLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGGObxyvogjmO6ridafRGhF69Frg6GYsm4/7EvgnXPPzpXmRnzQsE2cpWv3J
96wlpoVLe1On40S8h/COVlMJap+wUke9nYKAls+r9192KMObori5YsNF7+MN7Kb/
eKgDETQhr326fziXGIg4S6VsCDjlrhDJyztNd++Z9htmoTws+ZApwiDE8XH/fra2
q6lylwHqfOEykm36cwTUk6X6ZwV+/x3tNqaPQA+cd9oGjD5MQSYOeJrSnMBIy6Ed
cH1Sv5gP+ZsRJdJ3GCg/GIIbTVsDK+0C3uBVpE2JDJssVEb7H0ErWNOyLe2CONPR
r67hLI8AKrFS3KlZYTtRpWHEJQIDAQABo30wezAdBgNVHQ4EFgQU8WTj600aebY3
0DL4Jetjavut/3EwWgYDVR0RBFMwUYIbaWRwLnNoaWJib2xldGgueW9ya3NqLmFj
LnVrhjJodHRwczovL2lkcC5zaGliYm9sZXRoLnlvcmtzai5hYy51ay9pZHAvc2hp
YmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAVnjEyNn9X+kgzEtwaV/jK5FAJVzq
mrW0bUh1X46nUfI8hTZaq9t0dJhH8AP/A6Yb4nFJBWrKBhs/NjrcXMWxOs2gtBGW
r6jLaPlr7chrFJ0E0TO4Vt1QZ3ijglRDIc4+4TpKTgzgFN9bIlESxwxvF3gukg8C
PWJu5jt/KJUgc43EWx434upQgUYGVqYkPxVW5UNpDGY3AGfJBUiSvl7mjNvmqP1D
CycJk0dzj0MmwgpJYN2iL3Wa3Hwux2JLbl1HT7x1ZT22eBjWufXUVXfnSED1S3xB
ju9CvLwogjHSH/jAkyt5VMsuUmkimXPOLN/7+yuQ2fV4Y05gWocOAHfCaA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.shibboleth.yorksj.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.shibboleth.yorksj.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.shibboleth.yorksj.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.shibboleth.yorksj.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">yorksj.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.shibboleth.yorksj.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.shibboleth.yorksj.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
