<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shibboleth.umassmed.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">umassmed.edu</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at shibboleth.umassmed.edu</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at shibboleth.umassmed.edu</mdui:Description>
                <mdui:Logo height="80" width="80">https://shibboleth.umassmed.edu/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.umassmed.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.umassmed.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.umassmed.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.umassmed.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.umassmed.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.umassmed.edu:8443/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.umassmed.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.umassmed.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.umassmed.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.umassmed.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">umassmed.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.umassmed.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.umassmed.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
