<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.camre.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">camre.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.camre.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.camre.ac.uk</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.camre.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.camre.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.camre.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.camre.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.camre.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.camre.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.camre.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.camre.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.camre.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.camre.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.camre.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">camre.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJzCCAg+gAwIBAgIUY80hjUfs63aVlMDz3c+RsRubyaowDQYJKoZIhvcNAQEL
BQAwGjEYMBYGA1UEAwwPaWRwLmNhbXJlLmFjLnVrMB4XDTE2MDYyMjA4NTUzMFoX
DTM2MDYyMjA4NTUzMFowGjEYMBYGA1UEAwwPaWRwLmNhbXJlLmFjLnVrMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pXx1IhbaJsMc8dd6HX+1zARkoXg
+DyKNt/lAelQph4Mp+ElHSAHsvXtyypwEef7M/sIRsWLfpBmOWzjmIAiIrGcxh9B
aYG6dUGPtOFseP+Zkemf2VkIqVQLj8LB8+oEjT3gYFeZPBuIKqizMlUrZjuX++Jn
WaHRswHqzf/sfjXei3E8y+z8FNpdtrLaFlhFWSxRKo7OjmpagpEcsnDXoqeZk7K8
f1fYNq4e1ZjETg9bO8VOpmF/RqtfEsnyHARTTA5iXQkjAkFqBAdGiMSxGldNaOZj
U4vd3MjjL+BlqJvR83jOye4PY0F3iC6ssPTy8rJejb5iqjiuKsblZXa/XQIDAQAB
o2UwYzAdBgNVHQ4EFgQUnZ24Se6Azcia1ZCKSbEh6N4kQYgwQgYDVR0RBDswOYIP
aWRwLmNhbXJlLmFjLnVrhiZodHRwczovL2lkcC5jYW1yZS5hYy51ay9pZHAvc2hp
YmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEA1C99boRBJjHvnn9Y3riS0tZdrCkZ
rk3kyu2XbL7+19XcxgIqYRn9bqGR0l8W4cyjjpn+0sUheGWavnbM8x3jFhi7TvsK
hFLNW96pOkLOjRfu6BSPWEyG029odK2Xs0rMKLDvmLKTxZ0WlWzgFRfp5TKUDlGv
e7u2XILPstp6bzoPtDJ2h6BySyIpKd3D+yVDvhwe/jZXRKvoYQrZ3hVFJDSrjI73
AxtPFJ4VH9HXJt/sru8zqcW3hMnge7nZkZ+hIGeceVWUWFp8hBuGuWA+pp3DxB3d
/gKmaZ7xm6K7CcBAdLzugF1wWcbOpnDEnu4ujAlN+/AAGmCDPNreNrNJpA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.camre.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.camre.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
