<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shib2.qmu.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">qmu.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at shib2.qmu.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at shib2.qmu.ac.uk</mdui:Description>
                <mdui:Logo height="HeightInPixels" width="WidthInPixels">https://shib2.qmu.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib2.qmu.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib2.qmu.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib2.qmu.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib2.qmu.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib2.qmu.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib2.qmu.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib2.qmu.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib2.qmu.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib2.qmu.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib2.qmu.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">qmu.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJzCCAg+gAwIBAgIURpdjTjwcGImbW/r7Ao0+z0pBc3IwDQYJKoZIhvcNAQEL
BQAwGjEYMBYGA1UEAwwPc2hpYjIucW11LmFjLnVrMB4XDTE2MDUxNjA5MzQwMloX
DTM2MDUxNjA5MzQwMlowGjEYMBYGA1UEAwwPc2hpYjIucW11LmFjLnVrMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptC4qFIteMTaLiHY9aMpUEO2EZdr
AGe82sTZG/Mudo/nNuPqPoX59maIp0o83QSnHAI0TAxWMQQwwZOFrOL7trh3TZE8
he4aMmueIvEIC8HkOtuAqr+z352+qUxistR3xfTbfofK/LIwiQPoQCBy38MdY3Gn
BGFhb+TK5M8jsJ7SL2HoQWy9s31CDDDjS6RPPQF3apQlUY7YMh5JhLai/9GepM7f
/wSu2F7wlA/x2s4vgIq5HoMlf74bI7Xa3A5t8xiZQJ8vc+NXluuAJrIBnd6CWtPV
i98skKhGncCRPWl1t5y7hjy1QzrJMcdR4yZQ0lMm1UoS6GDWOJ2tYwYmDwIDAQAB
o2UwYzAdBgNVHQ4EFgQUqZBg7DZ61SjRSUgA2pE/FKhg/m8wQgYDVR0RBDswOYIP
c2hpYjIucW11LmFjLnVrhiZodHRwczovL3NoaWIyLnFtdS5hYy51ay9pZHAvc2hp
YmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEARAbYSQ9AUY/B1JPMRycIggvIlqAf
fraN+Brp8GMLuYrkX0GIaMp3h5Uh2UM2ksRsci0eHS1jXNc1TAADr5ViKq1uDBgq
iHPHYUvSyJc7ib0RFzFzPo7E/Zj7vsnUag5vlCKd/gD2pQv6pjMTI784BYzk29wi
I7MfWhnEMnpzB/T0vOcEvZatXavP6XnGW0owvsuIK30V88j7d52CJSrj3IJFBfVy
z37vNMXQier73zDk2HVG5WcWiaES3PTfNl079s0nxaAM0rDPXj5oiz+f1R5qrRav
XO4oH51Nh8eXR90oA0t+1LhpLw5tCg5UNDCRJU3YcvxVXZf14DhcyQVZvg==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIDCCAgigAwIBAgIVAJHckdGW1E6nDrwPcGkVRFgwIkLVMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDWlkcC5xbXUuYWMudWswHhcNMTUwODI1MTMyNTUyWhcN
MzUwODI1MTMyNTUyWjAYMRYwFAYDVQQDDA1pZHAucW11LmFjLnVrMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJKUCoRpDd0DgKIvr1QyYsOCN6nxa60f
jNX+VVuYHdyZjQCf3sBa3C/NPOifPl8/nORvcQcW4LlUc9t21d7EgNcYYL9+nZ6B
kAlVHTmD0ssH4axtHbPwXnMgs60KnZ5TMPQkgERnTIehjPngxzy89sOGESZDcsQz
7c9thvLDLvOQwtb168FClmnMonZc2Ey1h5BfS5ZyxAfuckhoDL98iJFdPOW3yp8D
bDPKuPpuMcPl+M3pWHvCLkrkScgqRHypmxYwhMId2kDroJQiT3NXmQGvYzHBn3eo
Od9PlcJ+2YNyUXnfvgI/0Pv6m8KCRj107HsgVaYi8w1FtoK3Im7/cwIDAQABo2Ew
XzAdBgNVHQ4EFgQUdl+HXullkjaAS02+Es07DHWO230wPgYDVR0RBDcwNYINaWRw
LnFtdS5hYy51a4YkaHR0cHM6Ly9pZHAucW11LmFjLnVrL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQBi0qp6mORG4KC3dI2HjH35OuHs1NjO44y0Lo76
BBDlDfrDxxMm0LniYXmmNVHIjhshDcnpMUPsyoDEE3wieLxwEp0QLmg44LYmB6YD
RF3hb3c3EtOs294StyzX3HBzmDbb0YfN6nhLMd2euOB3EYZpLoJzYoy1luIs/KQm
pX+c3pqWsgkqGHBd4s6G5DGb8krulZrK9VKXb1HGqqqY17lKwavAzqE06MzhFRRo
GgN5wDmdOa/5B1kzbZ9W6/3JbMd+sKVMS93O1zI8fG8DfLq+4g5f6RY23JbD76ss
gYK+Lt/CJr+Opa1+bBQrBwkJGoWP8EfuKDyVYj44Wvutm45J
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIDCCAgigAwIBAgIVAKQI4LOpTw+gfDcBaUDIhqnlSKnDMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDWlkcC5xbXUuYWMudWswHhcNMTUwODI1MTMyNTUzWhcN
MzUwODI1MTMyNTUzWjAYMRYwFAYDVQQDDA1pZHAucW11LmFjLnVrMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BfAJesvYBMEHgDojaV+sTJ1HbsCXYYy
HQeuctNHxMHROrO4dh9fPrILsNyX3u94ub+OZiV/GE5Tlb1rni09BCOWG4Svq1vR
YUaZC9FvQo+vMNPR86m6eJbnMDCvi2IOFKcGcdjQIGS2VfA6H0WwRPR3IRYqygOF
+KC/lKLcIyjlKCJB21k12GITnn1tsy6y0Ylg2Ets031eUhK5cpEMR70IVtnJSYyn
3yYtk8FA517oY/dUaWxCst45ZvU10e5/lue9DO+JVXLXYnr8c0t6bTebpaBXVCKF
mq2sGnoE2nSxMhF9vDx5Tw5QE3R7hwoW0z2s6lIiiD58JAjikkoR3wIDAQABo2Ew
XzAdBgNVHQ4EFgQUzWcVUZGHqt8uFsmoKsB0xxhz2cgwPgYDVR0RBDcwNYINaWRw
LnFtdS5hYy51a4YkaHR0cHM6Ly9pZHAucW11LmFjLnVrL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQAPjIxhzi2FrZtkC734nd0tBZ0e8Alub1o7XMAK
NZbBZVAz4pfEIA55PhIS/a43SD6N46DPX/Ufx3AKZZEc7y16xnJTpIZczot9sAzw
HNQpneDehvS13eE7LPJ/XBND5Gwelz6rvX0dgsmA7SvNnHgp2yjVWyoswC99zf4U
UONrG0m1HRS8bILFSFYwAEsQbQxlZvRwApWKvUDIFmeBke5wuxCzb4dd/zK7H1X9
cjRpce3uDuOhKGQtmMHmig3dd72nJeHUoDY1QzQc4nw1IciJyJ6r3LzScy+GpSje
k4A44yA3kIp6HlqiHqF23koUpogpejP3TauQB3gGJQaVeLti
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib2.qmu.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib2.qmu.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
