<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.rutc.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">rutc.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.rutc.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.rutc.ac.uk</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.rutc.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUC9pCXHe++2lqC3BIxeepELebkIwwDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOaWRwLnJ1dGMuYWMudWswHhcNMTYwNzExMTM1MTQzWhcN
MzYwNzExMTM1MTQzWjAZMRcwFQYDVQQDDA5pZHAucnV0Yy5hYy51azCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAIYIkP1eO1siX3RfSLqzBAHisceb7ArU
PNKNjcrHatba8yDZv//0z0Jj2JTAvxu9mIRAyYZCKKphZy48Wxvon6Y4TNKv4ZCe
1y5ydLFIBoZSiPOUfdYLbCZhsAVGgVkVtcilyGNEA3lw6j4WIu4hscLw/mL9CLPj
ei3vegay/YpvapnYrYEkbkm5WKWF24+nkQFx8Q51HQ1Hfg5dZ3PxG7Oklyb2AAaw
99OaZygohElIhJXmteqTcyHnfvsuvGn858pyXO/+BfbhLfhi9+dwxlNjHGeeKtM+
s/yl9eyypL+8IM6QvShMteOKC5sASBtB7HZFOGDhcsPy+UVf2Si2vUMCAwEAAaNj
MGEwHQYDVR0OBBYEFK0cy+vs9+REdQmM1OF1dOSmvNW8MEAGA1UdEQQ5MDeCDmlk
cC5ydXRjLmFjLnVrhiVodHRwczovL2lkcC5ydXRjLmFjLnVrL2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQAgLWbN936JHdn5vbfXCPhkON8i5i1OAEwM
9XQWCCMmKZB5yv1hB4KMdtC7tPk7wM7GYn4lBraFIfQvQGXX/EqGQ9vNxw8/eM6E
IyJDoIw6OAd2OtYaiTBtEPqfR2TfvexeubhGNOyCHp5ZeAVbzn+7WMZsK9GhON32
VYTsJETAhUCDbmADQf8Pav7AzVV9MjzyIFRugb0dfqAFRKI+dwhvMcZxnzC0p5Da
a0ijIXO8/Zm63MaEk1naKw3v3kw3RRYiwH/bSRb0T32w4dtD0/5zFVQleeDBLQfn
TK9vHGqrXsPNGNDCxV8kkAZZnemk1adt6M0SxVhUaZIhmPyUNGz0
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVAJhFdkJMu3VjL96PsBvyUZTDdU/PMA0GCSqGSIb3DQEB
CwUAMBkxFzAVBgNVBAMMDmlkcC5ydXRjLmFjLnVrMB4XDTE2MDcxMTEzNTE0NFoX
DTM2MDcxMTEzNTE0NFowGTEXMBUGA1UEAwwOaWRwLnJ1dGMuYWMudWswggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/j213XwpGV0Pv4P3LQwDJVs1+TyE
1ybXxw2O2sOyLgLlmHPaZCBeq7JYlSzitwcdy+z5jQUowC+/YXl6H508ww0NIss5
ePFsTqNShpcHZIOnnj2+dSktiNFkEglm6nzvbmSuXcBgAxMjIJP0OBsJFelsW24v
C1a8edSUZrYykq3JJuEeZDetz1IV9AoBTeq9CUu9k3E8mtDgzfTMT8raLZDsIQfM
yM8SAJ6tTmNlGacQmBUhiinay0nWAWZSTO0mQx5HCY4ciSdH6mar1TSQ/aIwLTZV
Incc2AV4q2+mdA14+pK815bL1yKU7jGGXkTUSXJvBTPc+F8znoddrcopAgMBAAGj
YzBhMB0GA1UdDgQWBBQ9q2k8IloqTEiwGuZVXqbV1ujLwTBABgNVHREEOTA3gg5p
ZHAucnV0Yy5hYy51a4YlaHR0cHM6Ly9pZHAucnV0Yy5hYy51ay9pZHAvc2hpYmJv
bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAUPIdRNv/RbhEn5A05faZ+P5TElZcWJZU
1YFTN/fA2PffHtemcMNuGexqhH3Ohe0i2TNIJzYmHTDRf9R1hxE3OZASCeyu01K6
M9RLNTopvZwtoWIttonlCC2NhHpVWORaLEBy701Ec7pHqnSzzpDTnj8RQkSpuJWv
q/5V2VbgtkSPSqhP9ZNeCClZMPljAHE+vG5W1bu2Y8gKT3XDcZoU7xcDljULCWYw
EB2bqGSzmFzDixu2p0K+TVRAS1+++LzWwqkzMD+zEQL5fApepXEOQOPFFVto0rOI
NOwPjZAfnJCRK8Lb/oUadBc3ZbrNgjbwdIYAYGM5Fyyi8KyQmNl9vA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.rutc.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.rutc.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.rutc.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.rutc.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.rutc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.rutc.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.rutc.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.rutc.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.rutc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.rutc.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">rutc.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUerwDzOOAFx9ry3KfbxniSSXemZIwDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOaWRwLnJ1dGMuYWMudWswHhcNMTYwNzExMTM1MTQ0WhcN
MzYwNzExMTM1MTQ0WjAZMRcwFQYDVQQDDA5pZHAucnV0Yy5hYy51azCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhscw6Ym7UxqpYtXJKukDZx1pTJ7KSf
IJHP2fnczOrsskiGo7131vpScfI617jUVUUL+FlMSpeHHzkIsyYdxufvsIV1ZcDq
idVMTQiubIE70wj6/BiFcOtG2vniODnu6EaNebmSXfOnHjhU5iAYWUMnrj72qfTZ
UQMevvYSMf8nIAl8OHB67XG/+yzsotg9UaG6MA/WuZG5RkQZf8ET0+CFiuZB2mDM
W5YWPT/w97G3cDoPoHYkubl66z77gFGUjCojer7DCqcWVZjyCuh0u1DVZzSGnUon
WlGd3NVWHCuP79Cop76BbLybi5ukCLDjdWDTY7LMgjI9cq3h1bFNXeMCAwEAAaNj
MGEwHQYDVR0OBBYEFJh4KWg2NT+qxnPHi+PRd2RYR3JwMEAGA1UdEQQ5MDeCDmlk
cC5ydXRjLmFjLnVrhiVodHRwczovL2lkcC5ydXRjLmFjLnVrL2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQDFPh+5VAnCWt+99sjhclv0yP6UNm8CVf78
2jGNrhl5AdoShUXZWX2HpmLx8ExzYnkErbYqbWPT27Y3i1Hawy5ySBX0AlcRRraE
eyhw7OGLDHRac9A269onGpNIMeCGT5YtW+IzQVSmrVoDudJzAaSH8iuZmOaE5Ghy
6sS+UAQPa5IGoRvzzdUZiFkIBYTFCvRnXOfmaX9mhiHw4XynIlQVDZxY23QKp6n9
GhvEi9+V+RNLWNuNb7OJk6S8am1HS9vhc5fXQbwnlZMigrm9kwJHkx3Wq94ojMZ0
4ujmsjBNp8ynfgNbssevNssZNHHkNiAtv6t1p1dbjtBc+HedM11l
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.rutc.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.rutc.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
