<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.ens-lyon.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ens-lyon.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.ens-lyon.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.ens-lyon.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.ens-lyon.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ens-lyon.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ens-lyon.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ens-lyon.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ens-lyon.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ens-lyon.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ens-lyon.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.ens-lyon.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ens-lyon.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ens-lyon.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ens-lyon.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ens-lyon.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJzCCAg+gAwIBAgIUGBpfqVj6xj6QhVvUQoQH1IhBm8UwDQYJKoZIhvcNAQEL
BQAwGjEYMBYGA1UEAwwPaWRwLmVucy1seW9uLmZyMB4XDTE1MTIwMjEwMTMxNVoX
DTM1MTIwMjEwMTMxNVowGjEYMBYGA1UEAwwPaWRwLmVucy1seW9uLmZyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAm+Zv4tv8mY8TlhCv5/kaAY6xtQ
sB4jZGhNtmMZRiEc8FDhjwHMOeiRoXX7zPhclbhECLgvOFgTthCV3GFMBCfNXWVP
NjncN1PnCuky0fGQu39G1cpB+hWrBIHJ+R6vmLxTX2qozItuq5VKji4H4VSd/kTp
vNMySyxhc7aGbZfsB/QE1zJJsYQeFFbv4n6x7dOGwVy/+tqJ4UrQSiT2LqylGkaS
P5y8SXIA0Sye7tBaZNgLe53W/G09A8EkLJggLOSA7b567j8Acq6Ovggp0OKihqBL
UM3tQPEPgyok7FLZxoiGKnOjmrzzDSfqUu+teDGD0pvMXMnAt9sTGbsSgQIDAQAB
o2UwYzAdBgNVHQ4EFgQUAFfQTEm2xsDzzK3ccRiBkromMM4wQgYDVR0RBDswOYIP
aWRwLmVucy1seW9uLmZyhiZodHRwczovL2lkcC5lbnMtbHlvbi5mci9pZHAvc2hp
YmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAY4AlcmZKuazPQP1NZuP3xVhh3uZ2
Vc4tOvRTkByrZ2C07tYxtAcihrcoaWcHdjujn3/yv6KYc2aaTvDSWThEXiZAvIkf
YbKth1l5t4Sl2M1hUgcOsG2oBmEoThoivyjcc3h09lRHn6x7ycemAIzQMT57jjL0
1Z9Q9agt7E+mhlJFjtP1vM/Lpl8cjpvMz/AG5lnhAKfSAF2FuhXRbUBSqsByj51X
f8H0R5FSDhH+3N1t9ZIBa8FXyM/aSMwFVGuiYobcLJStSwsjRLw3ayXMFL7dbWGS
vCln859PYv4ZnKwJQeu0CWN4oXjpSpDa/qKDpEh5vJFI4YN1d1k5GsCwCA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ens-lyon.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ens-lyon.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
