<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="34">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">crous-montpellier.com</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp2.crous-montpellier.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp2.crous-montpellier.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp2.crous-montpellier.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp2.crous-montpellier.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp2.crous-montpellier.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp2.crous-montpellier.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp2.crous-montpellier.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp2.crous-montpellier.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp2.crous-montpellier.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp2.crous-montpellier.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp2.crous-montpellier.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp2.crous-montpellier.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp2.crous-montpellier.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">crous-montpellier.com</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDITCCAgmgAwIBAgIUGGXht4kiWdHYNnU4bqW4ie57IDowDQYJKoZIhvcNAQEL
BQAwJDEiMCAGA1UEAwwZaWRwMi5jcm91cy1tb250cGVsbGllci5mcjAeFw0yNTEy
MDQxMDAxMjlaFw00NTEyMDQxMDAxMjlaMCQxIjAgBgNVBAMMGWlkcDIuY3JvdXMt
bW9udHBlbGxpZXIuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE
oHDLdciszpwXxwCXSqw839rH0My5L8JROSoSZHu2HKELT7rgZdUtZTTMdj+Ybh++
UTjX2iDuK4XgDm3MiFsWRLRBl3X9QPL/k1gS6X+r3blx7fa8+LvDPM8Y1Q67BnLF
GU6Za+Z2QiWBIjPh+4E6264wTaXM0qIDPzyJGbcabZYwiYpKnbkqpbmtySmOmDIQ
AuWwNB87assGjHcK5Fi6DNqnb38OMHbs73ne67gCl0stx70BKQ88KsbhpeA7godZ
cWqtM0Spw4ukgJQv/ahi68XOBxxwfkOBmouHwfHEcqDLIIm0eLxHLJ02H9GKjkie
YdJBm+o2ro6N34jPikmBAgMBAAGjSzBJMB0GA1UdDgQWBBTOwjQNiqSn6eippmaf
5Dg08LUp6jAoBgNVHREEITAfghlpZHAyLmNyb3VzLW1vbnRwZWxsaWVyLmZyhgIz
NDANBgkqhkiG9w0BAQsFAAOCAQEAK52vcS7iZI7q2a0sIArg+Jlr8jQaeDg7sNFr
G/M3Z0yoOGgSpRzP1CRuP5N+LeNJ6VmtqwTvx8W5RjB6jMj53oxghOh+CqlEFtqB
H+6qUVrFVOPnEQx3D84C4vP0lXx78RQ3Dnu0R8uiFrV3JVlKjCUmOpX3a7EOX22n
0xF8k7wwuakK9nqf8LlFmdDtpyM0Nv4PD98PiR7SWoIr588MwMd1yGsfqa0T2srX
nipJcOagJ7/VNr71KiJ6UYHoC/RrIFyzw63fzJjGc7Sn5K8N99JjFbCUjwIGFOTc
vRajuuzPiVxSFhq+oM2xiuDds6ope/aP3otFbwbYVPO14M/ttw==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp2.crous-montpellier.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp2.crous-montpellier.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
