<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.cardiffmet.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">cardiffmet.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.cardiffmet.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.cardiffmet.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.cardiffmet.ac.uk/idp/profile/SAML2/Redirect/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.cardiffmet.ac.uk/idp/profile/SAML2/POST/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.cardiffmet.ac.uk:8443/idp/profile/SAML2/SOAP/SLO" />
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.cardiffmet.ac.uk/idp/profile/Shibboleth/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.cardiffmet.ac.uk/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.cardiffmet.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.cardiffmet.ac.uk/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">cardiffmet.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.cardiffmet.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.cardiffmet.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>

    <!-- SP metadata for SAML proxy -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
  
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDPDCCAiSgAwIBAgIVAM/WrHuhoD12UZd9duSVXiTcAQKqMA0GCSqGSIb3DQEB
BQUAMB8xHTAbBgNVBAMMFGlkcC5jYXJkaWZmbWV0LmFjLnVrMB4XDTE0MTEyODE0
NTA1OFoXDTM0MTEyODE0NTA1OFowHzEdMBsGA1UEAwwUaWRwLmNhcmRpZmZtZXQu
YWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCibib8LKS+kWc/
4jFZaF5lJlCYKGc2M3h7Dzx7En9rOaP/4BnyRXmIfX0XQQ43Zl/M3TZ1V3lfOMl0
mS7qxiNP9tRR44Imj4tAlPGTL0/G6wKrRgZwT5Ya5Situ4uGSjRqlEXKp0WPX9DB
rV40f+n3amXbG6968QkBgMTVQoYSfPYPDeYvMkJgIBJ7fFEfoiUEMLbmApFvKAOF
fh3AyRIgIvNZGuhCmOurAxrK83NQf8GxYCrxWVYBDxy2zM+ieqIQfXq7vKPwRj0i
I93TqeH3tW+NNXxp3L2Vhqp6QjNwTJuQoq8CyeFAppZ3R7I76gS0a/G65BnDexXr
s35piiX3AgMBAAGjbzBtMB0GA1UdDgQWBBRhlIKvVhsJq55eRmziUxsfKVzMkjBM
BgNVHREERTBDghRpZHAuY2FyZGlmZm1ldC5hYy51a4YraHR0cHM6Ly9pZHAuY2Fy
ZGlmZm1ldC5hYy51ay9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQUFAAOCAQEA
V2tNA0SAzHCAXhPCbT2SAMgB4bSGM51OLwKn+tJNC5gasFq62kERnXcRbl/Ii5VZ
Iu1t8ml0jTLBjiFYCFtq4uGEMeDPPxKNUNEPkWfIqCq693CrSHc1M5Lso4CmhiCK
CAnz0V1oVkgyBW9e7WnDzRGvVN12hTGmS33ZINOamwmQErUbeEdRnlB7fa3BZHB9
kdW3SZRhb7CynWQoB6byYyBBWKfTuD1qScRQlIFhOscGX3qxBYBIqwzsJkd4qXPK
3qrSFwHAyC6nXz1MLyanluHTBD+41hABSHxu5pwWhD8xXbFS0dA+8qJwagPvuO8q
JA5KMQm1uzCs13HbQj79Nw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
  
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.cardiffmet.ac.uk/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
    
</EntityDescriptor>
