<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="67">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">crous-strasbourg.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at auth.crous-strasbourg.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at auth.crous-strasbourg.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://auth.crous-strasbourg.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHjCCAgagAwIBAgIUG5N+CrWFzEHX4x86m2gLImagxVowDQYJKoZIhvcNAQEL
BQAwIzEhMB8GA1UEAwwYYXV0aC5jcm91cy1zdHJhc2JvdXJnLmZyMB4XDTI1MTIx
NjE0MzYwMFoXDTQ1MTIxNjE0MzYwMFowIzEhMB8GA1UEAwwYYXV0aC5jcm91cy1z
dHJhc2JvdXJnLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/q7
4BqD8SBlBRgXELf9UD3mRov6CRYrvh5EqqROfrlgRxVnoqAFDfoU2Z7qdDRNjFDX
4kcQA4Y34OD/3xvl6Navcdd9IrXPjPJwbEI47nAFMY1RqT6kPFDoKfNgm6JDFyqm
0u5obB5alR/1xLj9gE5H6Tu4g4YjBF1xE3V335PNNri3YHeYpE6g66kMjb9n6Moj
i2CCbSy4flVTCr/CIKdnx06stWyR4zxi2nVlm1LkbPauTNFpddURL7L23J+azo+j
OkDbH7DJQdPVm4JPazVZjsznWVBeNP3860ykD9ePlCx5nXsM5WMzX/jUUtZ7Lo98
6AFmpx32JSr3gsdYRQIDAQABo0owSDAdBgNVHQ4EFgQUDexbHTDRaDZylSSWAJek
NfvlNlwwJwYDVR0RBCAwHoIYYXV0aC5jcm91cy1zdHJhc2JvdXJnLmZyhgI2NzAN
BgkqhkiG9w0BAQsFAAOCAQEAaGJOs9Pvgvs/Di/l67McobCLSfp4gvZ5vMpyxwEU
BqDCEr9hsFRGOF603Fcy0/DhUQ9xkgF8iuuCu4lynGhN2+ZTN9hwtQ31RVNHuPks
/gkLV4ITIZ8pD8YU1Bgl7wU2Wu1EdYBRO4wonJGEYdOeRlojwpFx5QklLHxEIdUq
NDz5Ir5ApGhQv7L8F2pl/D0LBZRtntStjb9ax7zAvmXXN3g+aGI6R1XtAr8IhG9O
MqH8uc7jXNivP9mAMAByoa1oK5VXz6BLAA56Cgx702Ac4KoGyn53WacJCvl/X+CQ
md341uV/L6C+PxPr5UuorxiY5dtbR0wCO+ldTEEQejphCg==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHzCCAgegAwIBAgIVAPK1aeuMSoTqSAoUbpFN1Gzn1lVlMA0GCSqGSIb3DQEB
CwUAMCMxITAfBgNVBAMMGGF1dGguY3JvdXMtc3RyYXNib3VyZy5mcjAeFw0yNTEy
MTYxNDM2MDFaFw00NTEyMTYxNDM2MDFaMCMxITAfBgNVBAMMGGF1dGguY3JvdXMt
c3RyYXNib3VyZy5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrC
dSSGI7Lj8iYp8Dyf1ZD9nECjQzIJTWGHu5itXI9EIyPp9vARjB+YHNp2YL7qQblN
wPCr8kaVKPkwOfImeiBlrYVrUv3dGCKqMX2JU0psI8RbrSUYZFPIkOXRSvUnJxEC
cN2WwCMOZiZAAuIzRZnsLD68RtPgT8/2OLSL8GB4BLmQQ7ZbkRqPDxsA0EC9pA7O
umny2t4EQSzurzyYOyQ3dGb5Q5uieRCYPybWJPw8s3XSaVLZpIuncBuaV6kbpTC9
g11tOiAZxfbLSEnC9+Z0zqypyBqebZM40S9lLi+eF5tg+y5xjkTip715eOsoUzet
HD5ujvtX3b7UMAKJ/00CAwEAAaNKMEgwHQYDVR0OBBYEFIYdZQIXVFQeh5ufK6YW
HK5iTugqMCcGA1UdEQQgMB6CGGF1dGguY3JvdXMtc3RyYXNib3VyZy5mcoYCNjcw
DQYJKoZIhvcNAQELBQADggEBADwaP7/vTIdMTnNPME0dCVod6nCHF1mEOYUTNIyy
mCm2c5HREaB5IdDdn//l38qy6cKLBHhpjDthSuEXtFLIF+mqDDuSDWfssOVS9D1B
cWwShAS25usHHGsLd+cJCyuAyHjAID1D1di8Oly9woTQqz1kBwTGlL3HEjHio65i
NEOTtz1hPmS/fzmsjNk+WDLm4mQwdtkCXpgrLD+mw3oS2z2QHxMsQv39kJidWwxL
3UgQ3a5e6iDgZ8e8hxBa8kwmS05iFoVe1shty3YVAft3yNf2NCbAC/dkMqZGR8Yv
T0mN5KEQrBhbXDAiii1cXEVBb0mzStlfmf9tEF1MJhKqvY4=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.crous-strasbourg.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.crous-strasbourg.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.crous-strasbourg.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.crous-strasbourg.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://auth.crous-strasbourg.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.crous-strasbourg.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://auth.crous-strasbourg.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.crous-strasbourg.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://auth.crous-strasbourg.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.crous-strasbourg.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">crous-strasbourg.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHzCCAgegAwIBAgIVAPK1aeuMSoTqSAoUbpFN1Gzn1lVlMA0GCSqGSIb3DQEB
CwUAMCMxITAfBgNVBAMMGGF1dGguY3JvdXMtc3RyYXNib3VyZy5mcjAeFw0yNTEy
MTYxNDM2MDFaFw00NTEyMTYxNDM2MDFaMCMxITAfBgNVBAMMGGF1dGguY3JvdXMt
c3RyYXNib3VyZy5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKrC
dSSGI7Lj8iYp8Dyf1ZD9nECjQzIJTWGHu5itXI9EIyPp9vARjB+YHNp2YL7qQblN
wPCr8kaVKPkwOfImeiBlrYVrUv3dGCKqMX2JU0psI8RbrSUYZFPIkOXRSvUnJxEC
cN2WwCMOZiZAAuIzRZnsLD68RtPgT8/2OLSL8GB4BLmQQ7ZbkRqPDxsA0EC9pA7O
umny2t4EQSzurzyYOyQ3dGb5Q5uieRCYPybWJPw8s3XSaVLZpIuncBuaV6kbpTC9
g11tOiAZxfbLSEnC9+Z0zqypyBqebZM40S9lLi+eF5tg+y5xjkTip715eOsoUzet
HD5ujvtX3b7UMAKJ/00CAwEAAaNKMEgwHQYDVR0OBBYEFIYdZQIXVFQeh5ufK6YW
HK5iTugqMCcGA1UdEQQgMB6CGGF1dGguY3JvdXMtc3RyYXNib3VyZy5mcoYCNjcw
DQYJKoZIhvcNAQELBQADggEBADwaP7/vTIdMTnNPME0dCVod6nCHF1mEOYUTNIyy
mCm2c5HREaB5IdDdn//l38qy6cKLBHhpjDthSuEXtFLIF+mqDDuSDWfssOVS9D1B
cWwShAS25usHHGsLd+cJCyuAyHjAID1D1di8Oly9woTQqz1kBwTGlL3HEjHio65i
NEOTtz1hPmS/fzmsjNk+WDLm4mQwdtkCXpgrLD+mw3oS2z2QHxMsQv39kJidWwxL
3UgQ3a5e6iDgZ8e8hxBa8kwmS05iFoVe1shty3YVAft3yNf2NCbAC/dkMqZGR8Yv
T0mN5KEQrBhbXDAiii1cXEVBb0mzStlfmf9tEF1MJhKqvY4=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.crous-strasbourg.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.crous-strasbourg.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
