<!-- Az. shib1 -->
<EntityDescriptor entityID="https://shibboleth.staffs.ac.uk/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">staffs.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://shibboleth.staffs.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" 
                                   index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://shibboleth.staffs.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://shibboleth.staffs.ac.uk/idp/profile/Shibboleth/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://shibboleth.staffs.ac.uk/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://shibboleth.staffs.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://shibboleth.staffs.ac.uk/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">staffs.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://shibboleth.staffs.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://shibboleth.staffs.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>

    <!-- SP metadata for SAML proxy -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
  
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
  
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.staffs.ac.uk/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
    
</EntityDescriptor>
