<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="35">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">crous-rennes.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at auth.crous-rennes.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at auth.crous-rennes.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://auth.crous-rennes.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.crous-rennes.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.crous-rennes.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.crous-rennes.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.crous-rennes.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://auth.crous-rennes.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.crous-rennes.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://auth.crous-rennes.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.crous-rennes.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://auth.crous-rennes.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.crous-rennes.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">crous-rennes.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDEjCCAfqgAwIBAgIUako9eUzLaGNuNxPwlk1WtRxi/eswDQYJKoZIhvcNAQEL
BQAwHzEdMBsGA1UEAwwUYXV0aC5jcm91cy1yZW5uZXMuZnIwHhcNMjUxMjA4MDky
NTEwWhcNNDUxMjA4MDkyNTEwWjAfMR0wGwYDVQQDDBRhdXRoLmNyb3VzLXJlbm5l
cy5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKUaVhFw3fIUqUyJ
O1B/2ZJLo+fL7zY2/Oh44EFKei9RbHRBmqif/IzRNbz5PEDbxFSRCvYnTyYNIL+j
hBUArPvXL9DLMP54y5bDYs3909DAgy/SKRzQpcTFwO499LS7P9GHKY34dAdTiYDl
rcfSAkCpxO6iln8mu1XjaPmCZmhmO2EHekTTQbjZEVWnb5sSekPM/jrNQHsWMg6P
R2Do2MZ48sopGoXdqvaOfLp41mrFfVjiQXe2YABpMvF1ZhTPgInAGZLJqBpLxtu7
qL9sOnL7aYWVfBgyQW2R1QTVjvhokZ3qADb/5GBWCNwG3tpp6KxK7T3Jm6VFTrrC
Sleu/HMCAwEAAaNGMEQwHQYDVR0OBBYEFFCETcnMVfP3k+peyec0Bu3hQ+0LMCMG
A1UdEQQcMBqCFGF1dGguY3JvdXMtcmVubmVzLmZyhgIzNTANBgkqhkiG9w0BAQsF
AAOCAQEAN4IJ64IRDyVYwkFfg6LnydAM5mbAvFNYnGhxY7ebKwsDOylHa2xQT0oD
nEgnGyqbdjgwfb7KcVZ8iYobVz2VtQDQ91Ng69rwSvYI3AfpuZT0pWS1ihNchCkO
+fNzAglhU+B8+4YDFLRl2x6cFXaxaaHXh/2SsLCVS/SkC6rdFX8tWFEE7WAQXifd
9C7se8tLA7TMrFscAaDKlqkoDi2WDsn5FK9zUJ6AVy+dUuzyxq6+2e2UtQjNJYYN
2ec6ikM81o9cOiJIw0KIkPs9Q2dl5AWUExh0joh8MwahfMjIRp28P/JkpFiBbft4
Qumywpe40R4Y6oivp5ypwkjrpTfJcg==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDEzCCAfugAwIBAgIVAKmENZq3L04/txGprcJd/Kv/LtfBMA0GCSqGSIb3DQEB
CwUAMB8xHTAbBgNVBAMMFGF1dGguY3JvdXMtcmVubmVzLmZyMB4XDTI1MTIwODA5
MjUxMFoXDTQ1MTIwODA5MjUxMFowHzEdMBsGA1UEAwwUYXV0aC5jcm91cy1yZW5u
ZXMuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNtMyz4H9sfeJa
3xCfJWHetJMk8iRol7uatzFjPZMP878gag0dxdJKUvEF3lhmtQUuPy7w9sccyTxS
sbnNEeGCvqPHCkaU3J9O1P4epnWlwTqhwUaHZ3+GtPHjx/9kvugzHgwPwFOc7e8t
uxcMmz7DzwPtbyTuOnhTVoTu0obY7zfmjfDBsXZca6iWemTEbv1J1IAUUdMha90C
TvywMt16mO0sYjVMtFxbGFlP+ERkLGfq0XXit0u0iWdgTkCkDM4LF9fShJmHglup
MGBDBOhvqQMBEmoOvCKsnXG1J4y9MxxZVQ8TG3lYrdgLdpYeTpKtenuLvG4N7PqU
OjrgeemPAgMBAAGjRjBEMB0GA1UdDgQWBBQv9P+rwf/W0K7nneW3HYykyZ70zDAj
BgNVHREEHDAaghRhdXRoLmNyb3VzLXJlbm5lcy5mcoYCMzUwDQYJKoZIhvcNAQEL
BQADggEBAFhlHJHjCvKuHLZpHMbhLCGBuiSNIWJsYA0ODlJ66ACKBaAq4qbfOTnE
kNKCXHteNWqlVCkeXiCVJVW/EnDQgSmVDrFndQ4r5Oohm3tqqWeSyhawdVRIBkP+
At7LleEIfNIyrea+sx1mWtXafYpI25SXSlKtyqgajVk/QKNIOsh/zIRYd9jih1R8
V0j9gjcUfRqfPb0bgf64WqQ2e7lNEA+l7ZvRJfEnDLXNZ9Zn4Bb4hTfNu6ZV8h59
/VuTgkOpZnxQsRMHVBdIr9Iiagfdqk3w9nCkL5NAKjVNjjxZif2dCIU2XBKpx0JU
jCFPpunlILtyqlHLkeEE9PnS9XPcf7A=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://auth.crous-rennes.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.crous-rennes.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
