<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shib3.mines-ales.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">mines-ales.fr</shibmd:Scope>
            <shibmd:Scope regexp="false">mines-ales.org</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at shib3.mines-ales.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at shib3.mines-ales.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://shib3.mines-ales.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib3.mines-ales.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib3.mines-ales.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib3.mines-ales.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib3.mines-ales.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib3.mines-ales.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib3.mines-ales.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib3.mines-ales.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib3.mines-ales.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib3.mines-ales.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib3.mines-ales.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">mines-ales.fr</shibmd:Scope>
            <shibmd:Scope regexp="false">mines-ales.org</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDODCCAiCgAwIBAgIVALc1fYZfXUM/+K51hgPh4AnFFfRwMA0GCSqGSIb3DQEB
CwUAMB4xHDAaBgNVBAMME3NoaWIzLm1pbmVzLWFsZXMuZnIwHhcNMTcwNTA5MDkw
MTAzWhcNMzcwNTA5MDkwMTAzWjAeMRwwGgYDVQQDDBNzaGliMy5taW5lcy1hbGVz
LmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZWrH+/8OOwqfFt
a05JIbdRQhrOqFxGg8nOC/Efb9M3IXHITKXNiCsHgjnaCKd4sJJqOdvYLK1OalHV
eSB0v3QEaRu8WnShV5umnx7mVzSa4YW8H+6Ztb3BQmMlyOjcmxBPQc9b/EnT8Lqe
s9YNZxDpl1YLaJYaauqhODcR53YZsvkcWSalUm+s2wdf6tssjDW4lzRgU+yu30K6
6RQ5bLBAhIT6e/RCakXoYS3HBKoyPIpUvYNU76IRCE3n3hjTqiCjzp7XxNmAwKSc
rXOWUgVIBWlGxqUJabTlJgg36R6q71+9CWla1VJpnZUBKRJkBqH/Bczvas9oCtzk
8POJeQIDAQABo20wazAdBgNVHQ4EFgQUa/PlHp9/TyYPxRm4JTQ0+RhtSZAwSgYD
VR0RBEMwQYITc2hpYjMubWluZXMtYWxlcy5mcoYqaHR0cHM6Ly9zaGliMy5taW5l
cy1hbGVzLmZyL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQB93RpP
+KdDMv4loix3SeXjT97uHwQRJpp7trAFL2BR5h5YLSTlzx3fnEstph9SH48+x5hM
tiJkIAJNbYnZa109JQuP+CQl0RtHyJngF7+DYP4upQRwtxxGp70lA9q4ihtE4O/5
3OKlK1ZqXrlk6U2serO5+WC9lZRL029iSa6W4n2zE4Ehj8P7RusqtNMTE2eG0+Qo
nngUmST4Dgd+UjIq4IkOfJi7wEc6+BK9ODl+/vIQJCuiqaSS/z20JAfoIiB6fEjQ
dM/L468C1jES7kWwNbjuS/8qzzpnyPjd0eHYZDHv3IF9ppLfTvW6C/R/4iVV9snY
WW87P26oWZMcxVSP
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib3.mines-ales.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib3.mines-ales.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
