<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.rouen.archi.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">rouen.archi.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.rouen.archi.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.rouen.archi.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.rouen.archi.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.rouen.archi.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.rouen.archi.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.rouen.archi.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.rouen.archi.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.rouen.archi.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.rouen.archi.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.rouen.archi.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.rouen.archi.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.rouen.archi.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.rouen.archi.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">rouen.archi.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDNDCCAhygAwIBAgIVAOpcKlPaoWGV9/3xzJfGI/1s3Cc8MA0GCSqGSIb3DQEB
CwUAMB0xGzAZBgNVBAMMEmlkcC5yb3Vlbi5hcmNoaS5mcjAeFw0xNjA2MjAxNTAz
MDlaFw0zNjA2MjAxNTAzMDlaMB0xGzAZBgNVBAMMEmlkcC5yb3Vlbi5hcmNoaS5m
cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUeQtyeTRB/W+STVQXA
qmBLhNkcJ7WQVKQwDJt7lCDMBc1Sj2a64RreSGJUWDf9OJoVoMqR+otNyndVt0kl
MHNS8siR3M8ZLvtzi4Onyzp5U3XY9ZBYguDAjs2UmQgN/cWpu2r/DwLwQzctsFXD
Guy7vek3623mK5bLeQfsHAbBMUcHMLVcJyqqwSdMK7S3HUh1d2MQYy11K6bTgx0p
dj+nUB+1rKpDkPiEIm1Gx8VRBMzBddqwCyBdAbiVmESiVziZ2vahOuVaA/IiECW6
Ami4UPL/K2geocAejhQqming8JGb8m28c15laR4eLp8uO0xiTiuQ2mykPcDGiquH
FEECAwEAAaNrMGkwHQYDVR0OBBYEFKU53w//uUG6Ge5g5wRcYUabQE16MEgGA1Ud
EQRBMD+CEmlkcC5yb3Vlbi5hcmNoaS5mcoYpaHR0cHM6Ly9pZHAucm91ZW4uYXJj
aGkuZnIvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQADggEBAF1BvMhwO9zt
N0UyG0tsSE7fAhFXieIJO5aF4o3d7aAwldv7gHxElPqo0PisBlKzlv8sdzy91alY
lwcLWl2Lb4gIYnQcB4Lj2jRPEIAFbAK1Zm2BA2rNpj488Z0/6cDzSyuaNfdB4gB2
oVdpVE7KlHRd458o1ctORVKorNRwICE/Wgi/S9sbVv7s+OyCmDR9s5BxfkoUXiBL
cMsJCjfLwmi3OFWRK7TfdUCP3ZN1twQCbTmfQSYxeyvqoX5LuciwwFTGno5t7J1J
mxwGp26q5BENfBYcnPK7D5Y37O9Qxr09ZZ0qFrXNcaBiZiK5ZHwPHZv6EmlGJWpJ
HYlZSDNrOJU=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.rouen.archi.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.rouen.archi.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
