<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shibboleth.trincoll.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0" errorURL="https://shibboleth.trincoll.edu/error.html?ts=ERRORURL_TS&amp;error=ERRORURL_CODE&amp;ctx=ERRORURL_CTX&amp;rp=ERRORURL_RP">

        <Extensions>
            <shibmd:Scope regexp="false">trincoll.edu</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Trinity College Shibboleth IdP</mdui:DisplayName>
                <mdui:Description xml:lang="en">Trinity College Shibboleth IdP</mdui:Description>
                <mdui:Logo height="44" width="253">https://shibboleth.trincoll.edu/idp/images/Trinity_College.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.trincoll.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.trincoll.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.trincoll.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.trincoll.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.trincoll.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.trincoll.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.trincoll.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.trincoll.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.trincoll.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.trincoll.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">trincoll.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.trincoll.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.trincoll.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
