<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://login.insa-lyon.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">insa-lyon.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at login.insa-lyon.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at login.insa-lyon.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://login.insa-lyon.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.insa-lyon.fr/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.insa-lyon.fr/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.insa-lyon.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.insa-lyon.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.insa-lyon.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.insa-lyon.fr/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.insa-lyon.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.insa-lyon.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.insa-lyon.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.insa-lyon.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">insa-lyon.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDNDCCAhygAwIBAgIVAIAmPPZsOwGTUNK3IULRe7smOk1xMA0GCSqGSIb3DQEB
CwUAMB0xGzAZBgNVBAMMEmxvZ2luLmluc2EtbHlvbi5mcjAeFw0xNjEyMDkxMzA5
MzFaFw0zNjEyMDkxMzA5MzFaMB0xGzAZBgNVBAMMEmxvZ2luLmluc2EtbHlvbi5m
cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMg2Hh6cRoMBxFh864TA
9I2WkdBzLI/o8dfpzsCDEqqY6WDGfvArvQFJXMBEcdZxailcS4rkgp8G0rjnJTRg
SUKOFBPOxYrkvOv2eZdk5TAg6fsAws6FQp313tmdWASfv3dHy5dyr9RWNQxLq2kw
adfXu1vZtxlgf9JnwWzaP4thf0yfLA5FENzk0XWr2a6IzemaoaM4RwoxNWxyb2LW
b9hJuzXi3mJVH0MI8vrlX92N4z0BIboyutvNQzkU253LDvRjd1FTKJ2W3L2ibQ2V
6PPE5dl0VDudtOpGqjgnucUJLHtVL6yR/NEGgkZNslycyhUowN3ANLTjH1pG+PU9
5OcCAwEAAaNrMGkwHQYDVR0OBBYEFOT9/t5XSB1kd9Cpv0cFQe9F6zaKMEgGA1Ud
EQRBMD+CEmxvZ2luLmluc2EtbHlvbi5mcoYpaHR0cHM6Ly9sb2dpbi5pbnNhLWx5
b24uZnIvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQADggEBAFxeEQmPSXkj
Vxvm2ag1TVRbQx+qvqBEBU9ha27F/UMqdApIdlgYhj9VEG0PGx91fcYI5Bw6uWZe
ds9UaxPLRfrNtaLJo7zM/rEz84Adl1gAULtj4N3CLxsrynjtyPHnRq09CJYON7Ve
Es541XlqQeyr8G9hT/zPuG7fifPolV7TWi3gY8l2SQrtQIxMgDRuw8TwnEpxB6Il
znBkWY0+HAG5+Ot8wAI0hpx7/GN8ifQxlXwQxnJ5fHTgWQeG76hrt3puFEDzbFSc
fr9CDGkxRSySHg8I+ASrt07ygzRksNqek2aI1cJx9XVO3L74QwA9KXJDvVB5I8mS
GI0eDvpKqHA=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.insa-lyon.fr/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.insa-lyon.fr/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
