<EntityDescriptor entityID="https://shib2idp.rgu.ac.uk/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">rgu.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://shib2idp.rgu.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" 
                                   index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://shib2idp.rgu.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://shiblogin.rgu.ac.uk/idp/profile/Shibboleth/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://shiblogin.rgu.ac.uk/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://shiblogin.rgu.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://shiblogin.rgu.ac.uk/idp/profile/SAML2/Redirect/SSO" />
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib2idp.rgu.ac.uk/emailAddress=its-sys@rgu.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib2idp.rgu.ac.uk/emailAddress=its-sys@rgu.ac.uk/idp/profile/SAML2/POST/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib2idp.rgu.ac.uk/emailAddress=its-sys@rgu.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib2idp.rgu.ac.uk/emailAddress=its-sys@rgu.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">rgu.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://shib2idp.rgu.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://shib2idp.rgu.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>

    <!-- SP metadata for SAML proxy -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
  
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIEYDCCA0igAwIBAgIJANG+SOhVkyPLMA0GCSqGSIb3DQEBCwUAMIGwMQswCQYD
VQQGEwJHQjEWMBQGA1UECBMNQWJlcmRlZW5zaGlyZTERMA8GA1UEBxMIQWJlcmRl
ZW4xITAfBgNVBAoTGFJvYmVydCBHb3Jkb24gVW5pdmVyc2l0eTEUMBIGA1UECxML
SVQgU2VydmljZXMxGzAZBgNVBAMTEnNoaWIyaWRwLnJndS5hYy51azEgMB4GCSqG
SIb3DQEJARYRaXRzLXN5c0ByZ3UuYWMudWswHhcNMTUwNzAxMDY1OTQzWhcNMjUw
NjI4MDY1OTQzWjCBsDELMAkGA1UEBhMCR0IxFjAUBgNVBAgTDUFiZXJkZWVuc2hp
cmUxETAPBgNVBAcTCEFiZXJkZWVuMSEwHwYDVQQKExhSb2JlcnQgR29yZG9uIFVu
aXZlcnNpdHkxFDASBgNVBAsTC0lUIFNlcnZpY2VzMRswGQYDVQQDExJzaGliMmlk
cC5yZ3UuYWMudWsxIDAeBgkqhkiG9w0BCQEWEWl0cy1zeXNAcmd1LmFjLnVrMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlnIv3WseSau1bSwKYgWnl3w
W4A510yAe4EVHxCDXPbblHFmZwjN3F1Elw56e1LlSwhS4zS25R/cfjrH4NPqsTqD
5TWHmmTaduonCdzVhqJ9do9hLcFrfkCSGwJGswKGutbphOvcG2tvRCt/BBtxf5yu
I2D/cZ1jwJoURJe1X+r2d0HyjU23wlG9ImY8VLHTLjndQAPWddnvSySTrCNagfDB
KQU8vWEQomm4griv1CFs205eqWBriZjoyt/i8q3XY+smafZ1sRR90YoidYGK0FbU
BiyOfsTgE++GBTXQzGPf+pIN5U8GD8PxgTNal6ncKps1hiquqQGlLCJ3pybMsQID
AQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVy
YXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUoPahtUqnvLSmYMgVnP2s16wxXpUw
HwYDVR0jBBgwFoAUoPahtUqnvLSmYMgVnP2s16wxXpUwDQYJKoZIhvcNAQELBQAD
ggEBAEsrmXShp2e+MEVSjpWYYTh2Yj45DBeHJVpBlJzkeb7UB1EViBa0O4DPojh0
PFjmkfCIAvoCQAF3BL8j92DL+ltQOWZ3bnUTePUrGzN6RAXC5Qcv8HzSM77t3Cm9
StUmTfcMp0Y5Ij7nHQdllzQND4nYp2OOhcWxn1cbPGHWl5tORBKVC3CacgY34H4g
nqpHZyD+ngZtpCdGUmqpndD5+H+l0s91nm00akyYxFuRCpm6c97Tf5BfADtAumVY
Xz2bbxGztusvVUYAr75X+daVeh+/9N9SEybqeOuk99VSHBDwwaVkFiul2LzZRi0V
XyNCrBFWNSC7s6MHLPcmlrG8YdY=
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
  
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shiblogin.rgu.ac.uk/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
    
</EntityDescriptor>
