<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://shibboleth.hct.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hct.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.hct.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.hct.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.hct.ac.uk/idp/profile/SAML2/Redirect/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.hct.ac.uk/idp/profile/SAML2/POST/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.hct.ac.uk:8443/idp/profile/SAML2/SOAP/SLO" />
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.hct.ac.uk/idp/profile/Shibboleth/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.hct.ac.uk/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.hct.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.hct.ac.uk/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hct.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDdjCCAl4CCQDfc3alqzccaDANBgkqhkiG9w0BAQUFADB9MQswCQYDVQQGEwJH
QjERMA8GA1UECBMISGVyZWZvcmQxEzARBgNVBAcTCkZvbGx5IExhbmUxJzAlBgNV
BAoTHkhlcmVmb3JkIENvbGxlZ2Ugb2YgVGVjaG5vbG9neTEdMBsGA1UEAxMUc2hp
YmJvbGV0aC5oY3QuYWMudWswHhcNMTMwODI3MDkyNzIzWhcNMzMwODIyMDkyNzIz
WjB9MQswCQYDVQQGEwJHQjERMA8GA1UECBMISGVyZWZvcmQxEzARBgNVBAcTCkZv
bGx5IExhbmUxJzAlBgNVBAoTHkhlcmVmb3JkIENvbGxlZ2Ugb2YgVGVjaG5vbG9n
eTEdMBsGA1UEAxMUc2hpYmJvbGV0aC5oY3QuYWMudWswggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDJUQE1iW+9qx6vTJryX7gJC751rIfdGGscSfDDeU9h
ajg6x36EmcA8+c4FYCDQ74uPS7rjSAedaj4AyZTeowz9BWF6vj+YaF8myeVZ/RSt
vnc9YqOitKw9i1h9TGoQgR2t8PU+hp+47mtlyAT2WtD9DAHHteT7RjK+nwR3Q4iX
CjQrmZuwUUrAraFDjhQtTPopUYe082QcwirOqL2DBICET6RCsTdlNfXTKWNYLRU0
+Itxl1jX+o9bQaZdNeiiJD1f2+E0CCQmjB2Bovw3Lg3NQ1Namtn1u4t7VyWF7xs4
0N0r9K0lgiPaawL3AuXIlAxnP1EhsxMXv7nOZSB0qftZAgMBAAEwDQYJKoZIhvcN
AQEFBQADggEBADTTj8sJmX8p5EnhiLOWYFpKgkHrsmwEKYCwWzc+dLuH2DD8ixZ0
g2xPQ/OjhsU/kH0DH7DCgLyn8Y0hzeZSV2w+aeJqxgIZirTa1snIIsYIZGYKpSqm
LtF4rEYgkYUzZhU7Sg1F3/uuMZcxU30ZzI6LoBZiXjd4tlgwe7IB8WYNpm8wVq9w
zCsZ4C4OWoz56oDjCrFYo4PJlF9/ERp+XPVpQ1rbAwQsbZzKY22ypn8D1dkIz6Cm
c4KXdtRkv2kke2tteJOByaXt54uFj+NNJVic/IMJCVik7RFLyY+P5ut+1Gs90OIS
1smsVkYPhj+xDQZ/npJN8HkOaB0rPVtrDmg=
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.hct.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.hct.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
   <!-- SP metadata for SAML proxy -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
  
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
  
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.hct.ac.uk/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
 
</EntityDescriptor>
