<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://ciboulette.abes.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">abes.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at ciboulette.abes.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at ciboulette.abes.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://ciboulette.abes.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDMzCCAhugAwIBAgIUYTIJLuVha+P64ORWejaRuJq5jX4wDQYJKoZIhvcNAQEL
BQAwHTEbMBkGA1UEAwwSY2lib3VsZXR0ZS5hYmVzLmZyMB4XDTE2MDcyODE2MTc0
M1oXDTM2MDcyODE2MTc0M1owHTEbMBkGA1UEAwwSY2lib3VsZXR0ZS5hYmVzLmZy
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iwaeku/h0SkSnuE/BAq
LY1EwBNT+nt4XgUSh77fR4E9w8SyuP6IIDuq9del1xgFyAEJ2KlErVv1BOsyiezr
LDTRi0qSD5nZWOBUA4FR1o7fUMtVYfQuVebpHBtZvCbR836Ae8/8wTVph0/3tgah
kfMIZlJzP19UU1O6zmKAdOQoTxhhcaNv71o+Nfkk2eFt5uz7VBdeH2TzEwhJGvbq
BkCgnjN6CSbExjwHdeJf2TrSoSKDw8Tw2QYUPGMplQJAgnuA7GZkI8DDGJGBIkgn
huyjDvFlEnjlfYeNZGJas6SJ9P0/01ZqGFUiXrXCxfqP+JOWFM9NXdz9M6raJpyN
EQIDAQABo2swaTAdBgNVHQ4EFgQUBl+JrhVrJ8ZPafsAh2EuwsFQazMwSAYDVR0R
BEEwP4ISY2lib3VsZXR0ZS5hYmVzLmZyhilodHRwczovL2NpYm91bGV0dGUuYWJl
cy5mci9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAQeQxGr0KzXXr
gsGG1NklFjIIDTYuDHCJLSJmOr0QnBPEdFaDiyIC5YZHs1z9yq/7nSXFySl5BsAS
7ff3UjmF72Jnabg9H8jldtZIcYp743/uwZc7o+amJq2TXLJyv4OmR8130LdUHET6
Q16FljnlWs5GS5CNANRbmJnhLCk0Gx0Rp/X0BmYSvrofUdQww+GK6ywkwi0EHcsY
QW0Jmb8QZRZZT0AbrKd16Sat1UlxfbUVLHtOT4sWpnJ/hTJofSNqnaxgrs7Wdlsb
fKvG2iQRmukgJCJf9c38GRRcrcfka0aBu1OnQyo1yblKW/5wd2aooNkYmfjpdZRb
trLVidkdUA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ciboulette.abes.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ciboulette.abes.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ciboulette.abes.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ciboulette.abes.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://ciboulette.abes.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ciboulette.abes.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://ciboulette.abes.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ciboulette.abes.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://ciboulette.abes.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ciboulette.abes.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">abes.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDMzCCAhugAwIBAgIUYTIJLuVha+P64ORWejaRuJq5jX4wDQYJKoZIhvcNAQEL
BQAwHTEbMBkGA1UEAwwSY2lib3VsZXR0ZS5hYmVzLmZyMB4XDTE2MDcyODE2MTc0
M1oXDTM2MDcyODE2MTc0M1owHTEbMBkGA1UEAwwSY2lib3VsZXR0ZS5hYmVzLmZy
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iwaeku/h0SkSnuE/BAq
LY1EwBNT+nt4XgUSh77fR4E9w8SyuP6IIDuq9del1xgFyAEJ2KlErVv1BOsyiezr
LDTRi0qSD5nZWOBUA4FR1o7fUMtVYfQuVebpHBtZvCbR836Ae8/8wTVph0/3tgah
kfMIZlJzP19UU1O6zmKAdOQoTxhhcaNv71o+Nfkk2eFt5uz7VBdeH2TzEwhJGvbq
BkCgnjN6CSbExjwHdeJf2TrSoSKDw8Tw2QYUPGMplQJAgnuA7GZkI8DDGJGBIkgn
huyjDvFlEnjlfYeNZGJas6SJ9P0/01ZqGFUiXrXCxfqP+JOWFM9NXdz9M6raJpyN
EQIDAQABo2swaTAdBgNVHQ4EFgQUBl+JrhVrJ8ZPafsAh2EuwsFQazMwSAYDVR0R
BEEwP4ISY2lib3VsZXR0ZS5hYmVzLmZyhilodHRwczovL2NpYm91bGV0dGUuYWJl
cy5mci9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAQeQxGr0KzXXr
gsGG1NklFjIIDTYuDHCJLSJmOr0QnBPEdFaDiyIC5YZHs1z9yq/7nSXFySl5BsAS
7ff3UjmF72Jnabg9H8jldtZIcYp743/uwZc7o+amJq2TXLJyv4OmR8130LdUHET6
Q16FljnlWs5GS5CNANRbmJnhLCk0Gx0Rp/X0BmYSvrofUdQww+GK6ywkwi0EHcsY
QW0Jmb8QZRZZT0AbrKd16Sat1UlxfbUVLHtOT4sWpnJ/hTJofSNqnaxgrs7Wdlsb
fKvG2iQRmukgJCJf9c38GRRcrcfka0aBu1OnQyo1yblKW/5wd2aooNkYmfjpdZRb
trLVidkdUA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ciboulette.abes.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ciboulette.abes.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
