<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.     On Demand Metadata Generation available from the metadatagen plugin.
--> 
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://shibboleth.rush.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">rush.edu</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at shibboleth.rush.edu</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at shibboleth.rush.edu</mdui:Description>
                <mdui:Logo height="80" width="80">https://shibboleth.rush.edu/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
--> 
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.rush.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
-->         <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.rush.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

<!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.rush.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.rush.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.rush.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.rush.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
--> 

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://shibboleth.rush.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <!--<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.rush.edu/idp/profile/Shibboleth/SSO"/>
-->         <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://shibboleth.rush.edu/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://shibboleth.rush.edu/idp/profile/SAML2/POST/SSO"/>

    </IDPSSODescriptor>


<!--    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">rush.edu</shibmd:Scope>
        </Extensions>

        --> <!-- First signing certificate is BackChannel, the Second is FrontChannel-->  <!--
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.rush.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>-->  <!--
        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.rush.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>-->  <!--
        --> <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above-->  <!--

    </AttributeAuthorityDescriptor>--> 
	
		<SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
 
    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.rush.edu/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
</SPSSODescriptor>

</EntityDescriptor>
