<?xml version="1.0" encoding="UTF-8"?>

<!-- Ansible managed -->

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                   xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.fiz-karlsruhe.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">fiz-karlsruhe.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">FIZ Karlsruhe – Leibniz-Institut für Informationsinfrastruktur GmbH</mdui:DisplayName>
                <mdui:DisplayName xml:lang="de">FIZ Karlsruhe – Leibniz-Institut für Informationsinfrastruktur GmbH</mdui:DisplayName>
                <mdui:Description xml:lang="en">Login for members of FIZ Karlsruhe</mdui:Description>
                <mdui:Description xml:lang="de">Login für Mitarbeiter von FIZ Karlsruhe</mdui:Description>
                <mdui:Logo height="16" width="16">https://idp.fiz-karlsruhe.de/idp/images/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://idp.fiz-karlsruhe.de/idp/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.fiz-karlsruhe.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.fiz-karlsruhe.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.fiz-karlsruhe.de:8443/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.fiz-karlsruhe.de/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.fiz-karlsruhe.de/idp/profile/SAML2/SOAP/ECP"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </IDPSSODescriptor>

    <!-- Protocol-Support für SAML2-Queries im AA-Descriptor aktivieren -->
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">fiz-karlsruhe.de</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.fiz-karlsruhe.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP-binding" Location="https://idp.fiz-karlsruhe.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
