<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.it.su.se/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">su.se</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.it.su.se/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.it.su.se/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.it.su.se/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.it.su.se:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.it.su.se/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.it.su.se/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>

</EntityDescriptor>
