<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://identites.ec-lyon.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ec-lyon.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at identites.ec-lyon.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at identites.ec-lyon.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://identites.ec-lyon.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDPzCCAiegAwIBAgIUSm/Wj1DZCfEcT7FIWcoKwltkNiYwDQYJKoZIhvcNAQEL
BQAwIDEeMBwGA1UEAwwVaWRlbnRpdGVzMi5lYy1seW9uLmZyMB4XDTE2MDQxNDE1
MzIyNVoXDTM2MDQxNDE1MzIyNVowIDEeMBwGA1UEAwwVaWRlbnRpdGVzMi5lYy1s
eW9uLmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZWELZn77d+v
WIvsg5mraW3FZ/pS7abQR1bFWC00qKDU6N6LRrUKdu69TaG6ZKSVnFaioaE5PEqR
h8Su2Ed9MNJ4oOEWQbz0OtYUaTfD3xsR+hceXmDjOa0+QUdTOkNiW0vfBlP2MF0W
11eMBmc96FjEcSWDb17I0uVxrWnH5MtOb4zmYVR9HCBG5Fb0Lws7g5OSqpycvOUn
sxj8SOBwbrv+VzgBja1pvLrHlF6QyCwk+IRkXZfxwlHs9HOFI99yXE2zuUtBtsWq
EVXI1XYf1+41gCHTaO7MgJiIT6zLpQdMAo2HSCapsIl/4TgGFstQrDApZc3MA40K
ujWl0lEjZwIDAQABo3EwbzAdBgNVHQ4EFgQU25dDxOr9tSKeOnCBZ6NI7OssKtQw
TgYDVR0RBEcwRYIVaWRlbnRpdGVzMi5lYy1seW9uLmZyhixodHRwczovL2lkZW50
aXRlczIuZWMtbHlvbi5mci9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
AQEAOPXOLT8SPphnNJGFZ7OHFaa81nX+0cknha6VMdl7zzASrpsJP1Wz814HkU6b
dzrOMxVNCNPKBbDMjdO+OphyyKfEroSkVihGNfql1Sx5oyEcCjdi84LpA+kJpg3O
qF3bX75EnRai64dUdQ2qNonoFZlI0lWxcB7bu7XfBFdE1tO4sRpmnhyPf69eDckn
aouo/N3qan+6ZZSz1VS+satUQwlY6xE2AfWxM9ujrC7QJft09TzvcB4MXREwCBX3
txGF6gHTIP7IRrFnc6tSppQPvNZk+wQZJkjmF2ukE4OnLaZti+qwlaoEK2AnObC5
ofJ3yn5PLy1c1OPmgmtCtyKUeA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDQDCCAiigAwIBAgIVAPpH7tjwhNZhIRXly4tu3UhWxdEeMA0GCSqGSIb3DQEB
CwUAMCAxHjAcBgNVBAMMFWlkZW50aXRlczIuZWMtbHlvbi5mcjAeFw0xNjA0MTQx
NTMyMjZaFw0zNjA0MTQxNTMyMjZaMCAxHjAcBgNVBAMMFWlkZW50aXRlczIuZWMt
bHlvbi5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJHnCQJMOIVS
6eBxgpJ+eNKHNSqj88Pne2WfXHWNe/mKxiWz+y1i9TCSe1wfGBpI7eqADDGyGA9z
B270oi3x5tvS4X4YfKrHZtfagNAFka/ID5lTB44eeVZKzLz88NVCrB0+tT6iz8qV
HEsMzutaeMhInPqH4Uak3gmkUaP3THTpKCW6SO9SQ4JK5C2+/ww7c9IwQM7rKhDq
Swmy+vfSd90N6E4kB1Kjlou8KI7C7fQ1q+CryL0QFHlSvkqhoqHPs08NBPaNIaxS
iDth08cIiMLz2O9RotMFHHvhUYSQTIddj49dPbHneULWflgGVrQCVaHTVCeWNFwu
6+C6WdUnshMCAwEAAaNxMG8wHQYDVR0OBBYEFIPJQxp32ZWE/cEVEbTGWhtcB+sg
ME4GA1UdEQRHMEWCFWlkZW50aXRlczIuZWMtbHlvbi5mcoYsaHR0cHM6Ly9pZGVu
dGl0ZXMyLmVjLWx5b24uZnIvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQAD
ggEBAC7fp+mpt0ML7ifmNFfMPWSEPxPsqMauttAeAVTmVujK5SV5OBoMA2fEKAxU
L3GoMKaYTgxfbdlMmTodMZCfq5I5ELjFmkJNYuMJOFk05gzEEfz1Wp4pcZA7kyTY
gjWVqecQGKO7rohvG6DA0lLDphz9erGdnssuNI9HrAWiO47cGZx5/2rZFadAerrm
3cmfVPKURMq2cAlX8rBgha2UttvyXekcS7kjqZMwWmSz2xUxa5vnT6Dn7iO2oEip
I6dO/XLNAktl6T8ofUaDeXiux8MeU4sOOl2sLc/0/DL6c5dp4AEwUeSruxvDsoI0
kIsgpK1Iof3J/HoCsbO2ynR2rIY=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://identites.ec-lyon.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identites.ec-lyon.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://identites.ec-lyon.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://identites.ec-lyon.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://identites.ec-lyon.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identites.ec-lyon.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://identites.ec-lyon.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://identites.ec-lyon.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://identites.ec-lyon.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://identites.ec-lyon.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ec-lyon.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://identites.ec-lyon.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identites.ec-lyon.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
