<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.csi.cuny.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">csi.cuny.edu</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.csi.cuny.edu</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.csi.cuny.edu</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.csi.cuny.edu/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.csi.cuny.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.csi.cuny.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.csi.cuny.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.csi.cuny.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.csi.cuny.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.csi.cuny.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.csi.cuny.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.csi.cuny.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.csi.cuny.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.csi.cuny.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">csi.cuny.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.csi.cuny.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.csi.cuny.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
