<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.helmholtz.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">helmholtz.de</shibmd:Scope>

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Helmholtz Association</mdui:DisplayName>
		<mdui:DisplayName xml:lang="de">Helmholtz Gemeinschaft</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of Helmholtz Association</mdui:Description>
		<mdui:Description xml:lang="de">Identity Provider der Helmholtz Gemeinschaft</mdui:Description>
                <mdui:Logo height="16" width="16">https://idp.helmholtz.de/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://idp.helmholtz.de/idp/images/logo.png</mdui:Logo>
            </mdui:UIInfo> 
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
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
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
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
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.helmholtz.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.helmholtz.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.helmholtz.de:8443/idp/profile/SAML2/SOAP/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.helmholtz.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.helmholtz.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.helmholtz.de/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.helmholtz.de/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.helmholtz.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.helmholtz.de/idp/profile/SAML2/POST/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">helmholtz.de</shibmd:Scope>
        </Extensions>


        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.helmholtz.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>

	<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </AttributeAuthorityDescriptor> 

</EntityDescriptor>
