<!--
 This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
This metadata is not dynamic - it will not change as your configuration changes.
On Demand Metadata Generation available from the metadatagen plugin.
-->
<md:EntityDescriptor entityID="https://tst-sso.uhasselt.be/idp/shibboleth" 
    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
    xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
	xmlns:remd="http://refeds.org/metadata"
	xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
	xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    >

	<md:Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="http://federation.belnet.be/" registrationInstant="2012-03-27T12:00:00Z">
              <mdrpi:RegistrationPolicy xml:lang="en">http://federation.belnet.be/files/Belnet-metadata-registration-practice-statement.txt</mdrpi:RegistrationPolicy>
            </mdrpi:RegistrationInfo>
	    <mdattr:EntityAttributes>
		<saml:Attribute Name="http://macedir.org/entity-category-support" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
		<saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
		</saml:Attribute>
		<saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
		<saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
		</saml:Attribute>
	    </mdattr:EntityAttributes>
        </md:Extensions>

<md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">uhasselt.be</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A name for the IdP at tst-sso.uhasselt.be</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description for the IdP at tst-sso.uhasselt.be</mdui:Description>
                <mdui:Logo xml:lang="en" width="80" height="80">https://tst-sso.uhasselt.be/path/to/logo.png</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://tst-sso.uhasselt.be/idp/profile/SAML2/SOAP/Redirect/SLO" />
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://tst-sso.uhasselt.be/idp/profile/SAML2/POST/SLO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://tst-sso.uhasselt.be/idp/profile/SAML2/POST-SimpleSign/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://tst-sso.uhasselt.be/idp/profile/SAML2/Redirect/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://tst-sso.uhasselt.be/idp/profile/SAML2/POST/SSO" />
    </md:IDPSSODescriptor>

    <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">uhasselt.be</shibmd:Scope>
        </md:Extensions>

        <md:KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        
        <md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://tst-sso.uhasselt.be/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        
    </md:AttributeAuthorityDescriptor>


    <!-- Shibboleth as SP for EntraID -->
        <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://tst-sso.uhasselt.be/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </md:SPSSODescriptor>


    <md:Organization>
	<md:OrganizationName xml:lang="en">Universiteit Hasselt</md:OrganizationName>
	<md:OrganizationDisplayName xml:lang="en">Universiteit Hasselt</md:OrganizationDisplayName>
	<md:OrganizationURL xml:lang="en">http://www.uhasselt.be/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
	<md:GivenName>Centrale Informatica Dienst</md:GivenName>
	<md:SurName>ServiceDesk</md:SurName>
	<md:EmailAddress>mailto:servicedesk@uhasselt.be</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
	<md:GivenName>Security Response Team</md:GivenName>
	<md:EmailAddress>mailto:abuse@uhasselt.be</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>