<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.     On Demand Metadata Generation available from the metadatagen plugin.
--> 
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2024-03-04T09:59:48.964Z" entityID="https://idp.uz.zgora.pl/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">uz.zgora.pl</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.uz.zgora.pl</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.uz.zgora.pl</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.uz.zgora.pl/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
--> 
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIEKDCCApCgAwIBAgIVANLr3Lwhn3oOqvVktvBGXi3sn61hMA0GCSqGSIb3DQEB
CwUAMBoxGDAWBgNVBAMMD2lkcC51ei56Z29yYS5wbDAeFw0yNDAzMDQwOTU5MjNa
Fw00NDAzMDQwOTU5MjNaMBoxGDAWBgNVBAMMD2lkcC51ei56Z29yYS5wbDCCAaIw
DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAPxawp32VUTtaKeDPesIY/9P1hf5
XJieOZI2gwQvmiPyqWDBS6Rs2g9J5iCUk/Xi8A/bfjh8dTqnOO/9wsLcRLRnSAVc
imVtk5OHlDlQU+CeyW/TxHR6Hq3qNI+AxIDLE8omlw8bMDX/nSJOX7SSndQg8WAz
37fmjJebEIrifaVt9UPi6aqq9/f3ZYEiJ24UY2z52Slsit5y+Y3PLEdO6/PVlVfh
nIOlRxYA8u3le8ExTSoye1qijmyYiOEJcYyxc0GwXB+Rq0TUonoYbwJMoX7NE5M5
mAE763DUnffkIy5N9X/cYFlqBoOhVA+yRDDRxIDXxQBkFZrzfrKsbslgMPl5EiYl
asLUt0JuZ61wIbbcG6tM2pDR6TotUMtXlu62OW+9LeK7R1kXVhbLSyGYAwFYW399
LvfUuVaKuDnchPTEL2EtJRedkh9gIQOiVPhlwd6OaK1L8uPyyFI/CW5rhf0DcOdT
kWrCesaB6/xEC5VmtLiIp+Bm6zygSZCe4ucRhQIDAQABo2UwYzAdBgNVHQ4EFgQU
lWL21FRShgSvBosieDr/R0cTemQwQgYDVR0RBDswOYIPaWRwLnV6Lnpnb3JhLnBs
hiZodHRwczovL2lkcC51ei56Z29yYS5wbC9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
9w0BAQsFAAOCAYEAvnCsnigrg8rsiTjkJ0IlSJooX22dp6oGvwsKsEFhxyIdsDMo
ajgstCXXd3v2a+biUWOyUNAKP955aOJ0M8ZDwiZU4tRzOu1BO10FBWyE29D7Jx+Q
Rt3vMe9HyVld/yosCHWeKLhAK3wJAOAFx58FlS0IejikQMSm1pIvyQme09wQrgQB
TU8oPQxyHaOosAjnLs5lm+sqRk9X/SrniCT1uvow9Ceif+fJ2e2lQfwAGhTJMV1r
YSUL70hlK541S6mdlt7Ga/6Znzgitih7Rvor3C3fhGIhXbnOAiXEx+5NVr2x7RyH
vNCFDGFKscUZ6UVlAJpkY3cot1fdGesiw3S0NnbvrSY3NQJdlb1GUESrI2d9O8RP
2kCvMcUU5wsOxd+t2IYP28vu/fGCJaOjLlZPugXIfNVW8LUzaW0YJv9wXnT1KePh
et2Rrxtw4g8fbtzm4wIMZgODOnwpPv6Kazldx17CHzCL8wQHhR7iP+6YVfGahFco
/Li6pDS8iez+5fJV
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.uz.zgora.pl:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
-->         <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.uz.zgora.pl:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

<!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.uz.zgora.pl/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.uz.zgora.pl/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.uz.zgora.pl/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.uz.zgora.pl:8443/idp/profile/SAML2/SOAP/SLO"/>
--> 

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.uz.zgora.pl/idp/profile/SAML2/Redirect/SSO"/>
        <!--<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.uz.zgora.pl/idp/profile/Shibboleth/SSO"/>
-->         <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.uz.zgora.pl/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.uz.zgora.pl/idp/profile/SAML2/POST/SSO"/>

    </IDPSSODescriptor>


<!--    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">uz.zgora.pl</shibmd:Scope>
        </Extensions>

        --> <!-- First signing certificate is BackChannel, the Second is FrontChannel-->  <!--
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.uz.zgora.pl:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>-->  <!--
        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.uz.zgora.pl:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>-->  <!--
        --> <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above-->  <!--

    </AttributeAuthorityDescriptor>--> 

</EntityDescriptor>
