<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.net.internet2.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">net.internet2.edu</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.bldc.net.internet2.edu</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.bldc.net.internet2.edu</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.bldc.net.internet2.edu/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.bldc.net.internet2.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.bldc.net.internet2.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.bldc.net.internet2.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.bldc.net.internet2.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.bldc.net.internet2.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.bldc.net.internet2.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.bldc.net.internet2.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.bldc.net.internet2.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.bldc.net.internet2.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.bldc.net.internet2.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">net.internet2.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDTzCCAjegAwIBAgIVANdSRDXatjLVKF4IchRE2x8D/iYkMA0GCSqGSIb3DQEB
CwUAMCUxIzAhBgNVBAMMGmlkcC5ibGRjLm5ldC5pbnRlcm5ldDIuZWR1MB4XDTE4
MDYwNjE2MzAxN1oXDTM4MDYwNjE2MzAxN1owJTEjMCEGA1UEAwwaaWRwLmJsZGMu
bmV0LmludGVybmV0Mi5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfAUPYycqIztI+NQR4Iaxrb+8WCsQ5Ge1N06XfgrGBKzcgLm+/fkOqxLsrWEbF
wrNWcZ+wasLXHpxVqOaIvZURRc1s74+YAJKpnllemleR1MAk31tECDAQk5K6dg04
HSA5m/oentOCuKQ+ZFy4ycMNQhq0j9lF8ro8srNuwAAk8z9RJvk+oujCzDXbvUls
ncHjiI0X8HJhIshV4jDtStdT5Pkqqh1l+cvdbYm4hE9aSIFcveTmVW3JkBrpocGm
/YkgeV6XMH8XtkE7TmCam5DQt4c2qDvFoZDsTGlXWJZTlRZAJpPDaZTKhZx5LS4X
RfaxGHCTZqNYjmZgdzhpF8ZPAgMBAAGjdjB0MB0GA1UdDgQWBBTJFEFf9Mme7lqy
Ne16/NPep3decjBTBgNVHREETDBKghppZHAuYmxkYy5uZXQuaW50ZXJuZXQyLmVk
dYYsaHR0cHM6Ly9pZHAubmV0LmludGVybmV0Mi5lZHUvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggEBAFN3egLZ1zF13UtcpWs2XECZQalmgvNiOGNojlDS
WvRp6jrRJxcZnFugRiPk2NlCBUR+Uix6wGaZ2V2+Dbsi6oG1xjU5jSUEFW7H1DSw
U8M8QgGJEnKgWpvSp1uxeHaZ6MSkRteWXTwuAbDMk1OsbNjIcXhTBkYrZSfenTNT
CDs+1NNv4iy5Nnubma855G9WXYSy9Vmx+F2yIuDvuqzInelUOqofcN8gF9cWfU+C
E6n6JUVclabdUSs20rFXJG78mTI5P3FNqp1hAJUi3RPTdUiC8PpnksaN8VTw9B8T
tDT+IX5c0zLitnN6tpNjLkx4E9UkoZienWYvkaAm3qK6unw=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDTjCCAjagAwIBAgIUSudBO92GSvD7Ha1XWdeIpsCMVBYwDQYJKoZIhvcNAQEL
BQAwJTEjMCEGA1UEAwwaaWRwLmJsZGMubmV0LmludGVybmV0Mi5lZHUwHhcNMTgw
NjA2MTYzMDE4WhcNMzgwNjA2MTYzMDE4WjAlMSMwIQYDVQQDDBppZHAuYmxkYy5u
ZXQuaW50ZXJuZXQyLmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOKT05jTnusvl3utpuBSvslh2eESUYtKIrT3bHwz+OVgcJvIvAQIUnHkF0iycUbp
3G40su8G4Zz7Y2YDiS/8GiY5jc4ZYmEqRVmKTNwz3WZqskUG5VIc2S7EEYdma8SD
uRLC82EyJ4cJ/CpKbZXm5131K/BFgFrf6Ymp4ciMbSgIB0H0+S5h0uv06OBqDz9A
GfT6XnFycp78pPH4S3oGl4Ry31lIKRGsfBJPHAaZYtE4dy3VdV4RBvSahq98UOpB
Qs01qhIPvieSmVqZN8F0kGLWX2EwQN9IdQHjAHhD1+ngD1C9j5LFFBzT5A9QdKOW
lwSZOZmE7SPmg1yhOrcLQusCAwEAAaN2MHQwHQYDVR0OBBYEFH3cMJ1zwLJlHAfL
QFNlGQXOj9KXMFMGA1UdEQRMMEqCGmlkcC5ibGRjLm5ldC5pbnRlcm5ldDIuZWR1
hixodHRwczovL2lkcC5uZXQuaW50ZXJuZXQyLmVkdS9pZHAvc2hpYmJvbGV0aDAN
BgkqhkiG9w0BAQsFAAOCAQEAtmzZ/s8JxpMYHbVyzef8djOW7DY9cGIMGuKRu6Rw
9xppxebJh74humgoTiUPqfmenFmr/jOKYCDK6H/eFzBkNeC03UNXVau9YV9aaaNl
q9pl+H6dNxY4vwK3zPnTuMbKKLuu8auwXjKcxarXTu8dnISmCHaHCZJeML9sYo+h
P1dcdpjH0S+QS+qOpdljOUG8gBrYjGikNyfurn7z9Bpjrl+6udeINponC80UdzK8
1FVr+A8ijANl8F6JTsh1t3WwKii44sEMkvfrcaexaakctzLMcNvEDdA96NiPe4GM
oXaWwKN7hc1ef7Dukg0Zayy+OdShRgRI0Rxtp4+M9vb5fA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.bldc.net.internet2.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.bldc.net.internet2.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
