<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Brian,
<div>
<div><br class="Apple-interchange-newline">
<blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">
<div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0, 0); font-size: 10pt; ">
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
I tried the xmllint command on three unrelated systems and all gave me that error.</div>
</div>
</span></blockquote>
<div><br>
</div>
<div>Yes, that's because the problem isn't your systems -- it's that (ironically) W3 is a very slow host and xmllint has aggressive timeout defaults. I can consistently download the schema on three unrelated systems… each in 15 seconds or more.</div>
<div><br>
</div>
<div>
<div>$ time curl <a href="http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd">
http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd</a></div>
<div>...</div>
<div>real<span class="Apple-tab-span" style="white-space:pre"> </span>0m15.044s</div>
</div>
<div>
<div>...</div>
<div>real<span class="Apple-tab-span" style="white-space:pre"> </span>0m15.086s</div>
<div>
<div>…</div>
<div>
<div>real<span class="Apple-tab-span" style="white-space:pre"> </span>0m15.412s</div>
</div>
<div><br>
</div>
</div>
</div>
<blockquote type="cite">
<div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0, 0); font-size: 10pt; ">
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
> <span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; ">The surefire way to debug those is to just try loading the file into an IdP or an SP and seeing whether it complains.</span><span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; "> </span></div>
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
<span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; "><br>
</span></div>
<div id="divRpF577447" style="direction: ltr; "><font face="Segoe UI, Helvetica, Arial, sans-serif" size="3">I'm not sure how to do that. I just have a test SP, UCOP will be my IdP. I just figured out how to get my metadata out of /Shibboleth.sso/Metadata
-- are you saying I should have </font><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border-top-width: 0px !important; border-right-width: 0px !important; border-bottom-width: 0px !important; border-left-width: 0px !important; border-style: initial !important; border-color: initial !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin-top: 0px !important; margin-right: 0px !important; margin-bottom: 0px !important; margin-left: 0px !important; outline-width: 0px !important; outline-style: initial !important; outline-color: initial !important; overflow-x: visible !important; overflow-y: visible !important; padding-top: 0px !important; padding-right: 0px !important; padding-bottom: 0px !important; padding-left: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; white-space: pre-wrap; "><</code><code class="xml keyword" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border-top-width: 0px !important; border-right-width: 0px !important; border-bottom-width: 0px !important; border-left-width: 0px !important; border-style: initial !important; border-color: initial !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin-top: 0px !important; margin-right: 0px !important; margin-bottom: 0px !important; margin-left: 0px !important; outline-width: 0px !important; outline-style: initial !important; outline-color: initial !important; overflow-x: visible !important; overflow-y: visible !important; padding-top: 0px !important; padding-right: 0px !important; padding-bottom: 0px !important; padding-left: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; font-weight: bold !important; min-height: inherit !important; color: rgb(51, 102, 153) !important; white-space: pre-wrap; ">MetadataProvider</code><span style="color: rgb(51, 51, 51); font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace; line-height: 15px; text-align: left; white-space: pre-wrap; background-color: rgb(255, 255, 255); ">
</span><code class="xml color1" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border-top-width: 0px !important; border-right-width: 0px !important; border-bottom-width: 0px !important; border-left-width: 0px !important; border-style: initial !important; border-color: initial !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin-top: 0px !important; margin-right: 0px !important; margin-bottom: 0px !important; margin-left: 0px !important; outline-width: 0px !important; outline-style: initial !important; outline-color: initial !important; overflow-x: visible !important; overflow-y: visible !important; padding-top: 0px !important; padding-right: 0px !important; padding-bottom: 0px !important; padding-left: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; color: rgb(128, 128, 128) !important; white-space: pre-wrap; ">type</code><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border-top-width: 0px !important; border-right-width: 0px !important; border-bottom-width: 0px !important; border-left-width: 0px !important; border-style: initial !important; border-color: initial !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin-top: 0px !important; margin-right: 0px !important; margin-bottom: 0px !important; margin-left: 0px !important; outline-width: 0px !important; outline-style: initial !important; outline-color: initial !important; overflow-x: visible !important; overflow-y: visible !important; padding-top: 0px !important; padding-right: 0px !important; padding-bottom: 0px !important; padding-left: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; white-space: pre-wrap; ">="XML"
in my shibboleth2.xml that point to my own metadata and then shibd -t? Just for testing, or should it be that way in production?</code></div>
</div>
</blockquote>
<div><br>
</div>
<div>Just for testing, but yeah, that is the easiest way to get an idea whether it's "loadable" metadata. It won't tell you whether everything is right -- only end-to-end testing will tell you that -- but it'll tell you whether you're off on the right path.
A command line tool would expedite the process and make it cleaner, so I hope Scott finds the time to package that up.</div>
<br>
<blockquote type="cite">
<div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0, 0); font-size: 10pt; ">
<div id="divRpF577447" style="direction: ltr; "><code class="xml plain" style="border-top-left-radius: 0px !important; border-top-right-radius: 0px !important; border-bottom-right-radius: 0px !important; border-bottom-left-radius: 0px !important; background-image: none !important; border-top-width: 0px !important; border-right-width: 0px !important; border-bottom-width: 0px !important; border-left-width: 0px !important; border-style: initial !important; border-color: initial !important; bottom: auto !important; float: none !important; height: auto !important; left: auto !important; line-height: 15px; margin-top: 0px !important; margin-right: 0px !important; margin-bottom: 0px !important; margin-left: 0px !important; outline-width: 0px !important; outline-style: initial !important; outline-color: initial !important; overflow-x: visible !important; overflow-y: visible !important; padding-top: 0px !important; padding-right: 0px !important; padding-bottom: 0px !important; padding-left: 0px !important; position: static !important; right: auto !important; text-align: left; top: auto !important; vertical-align: baseline !important; width: auto !important; box-sizing: content-box !important; font-family: Consolas, 'Bitstream Vera Sans Mono', 'Courier New', Courier, monospace !important; min-height: inherit !important; white-space: pre-wrap; ">If
I have this set, then will </code><span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; ">/Shibboleth.sso/Metadata</span><span style="font-family: 'Segoe UI', Helvetica, Arial, sans-serif; font-size: medium; "> return my good
metadata rather than generated metadata?</span></div>
</div>
</blockquote>
<div><br>
</div>
<div>Nope. That's just a dynamic handler that will return metadata generated from polling the configuration files. You can host this metadata file anywhere you'd like; at your entityID, <span class="Apple-style-span" style="color: rgb(221, 17, 68); font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><a href="https://nuxeo.cdlib.org/sp">https://nuxeo.cdlib.org/sp</a></span>,
would be a common place. It can be anywhere you like and the IdP knows. Your IdP may even prefer to host the file itself.</div>
<br>
<blockquote type="cite">
<div style="direction: ltr; font-family: Tahoma; color: rgb(0, 0, 0); font-size: 10pt; ">
<div id="divRpF577447" style="color: rgb(0, 0, 0); font-family: 'Times New Roman'; font-size: 16px; direction: ltr; ">
Am I on the right track as far as repeating the Complex Type EndpointType elements with redundant Binding attributes and Location attributes that point to -dev, -stg, and production, assuming the one entityID per application scenario?</div>
</div>
</blockquote>
<br>
</div>
<div>Yes, right on, but you probably only need a small subset of the ones you're generating. If you won't be using or don't support the SAML 2.0 Single Logout Profile in your application, then you don't need those endpoints. If you're not doing artifact requests,
you don't need the artifact endpoints, etc. etc. If you're just doing "normal" Shibboleth 2.x, then you only need the POST endpoints.</div>
</div>
<div><br>
</div>
<div>There are almost too many options enabled by SAML 2.0 and the Shibboleth SP and it's not immediately obvious from a quick glance which ones you can prune here, but because some of those options are used in some deployments, we include them by default and
can't provide blanket guidance about what to remove.</div>
<div><br>
</div>
<div>The below example probably has everything you'll need for basic interop with the UCOP IdP.</div>
<div><br>
</div>
<div><span class="Apple-style-span" style="font-family: Tahoma; font-size: 13px; ">
<pre class="line-pre" style="font-size: 12px; line-height: 16px; font-family: Consolas, 'Liberation Mono', Courier, monospace; word-wrap: break-word; width: 1309px; margin-top: 0px; margin-bottom: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; background-color: rgb(255, 255, 255); position: static; z-index: auto; "><div class="line" id="file-shib-xml-LC1"><span class="nt" style="color: navy; "><md:EntityDescriptor</span> </div><div class="line" id="file-shib-xml-LC2"> <span class="na" style="color: teal; ">xmlns:md=</span><span class="s" style="color: rgb(221, 17, 68); ">"urn:oasis:names:tc:SAML:2.0:metadata"</span> </div><div class="line" id="file-shib-xml-LC3"> <span class="na" style="color: teal; ">xmlns:init=</span><span class="s" style="color: rgb(221, 17, 68); ">"urn:oasis:names:tc:SAML:profiles:SSO:request-init"</span></div><div class="line" id="file-shib-xml-LC4"> <span class="na" style="color: teal; ">xmlns:ds=</span><span class="s" style="color: rgb(221, 17, 68); ">"<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"</span></div><div class="line" id="file-shib-xml-LC5"> </div><div class="line" id="file-shib-xml-LC6"> <span class="na" style="color: teal; ">xmlns:xsi=</span><span class="s" style="color: rgb(221, 17, 68); ">"<a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a>"</span></div><div class="line" id="file-shib-xml-LC7"> <span class="na" style="color: teal; ">xsi:schemaLocation=</span><span class="s" style="color: rgb(221, 17, 68); ">"urn:oasis:names:tc:SAML:2.0:metadata <a href="http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd">http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd</a>"</span></div><div class="line" id="file-shib-xml-LC8"> </div><div class="line" id="file-shib-xml-LC9"> <span class="na" style="color: teal; ">ID=</span><span class="s" style="color: rgb(221, 17, 68); ">"_ae6d076f856a2002ad755a3574c7204ddc9424b4"</span> </div><div class="line" id="file-shib-xml-LC10"> <span class="na" style="color: teal; ">entityID=</span><span class="s" style="color: rgb(221, 17, 68); ">"<a href="https://nuxeo.cdlib.org/sp">https://nuxeo.cdlib.org/sp</a>"</span></div><div class="line" id="file-shib-xml-LC11"> <span class="na" style="color: teal; ">cacheDuration=</span><span class="s" style="color: rgb(221, 17, 68); ">"P1D"</span></div><div class="line" id="file-shib-xml-LC12"><span class="nt" style="color: navy; ">></span> </div><div class="line" id="file-shib-xml-LC13"> <span class="c" style="color: rgb(153, 153, 136); font-style: italic; "><!-- 'P1D' = one day in xsd:duration, who knew? --></span></div><div class="line" id="file-shib-xml-LC14"> <span class="c" style="color: rgb(153, 153, 136); font-style: italic; "><!-- xmlns:init info at <a href="http://docs.oasis-open.org/security/saml/Post2.0/sstc-request-initiation-cd-01.html">http://docs.oasis-open.org/security/saml/Post2.0/sstc-request-initiation-cd-01.html</a> --></span></div><div class="line" id="file-shib-xml-LC15"> <span class="c" style="color: rgb(153, 153, 136); font-style: italic; "><!-- xmlns:md info at <a href="http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf">http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf</a> --></span></div><div class="line" id="file-shib-xml-LC16"> <span class="nt" style="color: navy; "><md:SPSSODescriptor</span> </div><div class="line" id="file-shib-xml-LC17"> <span class="na" style="color: teal; ">protocolSupportEnumeration=</span><span class="s" style="color: rgb(221, 17, 68); ">"</span></div><div class="line" id="file-shib-xml-LC18"><span class="s" style="color: rgb(221, 17, 68); "> urn:oasis:names:tc:SAML:2.0:protocol </span></div><div class="line" id="file-shib-xml-LC19"><span class="s" style="color: rgb(221, 17, 68); "> urn:oasis:names:tc:SAML:1.1:protocol </span></div><div class="line" id="file-shib-xml-LC20"><span class="s" style="color: rgb(221, 17, 68); "> urn:oasis:names:tc:SAML:1.0:protocol</span></div><div class="line" id="file-shib-xml-LC21"><span class="s" style="color: rgb(221, 17, 68); "> "</span></div><div class="line" id="file-shib-xml-LC22"> <span class="nt" style="color: navy; ">></span></div></pre>
</span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="nt" style="color: navy; "><md:KeyDescriptor></span></span><span class="Apple-style-span" style="font-family: Tahoma; font-size: 13px; ">
<pre class="line-pre" style="font-size: 12px; line-height: 16px; font-family: Consolas, 'Liberation Mono', Courier, monospace; word-wrap: break-word; width: 1309px; margin-top: 0px; margin-bottom: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; background-color: rgb(255, 255, 255); position: static; z-index: auto; "><div class="line" id="file-shib-xml-LC30"> <span class="nt" style="color: navy; "><ds:KeyInfo></span></div><div class="line" id="file-shib-xml-LC31"> <span class="nt" style="color: navy; "><ds:KeyName></span>nuxeo-dev<span class="nt" style="color: navy; "></ds:KeyName></span></div><div class="line" id="file-shib-xml-LC32"> <span class="nt" style="color: navy; "><ds:X509Data></span></div><div class="line" id="file-shib-xml-LC33"> <span class="nt" style="color: navy; "><ds:X509SubjectName></span>CN=nuxeo-dev<span class="nt" style="color: navy; "></ds:X509SubjectName></span></div><div class="line" id="file-shib-xml-LC34"> <span class="nt" style="color: navy; "><ds:X509Certificate></span>MIIC4jCCAcqgAwIBAgIJAKHzEISxgVpsMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV</div><div class="line" id="file-shib-xml-LC35">BAMTCW51eGVvLWRldjAeFw0xMzA2MDEwMzQ5NDBaFw0yMzA1MzAwMzQ5NDBaMBQx</div><div class="line" id="file-shib-xml-LC36">EjAQBgNVBAMTCW51eGVvLWRldjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC</div><div class="line" id="file-shib-xml-LC37">ggEBALTNY5nzZ004HavyagcNTvHJmOlB9Tvh9xPnaGn2O92lRqMWaR3NKXMUSmnR</div><div class="line" id="file-shib-xml-LC38">FjXTXYdQAnT0xkCS/Wkvur3XfzsN/c1qNlrxFRKtKOgqDDw3t6ttpCnwrxJcWIxF</div><div class="line" id="file-shib-xml-LC39">F6cYTPW/E8GtimiSVv9GAYzzGmFhx+E5oeIdv6H8SiRw333cORoe5Ux4vMoTY6in</div><div class="line" id="file-shib-xml-LC40">uNfecw6Fz1I5kQ/6O0kSSTGjJmIjgFQx0tpw8XJhL2E+jahu9sl3CZLYuqhsdBx9</div><div class="line" id="file-shib-xml-LC41">/srtQBZ/Cem5WBUBtuFnJCiEVw4pDfTzTOe9WBCoVFDQQgOOa/wHbTD6W0kDIKWg</div><div class="line" id="file-shib-xml-LC42">pF6A+ydiKE7aRpkt5Qo5NuZ9AKcCAwEAAaM3MDUwFAYDVR0RBA0wC4IJbnV4ZW8t</div><div class="line" id="file-shib-xml-LC43">ZGV2MB0GA1UdDgQWBBRIbfPEefybNux8qxZ0jnw6V2/D7TANBgkqhkiG9w0BAQUF</div><div class="line" id="file-shib-xml-LC44">AAOCAQEAAROxkv2qnDCmdeYr2cWCX7fO6BRMixZ1KfjUWRdMWnB79/LzZVQDnjgN</div><div class="line" id="file-shib-xml-LC45">SsbYd+MDyaE5Wem67WMp2gwaEkG6bBMBxOa7YwRetPKfdw7DRJ60GXEepdECbXPU</div><div class="line" id="file-shib-xml-LC46">0+TkdRWsAy5QYTotQJaA6/tc8vEAmH3l8BNo7NGCUA1bOXl3m2I+XU5b6j5GKY+e</div><div class="line" id="file-shib-xml-LC47">1PuXw4V7VBEs/Myk7XZSNrEmil39l1x0cheshhLxgweb/a9xVTRSI5ZtTF0srTo8</div><div class="line" id="file-shib-xml-LC48">pQv01Kmdgn6qPCI80/XRg0WWPG5lhR06Hcf9o0bhAF5HV2tdxiCQJn6ieEZ+gz/K</div><div class="line" id="file-shib-xml-LC49">H+OplCprRz65+a5uj0Zv4ed77/rvXw==</div><div class="line" id="file-shib-xml-LC50"><span class="nt" style="color: navy; "></ds:X509Certificate></span></div><div class="line" id="file-shib-xml-LC51"> <span class="nt" style="color: navy; "></ds:X509Data></span></div><div class="line" id="file-shib-xml-LC52"> <span class="nt" style="color: navy; "></ds:KeyInfo></span></div><div class="line" id="file-shib-xml-LC53"> <span class="nt" style="color: navy; "></md:KeyDescriptor></span></div></pre>
</span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="nt" style="color: navy; "><md:AssertionConsumerService</span>
<span class="na" style="color: teal; ">Binding=</span><span class="s" style="color: rgb(221, 17, 68); ">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span>
<span class="na" style="color: teal; ">Location=</span><span class="s" style="color: rgb(221, 17, 68); ">"<a href="http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/POST">http://nuxeo.cdlib.org/Shibboleth.sso/SAML2/POST</a>"</span>
<span class="na" style="color: teal; ">index=</span><span class="s" style="color: rgb(221, 17, 68); ">"0" isDefault="true"</span><span class="nt" style="color: navy; ">/></span></span>
<div><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="nt" style="color: navy; "><md:AssertionConsumerService</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; ">
</span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="na" style="color: teal; ">Binding=</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="s" style="color: rgb(221, 17, 68); ">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; ">
</span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="na" style="color: teal; ">Location=</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="s" style="color: rgb(221, 17, 68); ">"<a href="http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/POST">http://nuxeo-dev.cdlib.org/Shibboleth.sso/SAML2/POST</a>"</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; ">
</span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="na" style="color: teal; ">index=</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="s" style="color: rgb(221, 17, 68); ">"1"</span></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; "><span class="nt" style="color: navy; ">/></span></span><span class="Apple-style-span" style="font-family: Tahoma; font-size: 13px; "></span><span class="Apple-style-span" style="font-family: Consolas, 'Liberation Mono', Courier, monospace; font-size: 12px; line-height: 16px; white-space: pre; ">`</span></div>
</div>
<div><span class="Apple-style-span" style="font-family: Tahoma; font-size: 13px; ">
<pre class="line-pre" style="font-size: 12px; line-height: 16px; font-family: Consolas, 'Liberation Mono', Courier, monospace; word-wrap: break-word; width: 1309px; margin-top: 0px; margin-bottom: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; background-color: rgb(255, 255, 255); position: static; z-index: auto; "><div class="line" id="file-shib-xml-LC78"> <span class="nt" style="color: navy; "><md:AssertionConsumerService</span> <span class="na" style="color: teal; ">Binding=</span><span class="s" style="color: rgb(221, 17, 68); ">"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"</span> <span class="na" style="color: teal; ">Location=</span><span class="s" style="color: rgb(221, 17, 68); ">"<a href="http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/POST">http://nuxeo-stg.cdlib.org/Shibboleth.sso/SAML2/POST</a>"</span> <span class="na" style="color: teal; ">index=</span><span class="s" style="color: rgb(221, 17, 68); ">"2"</span><span class="nt" style="color: navy; ">/></span></div></pre>
</span></div>
<div><span class="Apple-style-span" style="font-family: Tahoma; font-size: 13px; ">
<pre class="line-pre" style="font-size: 12px; line-height: 16px; font-family: Consolas, 'Liberation Mono', Courier, monospace; word-wrap: break-word; width: 1309px; margin-top: 0px; margin-bottom: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; background-color: rgb(255, 255, 255); position: static; z-index: auto; "><div class="line" id="file-shib-xml-LC92"> <span class="nt" style="color: navy; "></md:SPSSODescriptor></span></div><div class="line" id="file-shib-xml-LC93"> </div><div class="line" id="file-shib-xml-LC94"><span class="nt" style="color: navy; "></md:EntityDescriptor></span></div></pre>
</span>
<div><br>
</div>
<div><br>
</div>
</div>
</body>
</html>