<EntitiesDescriptor Name="urn:mace:shibboleth:testshib:two"
    xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
    xmlns:mdalg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <!-- This file contains the metadata for the testing IdP and SP
     that are operated by TestShib as a service for testing new
     Shibboleth and SAML providers. -->

    <EntityDescriptor entityID="https://127.0.0.1:8443/idp/shibboleth">
        
        <Extensions>
            <mdalg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
            <mdalg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
        </Extensions>

        <IDPSSODescriptor
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
            <Extensions>
                <shibmd:Scope regexp="false">testshib.org</shibmd:Scope>
                <mdui:UIInfo>
                    <mdui:DisplayName xml:lang="en">Aravind Test IdP</mdui:DisplayName>
                    <mdui:Description xml:lang="en">Aravind IdP. Use this as a source of attributes
                        for your test SP.</mdui:Description>
                    <mdui:Logo height="88" width="253"
                        >https://www.testshib.org/testshibtwo.jpg</mdui:Logo>
                </mdui:UIInfo>

            </Extensions>
            <KeyDescriptor use='encryption'>
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
            </KeyDescriptor>

            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                Location="https://127.0.0.1:8443/idp/profile/SAML1/SOAP/ArtifactResolution"
                index="1"/>
            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                Location="https://127.0.0.1:8443/idp/profile/SAML2/SOAP/ArtifactResolution"
                index="2"/>

            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
            
            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
                Location="https://127.0.0.1:8443/idp/profile/Shibboleth/SSO"/>
            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://127.0.0.1:8443/idp/profile/SAML2/POST/SSO"/>
            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                Location="https://127.0.0.1:8443/idp/profile/SAML2/Redirect/SSO"/>
            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
                Location="https://127.0.0.1:8443/idp/profile/SAML2/SOAP/ECP"/>

        </IDPSSODescriptor>


        <AttributeAuthorityDescriptor
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

            <KeyDescriptor use='encryption'>
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
	</KeyDescriptor>


            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                Location="https://127.0.0.1:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
            <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                Location="https://127.0.0.1:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>

            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        </AttributeAuthorityDescriptor>

        <Organization>
            <OrganizationName xml:lang="en">TestShib Two Identity Provider</OrganizationName>
            <OrganizationDisplayName xml:lang="en">TestShib Two</OrganizationDisplayName>
            <OrganizationURL xml:lang="en">http://www.testshib.org/testshib-two/</OrganizationURL>
        </Organization>
        <ContactPerson contactType="technical">
            <GivenName>Nate</GivenName>
            <SurName>Klingenstein</SurName>
            <EmailAddress>ndk@internet2.edu</EmailAddress>
        </ContactPerson>
    </EntityDescriptor>

    <EntityDescriptor entityID="https://127.0.0.1/shibboleth">

        <Extensions>
            <mdalg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
            <mdalg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
        </Extensions>
        
        <!-- An SP supporting SAML 1 and 2 contains this element with protocol support as shown. -->
        <SPSSODescriptor
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol http://schemas.xmlsoap.org/ws/2003/07/secext">

<!--            <Extensions>
                 Extension to permit the SP to receive IdP discovery responses. 
                <idpdisc:DiscoveryResponse
                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
                    index="1" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
                    Location="https://127.0.0.1/Shibboleth.sso/DS"/>
                
                <mdui:UIInfo>
                    <mdui:DisplayName xml:lang="en">TestShib Test SP</mdui:DisplayName>
                    <mdui:Description xml:lang="en">TestShib SP. Log into this to test your machine.
                        Once logged in check that all attributes that you expected have been
                        released.</mdui:Description>
                    <mdui:Logo height="88" width="253">https://www.testshib.org/testshibtwo.jpg</mdui:Logo>
                </mdui:UIInfo>
            </Extensions>-->

            <KeyDescriptor>
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5"/>
            </KeyDescriptor>

            <!-- This tells IdPs that Single Logout is supported and where/how to request it. -->

            <SingleLogoutService Location="https://127.0.0.1/Shibboleth.sso/SLO/SOAP"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"/>
            <SingleLogoutService Location="https://127.0.0.1/Shibboleth.sso/SLO/Redirect"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"/>
            <SingleLogoutService Location="https://127.0.0.1/Shibboleth.sso/SLO/POST"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
            <SingleLogoutService Location="https://127.0.0.1/Shibboleth.sso/SLO/Artifact"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"/>


            <!-- This tells IdPs that you only need transient identifiers. -->
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>

            <!--
		This tells IdPs where and how to send authentication assertions. Mostly
		the SP will tell the IdP what location to use in its request, but this
		is how the IdP validates the location and also figures out which
		SAML version/binding to use.
		-->

            <AssertionConsumerService index="1" isDefault="true"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://127.0.0.1/Shibboleth.sso/SAML2/POST"/>
            <AssertionConsumerService index="2"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
                Location="https://127.0.0.1/Shibboleth.sso/SAML2/POST-SimpleSign"/>
            <AssertionConsumerService index="3"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
                Location="https://127.0.0.1/Shibboleth.sso/SAML2/Artifact"/>
            <AssertionConsumerService index="4"
                Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
                Location="https://127.0.0.1/Shibboleth.sso/SAML/POST"/>
            <AssertionConsumerService index="5"
                Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
                Location="https://127.0.0.1/Shibboleth.sso/SAML/Artifact"/>
            <AssertionConsumerService index="6"
                Binding="http://schemas.xmlsoap.org/ws/2003/07/secext"
                Location="https://127.0.0.1/Shibboleth.sso/ADFS"/>

            <!-- A couple additional assertion consumers for the registration webapp. -->

            <AssertionConsumerService index="7"
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://127.0.0.1/Shibboleth.sso/SAML2/POST"/>
            <AssertionConsumerService index="8"
                Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
                Location="https://127.0.0.1/Shibboleth.sso/SAML/POST"/>

        </SPSSODescriptor>

        <!-- This is just information about the entity in human terms. -->
        <Organization>
            <OrganizationName xml:lang="en">Vembu Technologies</OrganizationName>
            <OrganizationDisplayName xml:lang="en">Vembu</OrganizationDisplayName>
            <OrganizationURL xml:lang="en">http://www.vembu.com</OrganizationURL>
        </Organization>
        <ContactPerson contactType="technical">
            <GivenName>Aravind</GivenName>
            <SurName>Aravindhan</SurName>
            <EmailAddress>apitest4@gmail.com</EmailAddress>
        </ContactPerson>

    </EntityDescriptor>


</EntitiesDescriptor>
