<?xml version="1.0" encoding="UTF-8"?>


<!-- ****************************************************************************************************
     *
     *  IT Services
     *  The University of Birmingham
     *
     *  idp-metadata.xml
     *  ================
     *
     *  Update History
     *  ==============
     *  2016-06-07 JGB   [a] Build as part of the initial installation of V3.2.1 prior to upgrading our
     *                       production service from V2 to V3.2.1
     *                   [b] Updated with site/service specific details (logos, descriptions, etc.)
     *                   [c] Enable SLO options
     *                   [d] replaced 'certificate' details using details from the Production service
     *                       being upgraded (see also keystore changes).
     *                   [e] Change entityID from "https://shibbolethidp2.bham.ac.uk/idp/shibboleth"
     *                                         to "https://idp.bham.ac.uk/shibboleth"
     * 2016-06-14 JGB   Updated to:
     *                  [a] Enabled AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" 
     *                                               Location="https://shibbolethidp2.bham.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"
     *                  [b] Minor text/xml formatting changes
     *
     *
     **************************************************************************************************** -->

 <EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
                    xmlns:ds="http://www.w3.org/2000/09/xmldsig#" 
                    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
                    xmlns:xml="http://www.w3.org/XML/1998/namespace" 
                    xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
                    entityID="https://idp.bham.ac.uk/shibboleth" >

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">bham.ac.uk</shibmd:Scope>

            <!-- ****************************************************************************************************
                 *
                 *  Details of our IdP as displayed to Service Providers, etc.
                 *
                 *
                 **************************************************************************************************** -->
                <mdui:UIInfo>
                    <mdui:DisplayName xml:lang="en">Birmingham University (Development IdP)</mdui:DisplayName>
                    <mdui:Description xml:lang="en">Birmingham University (Development IdP)</mdui:Description>
                    <mdui:Logo        height="80" width="80">https://shibbolethidp2.bham.ac.uk/idp/images/University-of-Birmingham-logo.png</mdui:Logo>
                </mdui:UIInfo>

        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibbolethidp2.bham.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"         Location="https://shibbolethidp2.bham.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!-- ****************************************************************************************************
             *
             * Single Log Out (LO)
             * =      =   = 
             *
             **************************************************************************************************** -->
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"        Location="https://shibbolethidp2.bham.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"            Location="https://shibbolethidp2.bham.ac.uk/idp/profile/SAML2/POST/SLO"/>
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibbolethidp2.bham.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"                 Location="https://shibbolethidp2.bham.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"             Location="https://shibbolethidp2.bham.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"            Location="https://shibbolethidp2.bham.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibbolethidp2.bham.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"        Location="https://shibbolethidp2.bham.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">bham.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDUDCCAjigAwIBAgIVANTuNiziz4l2CViQyzhD3hfr5trpMA0GCSqGSIb3DQEB
BQUAMCQxIjAgBgNVBAMTGXNoaWJib2xldGhpZHAyLmJoYW0uYWMudWswHhcNMTIw
NjE5MDgyMzM2WhcNMzIwNjE5MDgyMzM2WjAkMSIwIAYDVQQDExlzaGliYm9sZXRo
aWRwMi5iaGFtLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
oRlhyEKWt6PWevWIRBbE7g8uCdCUmFsjY+hGWYAOrYKworqlT0zuDIHU1AtFpcNo
CrjfCaRTAzi6llolA3R5oe+Yj/9tT9Ft/dHGPejxto/Dmr3ujIvNhNRRl0I0K2/X
AYipqla6kgQ9dz23JDLjDewVolNrSULW2/Az42z6BMeIpGd/S796U+5Zy4D0CSK9
H79IbfRH6/gf2rUWq9x44yVEZHDFtT9yc0Ve1xL73ztznhTTh4WaM4JV5DDnAQs7
glE6OILv+6ELDlv44jaCn0Q0CC+s++4WPXo46b6jYFfSWUdDd++Kujmg9TfAnOX5
MzK3WMSnR7ersXEl1K1bcQIDAQABo3kwdzBWBgNVHREETzBNghlzaGliYm9sZXRo
aWRwMi5iaGFtLmFjLnVrhjBodHRwczovL3NoaWJib2xldGhpZHAyLmJoYW0uYWMu
dWsvaWRwL3NoaWJib2xldGgwHQYDVR0OBBYEFLeRPHREWj++JVtbqdmpnHmmDGCy
MA0GCSqGSIb3DQEBBQUAA4IBAQBb/EvK4M26WIFe28cgRYlQZjUv90JzxWtvnQRk
jdBW18+PWJ+mFdZ4B0p+iNO5/hw/mZs7ueHjQlaofEs1NZvGbbusKgGn4Nn4hO77
reVGThMKjpxkQR2NXq6nPKSnJBOGTdbjJ2woNReNakMIDs5JQAXpl1qmtwOQNKnG
E6ayBTQAANKDAY5rVawdHIBqUO4GPD1waxXh/1zKAcVktHtamRinthZXRh0WHdHO
QWiiYxZz8CM72DGVGuJ2OxH2NboDiQeEyZYsbM/HYOlIyAMc237cHWz5dz38fZdF
ddkS4AwsjYMI7dZhdZmcD+lNoak8kCkaypOHKqjRV/UKJBrD
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibbolethidp2.bham.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"         Location="https://shibbolethidp2.bham.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
