<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shibboleth.ayrshire.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ayrshire.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at shibboleth.ayrshire.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at shibboleth.ayrshire.ac.uk</mdui:Description>
                <mdui:Logo height="80" width="80">https://shibboleth.ayrshire.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDUDCCAjigAwIBAgIVAIcQ/HHbFx7ir91IwgWlcFEGnbptMA0GCSqGSIb3DQEB
CwUAMCQxIjAgBgNVBAMMGXNoaWJib2xldGguYXlyc2hpcmUuYWMudWswHhcNMTcw
ODE4MTAwNDE0WhcNMzcwODE4MTAwNDE0WjAkMSIwIAYDVQQDDBlzaGliYm9sZXRo
LmF5cnNoaXJlLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
ySo3tI88UnfxV7uOwonZFVW/u8f85BWhMyy3gIQGZhaexfz2To9fjW5N6+MTJWRY
a1jBac10fyXMH8mDYc78pCyzcIlLo8aOo1NuTIWkA1ZSQfBACw8mg3nSvT5fGgwx
qiPRoCdiUih3b4NBAr+YCX4sjJ9U/9dl0jwdsVRcXyyfcNbP3FMf162iBaT+cEpb
ZDc6xF3NzI3A/NvXlDJYEhU+5vLqv4MXRVZMITcd3Mb3kcqPnCfx2G1dG8ul1ShY
cj2/sGY6LsRgNz357u1sVJdjgCE2EzoRsgxJWFWp8491ckvLdjHvgCR6IVQYyf+n
prAF2GEJ19+F404y92n2gwIDAQABo3kwdzAdBgNVHQ4EFgQUA05/4wFaLn/tYYkX
sNvprcKga3EwVgYDVR0RBE8wTYIZc2hpYmJvbGV0aC5heXJzaGlyZS5hYy51a4Yw
aHR0cHM6Ly9zaGliYm9sZXRoLmF5cnNoaXJlLmFjLnVrL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQBcWWAS0TaHVWbVoLAsza9DVo73dA7XylMyXKss
MkXUO/RzltH3gYuTLxo9B8fHOWUfdIoO2K5ga0KoLqNO+1IRszP7g44syjpdgGed
CoVSJKD4VfBZZTLFQYisYEo9WgbUdkLERZFzIaGbRYqdIwwxLf8xI0BxnObsM3Fr
ycB/rC14tXPkURafdGskuadcfQ7AZ93RD821b7pkyISlmDabDsyFX2USN26yxisA
vpGlyY+K9dbvjqwyxTbiniIaKzVS4F/qcB5kFLt1AF5Bhu1RPxo6+JKW2YiurzBX
T8q9WjgPvZaXnniYanWo2i6m+8NlstmZ992TxOH5TK3vuHZG
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.ayrshire.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.ayrshire.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.ayrshire.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.ayrshire.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ayrshire.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDTzCCAjegAwIBAgIUOZZUoGTPxXRfIiQtW+u2H0EjHpEwDQYJKoZIhvcNAQEL
BQAwJDEiMCAGA1UEAwwZc2hpYmJvbGV0aC5heXJzaGlyZS5hYy51azAeFw0xNzA4
MTgxMDA0MTRaFw0zNzA4MTgxMDA0MTRaMCQxIjAgBgNVBAMMGXNoaWJib2xldGgu
YXlyc2hpcmUuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN
VTNDSEgBu7k8D/hDBcu3iRFByLgi8uT18sFSqnK5nHscJfQ+4xlvbyIu5oJrBh0N
2TAIaOmAVPzUAtsiZI2WqAvwG0GFSdlpC6YcCRekLjL65AXPebEoHBS2W1OKrZjx
2Yv/O6hh7GOAevGKXr8UnDVxJhxWYtlGypxAJJhRYQ4T8DKjwkfFzbR1NmFIC0Lp
W9BILAiK4clIJ6gOUTwX84j1b+lXs1n9njAVDAarArws0jryE/Q5XZ2cDtZZvY30
VwJFi9z1NWsH88bl1aDb0V/FstNDuwGnxFQKnj1YzuBbhWou+xQEHQD3CgKQZOMv
3QSOAD4qKAscpEInboYjAgMBAAGjeTB3MB0GA1UdDgQWBBS21/aW5S//uBTRAOGd
6fC8WXhS5jBWBgNVHREETzBNghlzaGliYm9sZXRoLmF5cnNoaXJlLmFjLnVrhjBo
dHRwczovL3NoaWJib2xldGguYXlyc2hpcmUuYWMudWsvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggEBAG46DniYDlvRzFflqUBrq4UcWuA3hV4qqgEYdjHo
SwojGrRZgb9GJpHyx/6B+nQF7liR03+hEon6ok6wvnHOpoZBAvarLN5SkQWselWP
M68tnKCDsC15CuwiSquKeB3lQypfjG1SdU0DASsW7/YQZO0BcIsnea+o5SdBLEy+
TTFfaaFkReiE/FlM7ZrcdN6ImXw8PE3PEnew0/heRbqWQuiA5etTcnsDQe/XFke8
fCUkGaRyIURdSgox789u6CVC/KOrQg78vgIERHO+NI9oSAMXGIas8Pz2AHmP3hwp
KTz9JCaY7Qj0CF0NypYKh6MlIV28P+m6W9Qs8+cbfqodkWc=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.ayrshire.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.ayrshire.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
