<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.daasi.de/idp/shibboleth">

  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
    
    <Extensions>
      <shibmd:Scope regexp="false">daasi.de</shibmd:Scope>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="de">DAASI International</mdui:DisplayName>
        <mdui:DisplayName xml:lang="en">DAASI International</mdui:DisplayName>
        <mdui:Description xml:lang="de">DAASI International Shibboleth IdP</mdui:Description>
        <mdui:Description xml:lang="en">DAASI International Shibboleth IdP</mdui:Description>
        <mdui:InformationURL xml:lang="de">http://www.daasi.de</mdui:InformationURL>
      </mdui:UIInfo>
    </Extensions>
    
    <KeyDescriptor>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>

    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.daasi.de/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.daasi.de/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
    
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.daasi.de/idp/profile/SAML2/Redirect/SLO"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.daasi.de/idp/profile/SAML2/POST/SLO"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.daasi.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.daasi.de/idp/profile/SAML2/SOAP/SLO"/>

    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat> <!-- need this for Keycloak, and order counts -->
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.daasi.de/idp/profile/Shibboleth/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.daasi.de/idp/profile/SAML2/POST/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.daasi.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.daasi.de/idp/profile/SAML2/Redirect/SSO"/>
    <!-- keycloak does not respect this, unfortunately: -->
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="EPPN"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="UID"/> 
  </IDPSSODescriptor>

  <Organization>
    <OrganizationName xml:lang="de">DAASI International</OrganizationName>
    <OrganizationName xml:lang="en">DAASI International</OrganizationName>
    <OrganizationDisplayName xml:lang="de">DAASI International</OrganizationDisplayName>
    <OrganizationDisplayName xml:lang="en">DAASI International</OrganizationDisplayName>
    <OrganizationURL xml:lang="de">http://www.daasi.de</OrganizationURL>
    <OrganizationURL xml:lang="en">http://www.daasi.de</OrganizationURL>
  </Organization>
  <ContactPerson contactType="technical">
    <GivenName>DAASI</GivenName>
    <SurName>Info</SurName>
    <EmailAddress>mailto:info@DAASI.de</EmailAddress>
  </ContactPerson>
  <ContactPerson contactType="support">
    <GivenName>DAASI</GivenName>
    <SurName>Info</SurName>
    <EmailAddress>mailto:info@daasi.de</EmailAddress>
  </ContactPerson>
</EntityDescriptor>
