<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2099-07-16T06:20:29.298Z" entityID="https://idp.baafs.net.cn/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">baafs.net.cn</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.baafs.net.cn</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.baafs.net.cn</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.baafs.net.cn/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.baafs.net.cn:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.baafs.net.cn:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.baafs.net.cn/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.baafs.net.cn/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.baafs.net.cn/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.baafs.net.cn:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.baafs.net.cn/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.baafs.net.cn/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.baafs.net.cn/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.baafs.net.cn/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">baafs.net.cn</shibmd:Scope>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.baafs.net.cn:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.baafs.net.cn:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
