<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.nwhc.ac.uk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">nwhc.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVAKUnamKmXgk/Lnzrnwf+feRMH4ddMA0GCSqGSIb3DQEB
BQUAMBkxFzAVBgNVBAMTDmlkcC5ud2hjLmFjLnVrMB4XDTEzMDgwNTEwMDExOVoX
DTMzMDgwNTEwMDExOVowGTEXMBUGA1UEAxMOaWRwLm53aGMuYWMudWswggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXdo51PeQig41pAibbuK8eFwjkmWH
wwlJXw7EKABKtCmOpL00UEYy7qpKg8oHdX2VN9UssKX7PtFnDCMEcS1J7V5lbTCm
xOsTc26qIqoPyPY3z5qKETdv9jkl6UezHanB+kG6OOZxYNsZQVmElLsTIbxiW6gT
caGp6LotUxxNurn+kbX+EQas4B74IRrGtIhzG66xYFhQaBHqcsghcs4wQnxAz1hY
aLJ+dns79/BE/MLV+rOcuqKQuRWp4qBEDEbuVA8mQVhtBZmTbxrUCv81cl0tKCGZ
xlc1E3v6jAHGq6sVHJu342NRkW7FCICsKww3RqMUY90G/c1XaUfUAYsTAgMBAAGj
YzBhMEAGA1UdEQQ5MDeCDmlkcC5ud2hjLmFjLnVrhiVodHRwczovL2lkcC5ud2hj
LmFjLnVrL2lkcC9zaGliYm9sZXRoMB0GA1UdDgQWBBSa5qcFRjhigspQsL6d5yEN
3Q9YEjANBgkqhkiG9w0BAQUFAAOCAQEAhQxixhw6sfaHJtRPtYZ9hfhQSi/p0O3h
PllwONLp9zTaUDvPyu5XQ+Oh0//hT8xAiyEDEYBp04/a1HAPFNYMr3uAaYSiXi0P
26zIPlALtOTtF8wpdd88zX4LS567vKihExhZgnJjyLhOlisw4q6PH0FTq1ope8oN
SyWYSxSOjXt4S2+vEJMztj7NNicN1Doa1DA5hqrqIhdP5vrcNgWdRztruJ8YBbsC
NiuA0dJ/7ViPa01B7CdxRahAGUIc3VFLS3IA8JExlHuwyAy2YCQs7+W0ftZa1DID
myaovCB2VxASeOcSFk+AxnroXAhfkukp/5FM4lVI6rOAns40DaSHNw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.nwhc.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.nwhc.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.nwhc.ac.uk/idp/profile/SAML2/Redirect/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.nwhc.ac.uk/idp/profile/SAML2/POST/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.nwhc.ac.uk:8443/idp/profile/SAML2/SOAP/SLO" />
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.nwhc.ac.uk/idp/profile/Shibboleth/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.nwhc.ac.uk/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.nwhc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.nwhc.ac.uk/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">nwhc.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVAKUnamKmXgk/Lnzrnwf+feRMH4ddMA0GCSqGSIb3DQEB
BQUAMBkxFzAVBgNVBAMTDmlkcC5ud2hjLmFjLnVrMB4XDTEzMDgwNTEwMDExOVoX
DTMzMDgwNTEwMDExOVowGTEXMBUGA1UEAxMOaWRwLm53aGMuYWMudWswggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXdo51PeQig41pAibbuK8eFwjkmWH
wwlJXw7EKABKtCmOpL00UEYy7qpKg8oHdX2VN9UssKX7PtFnDCMEcS1J7V5lbTCm
xOsTc26qIqoPyPY3z5qKETdv9jkl6UezHanB+kG6OOZxYNsZQVmElLsTIbxiW6gT
caGp6LotUxxNurn+kbX+EQas4B74IRrGtIhzG66xYFhQaBHqcsghcs4wQnxAz1hY
aLJ+dns79/BE/MLV+rOcuqKQuRWp4qBEDEbuVA8mQVhtBZmTbxrUCv81cl0tKCGZ
xlc1E3v6jAHGq6sVHJu342NRkW7FCICsKww3RqMUY90G/c1XaUfUAYsTAgMBAAGj
YzBhMEAGA1UdEQQ5MDeCDmlkcC5ud2hjLmFjLnVrhiVodHRwczovL2lkcC5ud2hj
LmFjLnVrL2lkcC9zaGliYm9sZXRoMB0GA1UdDgQWBBSa5qcFRjhigspQsL6d5yEN
3Q9YEjANBgkqhkiG9w0BAQUFAAOCAQEAhQxixhw6sfaHJtRPtYZ9hfhQSi/p0O3h
PllwONLp9zTaUDvPyu5XQ+Oh0//hT8xAiyEDEYBp04/a1HAPFNYMr3uAaYSiXi0P
26zIPlALtOTtF8wpdd88zX4LS567vKihExhZgnJjyLhOlisw4q6PH0FTq1ope8oN
SyWYSxSOjXt4S2+vEJMztj7NNicN1Doa1DA5hqrqIhdP5vrcNgWdRztruJ8YBbsC
NiuA0dJ/7ViPa01B7CdxRahAGUIc3VFLS3IA8JExlHuwyAy2YCQs7+W0ftZa1DID
myaovCB2VxASeOcSFk+AxnroXAhfkukp/5FM4lVI6rOAns40DaSHNw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.nwhc.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.nwhc.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>

    <!-- SP metadata for SAML proxy -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
  
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
  
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.nwhc.ac.uk/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
    
</EntityDescriptor>
