<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idpprod.ciep.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ciep.fr</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idpprod.ciep.fr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idpprod.ciep.fr</mdui:Description>
                <mdui:Logo height="80" width="80">https://idpprod.ciep.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDKDCCAhCgAwIBAgIVAJyy6Tato2U93llQW3+0/3/cNy7/MA0GCSqGSIb3DQEB
CwUAMBoxGDAWBgNVBAMMD2lkcHRlc3QuY2llcC5mcjAeFw0xODA4MjcxMzE2NTVa
Fw0zODA4MjcxMzE2NTVaMBoxGDAWBgNVBAMMD2lkcHRlc3QuY2llcC5mcjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANlZaHOqd+7plJQ24WOmpnoEqjbH
WOIeYRijU4PomizqE8/H6by7EuW6NQj4tZL46gk/EE3rU+gVIYtumDO+L3Fk4tLy
cGT8Plg1IdKmvNqNpo3FrFyRbQMZANmsIwD66U0M9fXuW0E5DS5M0C9BAaufPRCv
lPow5A9AKLP7iAFrb8oUhy8uHo5SuWroQfwIxFPHMJjRFNEEi5mjA4wHOfzUH3gG
egoP6MiFYQN0YaGm4zYb6fvidy+EK5btrV0DuTUB8gV6KsmV4UgizCunNnF6F4uR
Q1gCAbG97NyMe0YO158DVUCpS3SFHZOhudBUr6Avwe2X4luZ+dZdzvmj/p8CAwEA
AaNlMGMwHQYDVR0OBBYEFNrQTW7885jn+fIfJ18EtRLZxx80MEIGA1UdEQQ7MDmC
D2lkcHRlc3QuY2llcC5mcoYmaHR0cHM6Ly9pZHB0ZXN0LmNpZXAuZnIvaWRwL3No
aWJib2xldGgwDQYJKoZIhvcNAQELBQADggEBAEJSw5r92Tw7zqWwNqK+bheKZt+a
DwPD6FdneRzfnSOMqJkRENE9E3VN6WRUhwTGfTMWfqoC8//6owHOS0YY1CIfc/D8
8CDThdK9HUxo+k+ksCmGsVVVyrpyeDo1Rh1nK2p8RJ6wqi+trSY3lTMpC94gKNvv
Od8Sl92Vs2cw/WzSJ0WkzM4DaCZE06fof6ajsG5Xom/wfq3h0oLU8MlonZvmTfO4
ITbyytee6zIu0LTpCsm3aXMVc2djDvzJIUFI+T2yCJf5Qt5XFRNbAaPYgU3LQYX4
HxqpAeTXiZVWurTtCFGtNWEo09quedXBjV1hWzts6LoQI2CqXf7rJmtptGw=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idpprod.ciep.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idpprod.ciep.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idpprod.ciep.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idpprod.ciep.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idpprod.ciep.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idpprod.ciep.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idpprod.ciep.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idpprod.ciep.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idpprod.ciep.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idpprod.ciep.fr/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ciep.fr</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDVDCCAjwCCQCepQh50dCqaTANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwJG
UjEWMBQGA1UECAwNSUxFIERFIEZSQU5DRTEPMA0GA1UEBwwGU0VWUkVTMQwwCgYD
VQQKDANGRUkxDDAKBgNVBAsMA0RTSTEYMBYGA1UEAwwPaWRwcHJvZC5jaWVwLmZy
MB4XDTI1MTAyMzA5MDU0MVoXDTI2MTAyMzA5MDU0MVowbDELMAkGA1UEBhMCRlIx
FjAUBgNVBAgMDUlMRSBERSBGUkFOQ0UxDzANBgNVBAcMBlNFVlJFUzEMMAoGA1UE
CgwDRkVJMQwwCgYDVQQLDANEU0kxGDAWBgNVBAMMD2lkcHByb2QuY2llcC5mcjCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMeNylu7HM4pZTvSLiU/ApmZ
tcj1FK9/Hu+5/MAYhAKhWATQ36tpeeMOvn2V9B8vOa3mAfgmM8aiyrFcqR5SN5vK
ECTbwHIO10knEXO7ENKRBOXobJzftHFKXfD1nZJDDVfpAGJowLTeO38bGoEGFydu
V8aYHzF8crTpT9I7+0xxdZUkwfN+u5/6xri0yQKBArkMuaGFuNxa7lRPcdVTKC9O
BtFRVObB7HiYgswWWQmitjuEKRW16dHln30GlhbPF5QXEZwOaec+4Feq5awV0SOy
tdMDQCI4KK85eJrsUPdrn8oXaZy7UAMnMTejRCTmf6o5IlxMQrXrITgu9OndJLMC
AwEAATANBgkqhkiG9w0BAQsFAAOCAQEABSu8eR57nY/e2Joxr09f57QWZUUT7bm1
c5Re6POJmVLI3k2UupxXgtUXHOUVcbl2ztKRmXybY9uLwmIVnQ/CqaeTeomkyvyJ
1w5HnorUB9SKuWmIt1rBV0KthtiNPevM6w2nNYi7nuLxE7jg7hSuvNCr40YW7JwT
Z4iTWf0DqMc8bDDyWCTri6tVDfUWHOT3EmQdClkp2xIyt91zM71BmqDDXwxJFoat
yjhcQR+hpUsp9qTgSamP9VAn9Xvqh3QriLguFMwCmKVok4ta0iP+QE3/jf1L7VL5
pa3sq77fN240OLSucseqst5yqSV5RgrF47OqCEXjdnKx0LnYiTWl8Q==
</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idpprod.ciep.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idpprod.ciep.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
