<?xml version="1.0" encoding="UTF-8"?>

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://ssoshib.fhda.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
        <Extensions>
            <shibmd:Scope regexp="false">fhda.edu</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Foothill-De Anza Shibboleth Production</mdui:DisplayName>
                <mdui:Description xml:lang="en">Shibboleth v5 production platform for Foothill-De Anza</mdui:Description>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDLDCCAhSgAwIBAgIVAJV5ORv/6+XirJU/UnL9fAEHkfuwMA0GCSqGSIb3DQEB
BQUAMBsxGTAXBgNVBAMMEHNzb3NoaWIuZmhkYS5lZHUwHhcNMTUwMzMxMjI0MjEz
WhcNMzUwMzMxMjI0MjEzWjAbMRkwFwYDVQQDDBBzc29zaGliLmZoZGEuZWR1MIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7EQdX9+nQwtZj1OWbNcTna+
7oB1fZ+Br4gEfj/cmmeGlJEm74+RESbqYu2l8WLcyeFEivMw4xu2Pn94MCY19SDT
xSMAy0rCg80dTyE9p3JTESyp8XrZmHhKi3PawbtKMxOQte8JV1RLn1SMPw5bsxnQ
25rUlivxR+D+BYXT9PDp7TVjhXsV+q0yzY0HLXxnmCPLKyzPnDNKZjp04GPEcd8E
S9OEKlkikoTlyT4mXkGIQ8Wna6VJB5XbWThZmX5ZXnMq04ZKM1pESXV+fLLNXeTH
43HmRdghN8UENt+3bsq6wn3cMMB/ym2DYL9O10urT6+rg0TOYAQWr4XpDf96iwID
AQABo2cwZTAdBgNVHQ4EFgQUunwahvFACS4C5WS9C2XtNT50utAwRAYDVR0RBD0w
O4IQc3Nvc2hpYi5maGRhLmVkdYYnaHR0cHM6Ly9zc29zaGliLmZoZGEuZWR1L2lk
cC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBBQUAA4IBAQB6BA61xznIwcZhDyuGMPU9
mC2xa4JyFsFPUbKyr93wqn2mzF8ow17Rc/LfYMNbwUi8aYnbI5zSVPz+f8J0wKLc
/2Uogzb1vNLyWCyP0jlh3slKyXz8+BVwel9BkG9EIjt2HK0aVlyY1LrXf4icGz3A
JOECvxpF6ANocqZH09Zqs6PBKOU6bwilN779c1JoFFljdVwOgcO6YRBKGBz7R0Du
wA+5DFZZLuY52nYMdgU8toL/FHjd+UrgBxbEFDxqhrxtf0k8/87CTTATpJlu7wuO
WtEuVRIYXYDSicw6c5c4Fhzpvaw03LVsFvyOysxsf4lOhPOWCtZvxphPQeNeiPuS
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService
            Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ssoshib.fhda.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1" />

        <ArtifactResolutionService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ssoshib.fhda.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2" />

        <!-- Redirect logout requests to CAS -->
        <SingleLogoutService
                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                Location="https://ssoshib.fhda.edu/idp/profile/cas/logout" />

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <!-- Enable various types of supported SSO bindings -->
        <SingleSignOnService
            Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
            Location="https://ssoshib.fhda.edu/idp/profile/Shibboleth/SSO" />

        <SingleSignOnService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://ssoshib.fhda.edu/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
            Location="https://ssoshib.fhda.edu/idp/profile/SAML2/POST-SimpleSign/SSO" />

        <SingleSignOnService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://ssoshib.fhda.edu/idp/profile/SAML2/Redirect/SSO" />

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">fhda.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService
            Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://ssoshib.fhda.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery" />

        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ssoshib.fhda.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
