Resolves SWAMID-3039

1 files changed, 254 insertions, 0 deletions

diff --git a/swamid-2.0/idpv4.lu.se-idp-shibboleth.xml b/swamid-2.0/idpv4.lu.se-idp-shibboleth.xml
new file mode 100644
index 00000000..cb14b0dd
--- /dev/null
+++ b/swamid-2.0/idpv4.lu.se-idp-shibboleth.xml
@@ -0,0 +1,254 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://idpv4.lu.se/idp/shibboleth">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
+      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+  </md:Extensions>
+  <IDPSSODescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+    <Extensions>
+      <shibmd:Scope regexp="false">lu.se</shibmd:Scope>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="sv">Lunds universitet - TEST</mdui:DisplayName>
+        <mdui:DisplayName xml:lang="en">Lund University - TEST</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Identitetstjänst för anställda och studenter vid Lunds universitet</mdui:Description>
+        <mdui:Description xml:lang="en">Identity provider for employees and students at Lund University)</mdui:Description>
+        <mdui:Logo height="71" width="350" xml:lang="sv">https://idpv4.lu.se/idp/images/lu-sv-l-small.png</mdui:Logo>
+        <mdui:Logo height="77" width="350" xml:lang="en">https://idpv4.lu.se/idp/images/lu-en-l-small.png</mdui:Logo>
+        <mdui:Keywords xml:lang="sv">lu lth</mdui:Keywords>
+        <mdui:Keywords xml:lang="en">lu lth</mdui:Keywords>
+        <mdui:InformationURL xml:lang="sv">https://www.lu.se/</mdui:InformationURL>
+        <mdui:InformationURL xml:lang="en">https://www.lunduniversity.lu.se/</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://lucat.blogg.lu.se/att-anvanda-lu-konto/anvandarvillkor-personuppgifter/hantering-av-personuppgifter/</mdui:PrivacyStatementURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://lucat.blogg.lu.se/att-anvanda-lu-konto/anvandarvillkor-personuppgifter/policy-for-management-of-personal-data/</mdui:PrivacyStatementURL>
+      </mdui:UIInfo>
+      <mdui:DiscoHints>
+        <mdui:DomainHint>lu.se</mdui:DomainHint>
+        <mdui:DomainHint>lth.se</mdui:DomainHint>
+        <mdui:IPHint>130.235.0.0/16</mdui:IPHint>
+      </mdui:DiscoHints>
+    </Extensions>
+    <!-- First signing certificate is BackChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+                        MIIEGDCCAoCgAwIBAgIVAKdIP7eMddg3zDrWrc+09WAj2x7AMA0GCSqGSIb3DQEB
+                        CwUAMBYxFDASBgNVBAMMC2lkcHY0Lmx1LnNlMB4XDTIwMDQyMjEyNTgzMloXDTQw
+                        MDQyMjEyNTgzMlowFjEUMBIGA1UEAwwLaWRwdjQubHUuc2UwggGiMA0GCSqGSIb3
+                        DQEBAQUAA4IBjwAwggGKAoIBgQCvHmABYJf9A/WJ5+cUcWp9dTSfMZQZHJ+z7B04
+                        J+H133U7VP7jBHl36XL2CEdl7G0eCbk01Cw7IbkcIaQwLa3dJGgADMM8Lh0iE/BE
+                        4YG1p779QdZU77ZT/91FDsXn/B9qsY0NsYxWCvxUN52qX7+a9ZgW35xEfMDEF6ZW
+                        R3Bll3VZyqwtYbE7jU/f0ujyRFmntYl3dGMRamlzu9o7+sXLi1xlceJMWWADh63O
+                        eNGWm2XKWeGtmGyyyeo8mQbDBZNmS6K5WEIznhzXPJfbwMlXrLye041/r2kppB+Y
+                        4nISfL6S1IuPObw0HM9kosBlrwZFjP++Wodmt6OHXiHLbKA2rj/Jxt7BpxIGM5It
+                        7cEFAn6J/5MvsqGmWVLnCMPF1vzq866oQdDLfNJXCbyOgvPDPnw/Zl6bb3qYx5Kk
+                        PvQsTMK36e8zB/pFrzagSgbFkYQuUA+KNBgIpgeMO3bpoRZ4S7wc0Vq7JShJ9fBQ
+                        uP6NtJw6iTehHMDFTn8kbU9LxnECAwEAAaNdMFswHQYDVR0OBBYEFMUWZ/DnrU5S
+                        unY+y/Upo+dVljnpMDoGA1UdEQQzMDGCC2lkcHY0Lmx1LnNlhiJodHRwczovL2lk
+                        cHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQALwnh8
+                        uEl9xWrin4vPLm+Mc0THPPVaeGZF1ivyDcY5WefOXaxaX80BxHKOcA2aG/+Ne/Ko
+                        k9u1COHrjp3QfkHE2SQTAPoD4EWtHaiCyoBYnwRA1qfSFbcnVlZOr9IOIRAA6TiS
+                        iE+G4kf9QW/xUSmONPGLU8vqXuisxTr46XjQMbl+dtTZ5fxURKFFv21C0KBXMkLI
+                        xSzTTn9Q0acVT07oNgNQscJtWtStXbsrEhQ9+uyEd3xCF883BjpF4nDDtLOo0jXD
+                        iyhJcGU4fKD4MMeREoKb+OKLpCqE+8BdmO93kMJLrbdS1EPIlVG1fShtJCeF40EL
+                        C4Ns9OOYE0uD7tQG4oQQht3WFSiS95Plylg62BGqk5LpwODuDpuO7tqZkLbI5gN1
+                        7S98DoMZftlEg8leJv1NuaBIKD/C/WI6OPAqVmBCckb6R8eGU7yGGc2i2qZ9yC2r
+                        3SMS6VsKOZJv77OE9yzH7JF8aKjaSNHu1lpP42IG/hmrAgNjQMTbXFyni5o=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <!-- Second signing certificate is FrontChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+			MIIEGDCCAoCgAwIBAgIVALae7VoaIcI/4rrT+/szHHki9TuEMA0GCSqGSIb3DQEB
+			CwUAMBYxFDASBgNVBAMMC2lkcHY0Lmx1LnNlMB4XDTIwMDQyMjEyNTc0NVoXDTQw
+			MDQyMjEyNTc0NVowFjEUMBIGA1UEAwwLaWRwdjQubHUuc2UwggGiMA0GCSqGSIb3
+			DQEBAQUAA4IBjwAwggGKAoIBgQCzN4NFUJ5I2R08SllQy3zS5Gc4WBPx0R+wE6/w
+			QpU1QaQF41/BHzY7fwS/rVABmv/RsBLVe35h3yTuKo4pEQ3LkWhQEhaxkKOGaUNR
+			Z+bonBFjhAlTqwLYcC6StE59POkaQc2MLiVJcBsW64kYk6ENYTCJC287k7C9YjwK
+			o2rpyvG4ZAY50Cv0pMvB0eLaCJIG1ypwbU1TakUYsoR0Dl2j7DWkh899hyKJKbOj
+			xosvWqfZ7g3bT8II7VMTai4Y0jT0yO2SIRe4oT3/veISYeJgxNI/jvGbFdD1s7nL
+			4J+QamCRGQo5stasOdTMzXpWdlW87hB8/22qWNgEQ98B97fZmM3FT4aUPN+07tJe
+			4lPJADf4PTLs3uqSqRQ5nQZKkQp1hc7L0Qnl4dPdlYdgqBOJiJT80dkfH6/4nldV
+			Mn/817W8X27/yXII39Rmrq9C2fvCT4QGMuebkYaCYZ6bvYQfDGSUkwY2oaffKxQL
+			qWDcTRMOkmhsikCDWXdkC07zbCkCAwEAAaNdMFswHQYDVR0OBBYEFG2dqJIPVRHa
+			DyG6RRTY6sTB055EMDoGA1UdEQQzMDGCC2lkcHY0Lmx1LnNlhiJodHRwczovL2lk
+			cHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQCPmSd7
+			8LmOdb6nyu+enxNaZEFg1TDOV7JCcCJUqsRyQBoWlTezGlZWhoQ7bAvhtZVyjkwV
+			BGSHklHdzGwXv3R37CVY012QVJD1mmj+OOjMi6OZJ+emKyOO/TeSlET3m5XNmoJd
+			Oya3ofYYRYgdYQI0KAvfTtJe3fk5zSmnWR9dw2KUm7XB63HPFoDaK+PWO+46x0wR
+			gdcXF4i8LqaLlijDxRECpIWtYdGxYDDFVNYXPSR/E6WhP0OkCHJpMyW3uhN+KzNW
+			p5ZLpI8YZPJikKtAdJOl/GhUDYP0+UBecIs6PAbAkcoqcr6CRhpCZn6CPa4Dyiyq
+			3XVu2CGPUhYtXsRYtkJGu7FOMKYoGvm2W6KUwE5A5nR3kFguCbjaYmDTm6fRvO19
+			UHOkhlkwi7FZQRIfICn4GPW8+QlSvrCt5IVSMr+tdMlXbhxfDBnMG96bRp8UzGDq
+			qLV+J6JXH5Uyx9L2sLDwlsKDxMxakoPYZidS3VUZgydMQ77LkW6nrfeE6QY=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+			MIIEGDCCAoCgAwIBAgIVAPacJ0kuXSIr9hVPqts20i1hXvnpMA0GCSqGSIb3DQEB
+			CwUAMBYxFDASBgNVBAMMC2lkcHY0Lmx1LnNlMB4XDTIwMDQyMjEyNTc0NloXDTQw
+			MDQyMjEyNTc0NlowFjEUMBIGA1UEAwwLaWRwdjQubHUuc2UwggGiMA0GCSqGSIb3
+			DQEBAQUAA4IBjwAwggGKAoIBgQCEdojjsZjgcD+FETx5Jz9vqfCVdvED2+uujbt0
+			hS0crcUjGSlbvvSq/edcxNytITYVb/XKgbrvFtP46j8fhEgpzBvpnjXL/KxIwoGt
+			4908I+hNqEByBsXA3CPxZ13Y9z9wuxl4K/A0NLOAA7W74FJB33Xh1LpZUSiRP4Am
+			zzW74k0vcLbSacwno2GSopOfnuFj2EjEcwCh0HSvKDglpQfaKAarPYQMGlBJSjeN
+			TX6bs4pkyqnUB5R5l38wOrBHwE6oqKXqWBARRqmFD6qTzAq3OiVVo5t7FMwPSH7r
+			ue+K3EM6dG4E0Wmp2KVwwpu4whhLSlRSg5FEpMdW2fMzDxaaMsxZWuedV32NXYpc
+			tAnS3r3VqcuE2L0GMs4H7Xy8dbDsO0kcOWs4avQnZe4gay2lFXzyQbGkbkGrw+e9
+			l+jdTmurLmxy69P4xgJUpW4Fb1S1cn/yXPe16D7LW9DWDXlhZnHc6LHh5t6shnE7
+			g96vckx9apGdPKco2Zbz67WtDHMCAwEAAaNdMFswHQYDVR0OBBYEFCbme+8q4WRW
+			RcMDwrZuHgNZ2nsKMDoGA1UdEQQzMDGCC2lkcHY0Lmx1LnNlhiJodHRwczovL2lk
+			cHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQB8iLyd
+			Ahx6hglEmnYEXjbaD47m6cOcdRhtkLailVusIHfUcBZXJifZrHKP0EaLBuvXQ+CM
+			4AzO00J2IU5Iv4KMadVWu8PFn8de1kVNN/2fcMfYCscWJ6kgvnxZZ0KsWFQm9XC+
+			5bkq2UQsTZLETCyT7da6F4BCAQfy5lKaLFF7e6JUQbnA/6+B3mLFE29y2EJnDifR
+			vZ9AKP+9S4oGnavxczUtT7uIJhkzuTBj2SqdUOPRlj9eu3bCHQ9k0GEv9Uoo+Phh
+			h1siurnjmkHQHZxz6Jn4FEf5mLKhxFoyKET8gL3ueLRKIKmFrYXp/Y1OyI7jaHBB
+			4+JMu3921iPKiXqFVPu/pPdUFroyF6qklOAdVUhNsKNuV7R3X4v+QijNWxL0aE9Z
+			Qj27T8aBUjh/SiMdgRBpEdnIABtBBOiznZQPAHQPeYIuE9ZFwtSto5LHXLuCPTsd
+			GrCh3rUTEojgrcUQEW3DV3dOkFRG0WkIKbZfrs5gwb1bqjpVhle488QNBzc=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idpv4.lu.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idpv4.lu.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idpv4.lu.se/idp/profile/SAML2/POST/SLO"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idpv4.lu.se/idp/profile/SAML2/Redirect/SLO"/>
+    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idpv4.lu.se/idp/profile/Shibboleth/SSO"/>
+    <SingleSignOnService xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idpv4.lu.se/idp/profile/SAML2/Redirect/SSO"/>
+    <SingleSignOnService xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idpv4.lu.se/idp/profile/SAML2/POST/SSO"/>
+  </IDPSSODescriptor>
+  <AttributeAuthorityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <Extensions>
+      <shibmd:Scope regexp="false">lu.se</shibmd:Scope>
+    </Extensions>
+    <!-- First signing certificate is BackChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+			MIIEGDCCAoCgAwIBAgIVAKdIP7eMddg3zDrWrc+09WAj2x7AMA0GCSqGSIb3DQEB
+			CwUAMBYxFDASBgNVBAMMC2lkcHY0Lmx1LnNlMB4XDTIwMDQyMjEyNTgzMloXDTQw
+			MDQyMjEyNTgzMlowFjEUMBIGA1UEAwwLaWRwdjQubHUuc2UwggGiMA0GCSqGSIb3
+			DQEBAQUAA4IBjwAwggGKAoIBgQCvHmABYJf9A/WJ5+cUcWp9dTSfMZQZHJ+z7B04
+			J+H133U7VP7jBHl36XL2CEdl7G0eCbk01Cw7IbkcIaQwLa3dJGgADMM8Lh0iE/BE
+			4YG1p779QdZU77ZT/91FDsXn/B9qsY0NsYxWCvxUN52qX7+a9ZgW35xEfMDEF6ZW
+			R3Bll3VZyqwtYbE7jU/f0ujyRFmntYl3dGMRamlzu9o7+sXLi1xlceJMWWADh63O
+			eNGWm2XKWeGtmGyyyeo8mQbDBZNmS6K5WEIznhzXPJfbwMlXrLye041/r2kppB+Y
+			4nISfL6S1IuPObw0HM9kosBlrwZFjP++Wodmt6OHXiHLbKA2rj/Jxt7BpxIGM5It
+			7cEFAn6J/5MvsqGmWVLnCMPF1vzq866oQdDLfNJXCbyOgvPDPnw/Zl6bb3qYx5Kk
+			PvQsTMK36e8zB/pFrzagSgbFkYQuUA+KNBgIpgeMO3bpoRZ4S7wc0Vq7JShJ9fBQ
+			uP6NtJw6iTehHMDFTn8kbU9LxnECAwEAAaNdMFswHQYDVR0OBBYEFMUWZ/DnrU5S
+			unY+y/Upo+dVljnpMDoGA1UdEQQzMDGCC2lkcHY0Lmx1LnNlhiJodHRwczovL2lk
+			cHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQALwnh8
+			uEl9xWrin4vPLm+Mc0THPPVaeGZF1ivyDcY5WefOXaxaX80BxHKOcA2aG/+Ne/Ko
+			k9u1COHrjp3QfkHE2SQTAPoD4EWtHaiCyoBYnwRA1qfSFbcnVlZOr9IOIRAA6TiS
+			iE+G4kf9QW/xUSmONPGLU8vqXuisxTr46XjQMbl+dtTZ5fxURKFFv21C0KBXMkLI
+			xSzTTn9Q0acVT07oNgNQscJtWtStXbsrEhQ9+uyEd3xCF883BjpF4nDDtLOo0jXD
+			iyhJcGU4fKD4MMeREoKb+OKLpCqE+8BdmO93kMJLrbdS1EPIlVG1fShtJCeF40EL
+			C4Ns9OOYE0uD7tQG4oQQht3WFSiS95Plylg62BGqk5LpwODuDpuO7tqZkLbI5gN1
+			7S98DoMZftlEg8leJv1NuaBIKD/C/WI6OPAqVmBCckb6R8eGU7yGGc2i2qZ9yC2r
+			3SMS6VsKOZJv77OE9yzH7JF8aKjaSNHu1lpP42IG/hmrAgNjQMTbXFyni5o=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <!-- Second signing certificate is FrontChannel -->
+    <KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+			MIIEGDCCAoCgAwIBAgIVALae7VoaIcI/4rrT+/szHHki9TuEMA0GCSqGSIb3DQEB
+			CwUAMBYxFDASBgNVBAMMC2lkcHY0Lmx1LnNlMB4XDTIwMDQyMjEyNTc0NVoXDTQw
+			MDQyMjEyNTc0NVowFjEUMBIGA1UEAwwLaWRwdjQubHUuc2UwggGiMA0GCSqGSIb3
+			DQEBAQUAA4IBjwAwggGKAoIBgQCzN4NFUJ5I2R08SllQy3zS5Gc4WBPx0R+wE6/w
+			QpU1QaQF41/BHzY7fwS/rVABmv/RsBLVe35h3yTuKo4pEQ3LkWhQEhaxkKOGaUNR
+			Z+bonBFjhAlTqwLYcC6StE59POkaQc2MLiVJcBsW64kYk6ENYTCJC287k7C9YjwK
+			o2rpyvG4ZAY50Cv0pMvB0eLaCJIG1ypwbU1TakUYsoR0Dl2j7DWkh899hyKJKbOj
+			xosvWqfZ7g3bT8II7VMTai4Y0jT0yO2SIRe4oT3/veISYeJgxNI/jvGbFdD1s7nL
+			4J+QamCRGQo5stasOdTMzXpWdlW87hB8/22qWNgEQ98B97fZmM3FT4aUPN+07tJe
+			4lPJADf4PTLs3uqSqRQ5nQZKkQp1hc7L0Qnl4dPdlYdgqBOJiJT80dkfH6/4nldV
+			Mn/817W8X27/yXII39Rmrq9C2fvCT4QGMuebkYaCYZ6bvYQfDGSUkwY2oaffKxQL
+			qWDcTRMOkmhsikCDWXdkC07zbCkCAwEAAaNdMFswHQYDVR0OBBYEFG2dqJIPVRHa
+			DyG6RRTY6sTB055EMDoGA1UdEQQzMDGCC2lkcHY0Lmx1LnNlhiJodHRwczovL2lk
+			cHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQCPmSd7
+			8LmOdb6nyu+enxNaZEFg1TDOV7JCcCJUqsRyQBoWlTezGlZWhoQ7bAvhtZVyjkwV
+			BGSHklHdzGwXv3R37CVY012QVJD1mmj+OOjMi6OZJ+emKyOO/TeSlET3m5XNmoJd
+			Oya3ofYYRYgdYQI0KAvfTtJe3fk5zSmnWR9dw2KUm7XB63HPFoDaK+PWO+46x0wR
+			gdcXF4i8LqaLlijDxRECpIWtYdGxYDDFVNYXPSR/E6WhP0OkCHJpMyW3uhN+KzNW
+			p5ZLpI8YZPJikKtAdJOl/GhUDYP0+UBecIs6PAbAkcoqcr6CRhpCZn6CPa4Dyiyq
+			3XVu2CGPUhYtXsRYtkJGu7FOMKYoGvm2W6KUwE5A5nR3kFguCbjaYmDTm6fRvO19
+			UHOkhlkwi7FZQRIfICn4GPW8+QlSvrCt5IVSMr+tdMlXbhxfDBnMG96bRp8UzGDq
+			qLV+J6JXH5Uyx9L2sLDwlsKDxMxakoPYZidS3VUZgydMQ77LkW6nrfeE6QY=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>
+			MIIEGDCCAoCgAwIBAgIVAPacJ0kuXSIr9hVPqts20i1hXvnpMA0GCSqGSIb3DQEB
+			CwUAMBYxFDASBgNVBAMMC2lkcHY0Lmx1LnNlMB4XDTIwMDQyMjEyNTc0NloXDTQw
+			MDQyMjEyNTc0NlowFjEUMBIGA1UEAwwLaWRwdjQubHUuc2UwggGiMA0GCSqGSIb3
+			DQEBAQUAA4IBjwAwggGKAoIBgQCEdojjsZjgcD+FETx5Jz9vqfCVdvED2+uujbt0
+			hS0crcUjGSlbvvSq/edcxNytITYVb/XKgbrvFtP46j8fhEgpzBvpnjXL/KxIwoGt
+			4908I+hNqEByBsXA3CPxZ13Y9z9wuxl4K/A0NLOAA7W74FJB33Xh1LpZUSiRP4Am
+			zzW74k0vcLbSacwno2GSopOfnuFj2EjEcwCh0HSvKDglpQfaKAarPYQMGlBJSjeN
+			TX6bs4pkyqnUB5R5l38wOrBHwE6oqKXqWBARRqmFD6qTzAq3OiVVo5t7FMwPSH7r
+			ue+K3EM6dG4E0Wmp2KVwwpu4whhLSlRSg5FEpMdW2fMzDxaaMsxZWuedV32NXYpc
+			tAnS3r3VqcuE2L0GMs4H7Xy8dbDsO0kcOWs4avQnZe4gay2lFXzyQbGkbkGrw+e9
+			l+jdTmurLmxy69P4xgJUpW4Fb1S1cn/yXPe16D7LW9DWDXlhZnHc6LHh5t6shnE7
+			g96vckx9apGdPKco2Zbz67WtDHMCAwEAAaNdMFswHQYDVR0OBBYEFCbme+8q4WRW
+			RcMDwrZuHgNZ2nsKMDoGA1UdEQQzMDGCC2lkcHY0Lmx1LnNlhiJodHRwczovL2lk
+			cHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQB8iLyd
+			Ahx6hglEmnYEXjbaD47m6cOcdRhtkLailVusIHfUcBZXJifZrHKP0EaLBuvXQ+CM
+			4AzO00J2IU5Iv4KMadVWu8PFn8de1kVNN/2fcMfYCscWJ6kgvnxZZ0KsWFQm9XC+
+			5bkq2UQsTZLETCyT7da6F4BCAQfy5lKaLFF7e6JUQbnA/6+B3mLFE29y2EJnDifR
+			vZ9AKP+9S4oGnavxczUtT7uIJhkzuTBj2SqdUOPRlj9eu3bCHQ9k0GEv9Uoo+Phh
+			h1siurnjmkHQHZxz6Jn4FEf5mLKhxFoyKET8gL3ueLRKIKmFrYXp/Y1OyI7jaHBB
+			4+JMu3921iPKiXqFVPu/pPdUFroyF6qklOAdVUhNsKNuV7R3X4v+QijNWxL0aE9Z
+			Qj27T8aBUjh/SiMdgRBpEdnIABtBBOiznZQPAHQPeYIuE9ZFwtSto5LHXLuCPTsd
+			GrCh3rUTEojgrcUQEW3DV3dOkFRG0WkIKbZfrs5gwb1bqjpVhle488QNBzc=
+                    </ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </KeyDescriptor>
+    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idpv4.lu.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+  </AttributeAuthorityDescriptor>
+  <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+    <OrganizationName xml:lang="en">LU</OrganizationName>
+    <OrganizationDisplayName xml:lang="sv">Lunds universitet</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Lund University</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.lu.se/</OrganizationURL>
+  </Organization>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="administrative">
+    <GivenName>Eskil</GivenName>
+    <SurName>Swahn</SurName>
+    <EmailAddress>mailto:eskil.swahn@ldc.lu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
+    <GivenName>Johan</GivenName>
+    <SurName>Silverup</SurName>
+    <EmailAddress>mailto:johan.silverup@ldc.lu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
+    <SurName>LU Servicedesk</SurName>
+    <EmailAddress>mailto:servicedesk@lu.se</EmailAddress>
+  </ContactPerson>
+  <ContactPerson xmlns:remd="http://refeds.org/metadata" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+    <GivenName>IRT Lund University</GivenName>
+    <EmailAddress>mailto:abuse@lu.se</EmailAddress>
+    <TelephoneNumber>+46462229000</TelephoneNumber>
+  </ContactPerson>
+</md:EntityDescriptor>