http://mds.edugain.org into swamid-interfederations-2.0

1 files changed, 182 insertions, 98 deletions

diff --git a/swamid-interfederations-2.0/idp.sussexdowns.ac.uk-idp-shibboleth.xml b/swamid-interfederations-2.0/idp.sussexdowns.ac.uk-idp-shibboleth.xml
index 43f02294..e416d4e1 100644
--- a/swamid-interfederations-2.0/idp.sussexdowns.ac.uk-idp-shibboleth.xml
+++ b/swamid-interfederations-2.0/idp.sussexdowns.ac.uk-idp-shibboleth.xml
@@ -1,116 +1,200 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.sussexdowns.ac.uk/idp/shibboleth">
-  <!--
-		This is a Shibboleth IdP for Sussex Downs College.
-	-->
-  <Extensions>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.sussexdowns.ac.uk/idp/shibboleth">
+  <md:Extensions>
     <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://ukfederation.org.uk" registrationInstant="2011-08-02T14:30:00Z">
       <mdrpi:RegistrationPolicy xml:lang="en">http://ukfederation.org.uk/doc/mdrps-20130902</mdrpi:RegistrationPolicy>
     </mdrpi:RegistrationInfo>
-  </Extensions>
-  <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
-    <Extensions>
+  </md:Extensions>
+  <md:IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
       <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">sussexdowns.ac.uk</shibmd:Scope>
-    </Extensions>
-    <KeyDescriptor>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
         <ds:X509Data>
           <ds:X509Certificate>
-						MIIEwjCCA6qgAwIBAgIQTrh+jfRf1aCGSyqnZqrgqTANBgkqhkiG9w0BAQUFADA2
-						MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
-						U1NMIENBMB4XDTEzMDEyMjAwMDAwMFoXDTE2MDEyMjIzNTk1OVowgY0xCzAJBgNV
-						BAYTAkdCMRQwEgYDVQQIEwtFYXN0IFN1c3NleDEOMAwGA1UEBxMFTGV3ZXMxHTAb
-						BgNVBAoTFFN1c3NleCBEb3ducyBDb2xsZWdlMRkwFwYDVQQLExBOZXR3b3JrIFNl
-						cnZpY2VzMR4wHAYDVQQDExVpZHAuc3Vzc2V4ZG93bnMuYWMudWswggEiMA0GCSqG
-						SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzasViv6sqpPwhpSx5LMRX+IIZX/Us0+T6
-						Umeqz/zzATJ2oAq/Vc3K6vbkWHOqBRSHu81YTtubITgCVamjjeMRw2upCWP52z45
-						X4NG6uueNOxsHArEsI34nKumCJPpGi7g/yEI2t55MlXRKCjYx0SGXQ+HQVbS5+ck
-						7Xfg14J3ykCrVP20tg03VCWABX8HpFGs2jBXdaTMzJNPQDgUspBoahdaVdSAzPJH
-						rE+r6OzM39siItlYUuw6HROqUCNsPPBx5+weO/zzbaj1sfAxfuM7qq5E3v1uDXcC
-						sm9ci3Ai7sigirORZYWcbD1y1HeUgZFlUt9vW3lUyCrze3FKhkNvAgMBAAGjggFy
-						MIIBbjAfBgNVHSMEGDAWgBQMvZNoDPPeq6NJays3V0fqkOO57TAdBgNVHQ4EFgQU
-						stJtWpehWtVLmajr+G8NZ33QgaowDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC
-						MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIGA1UdIAQbMBkwDQYL
-						KwYBBAGyMQECAh0wCAYGZ4EMAQICMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9j
-						cmwudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUFBwEBBGEw
-						XzA1BggrBgEFBQcwAoYpaHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9URVJFTkFT
-						U0xDQS5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJlbmEub3Jn
-						MCAGA1UdEQQZMBeCFWlkcC5zdXNzZXhkb3ducy5hYy51azANBgkqhkiG9w0BAQUF
-						AAOCAQEAX6a8z1WqpzNGKYLE3plawtzyMa8cwkvZnNvkAdyl0PSFF4ylEHBjF85n
-						0ZXE6FqIpLUZJxlKKfqj3CeIxFqX1noxKndZzu7QsxcspXU3ubPWVJBoJZ4XO4jr
-						G9Gw+R+kR5e3QfNDrCZKmU247vuvJIqnbF9NT+gm7IHBvFLnx+r3zxUpX4Ca8D8+
-						IkrhWCUQ9kS2brLwJ/nJhY9P00IaeYFQiC2UEYqf71UskUw8i0BNw/33/q1lUYy6
-						VsyB6e6DKfCbunbrHgMyk4/qvOy2JfvGh+41qEJENYKaOqu00MDk0R7yzrMWXEIH
-						3TlWjRfFNTVhbVx6Di+CwcDEcXpQ2g==
+						MIIDPzCCAiegAwIBAgIURAFiqUwkPEeqc96JttxXGAE26L4wDQYJKoZIhvcNAQEL
+						BQAwIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25zLmFjLnVrMB4XDTE1MTIxNzEx
+						MTkzN1oXDTM1MTIxNzExMTkzN1owIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25z
+						LmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlGQ/46Zz8XS
+						ITjMuhfDCzm5/oD4jbdpqXDIhZ1wYs2RGgv76L4qDT6DFM9ZayZ5j/pMyA+Nu66Y
+						rsO4gfhrVsaZvM16QX8+/jNdYMbBkPdIu/6VaZWXrGFyaX1G0gDR+eeUbsfhTjPA
+						O/UlHeaT+veqE7qea/HcDmE4IyuPg+VihxiWbUJr7AWM3PsHY3vxGF56F660CJB6
+						+3x/dITHpaLzTDjx4+EJHQx15YA3JFy/oVmzlFXiGv7bFeaGFkwXRbGITy3i9qrQ
+						TkPH0d0vVoliQUy/WA6kYg3zvEo1AuvFPOBikoyuvG/S0/MdYdYtQ88XNN/JD71g
+						e49Rhe7PAQIDAQABo3EwbzAdBgNVHQ4EFgQU+P2pTqq/YUXsA6I/zNvITmp9m/Qw
+						TgYDVR0RBEcwRYIVaWRwLnN1c3NleGRvd25zLmFjLnVrhixodHRwczovL2lkcC5z
+						dXNzZXhkb3ducy5hYy51ay9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
+						AQEAOU6r12uD595fLRVZ/MZDYZ1ZeyJpGvLzQdb9UizHt8V1hdVGPcNY+GfL4bp7
+						QrGPnWr+e64PvswEXA25ELy3ecpsNAdbL5u2iGpYgDLnqqX3+wmaGwSyTkT9bQ8H
+						DIyt0PGnv9OjLm8Cv+UEYyneTP/sha3QRUdXrgqlAaWu489ZbSiaPoNd9gRg7E6i
+						Z9HN/Yt9NiPHit56211YR/a/SZY7bX/ML3G9mOhTPy0lnYh/dFJjLLKNJnK0BXDq
+						qRGS+ddJ2d88CbPTgU0IIAKzNK3OnmEX/PJ/WJOgKV1ThFXs2d3EWeL46AKrgHMW
+						t52x/Ffb6//Lld/tcohp/7D89g==
 					</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-    </KeyDescriptor>
-    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
-    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
-    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
-    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.sussexdowns.ac.uk/idp/profile/Shibboleth/SSO"/>
-    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.sussexdowns.ac.uk/idp/profile/SAML2/POST/SSO"/>
-    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.sussexdowns.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
-    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.sussexdowns.ac.uk/idp/profile/SAML2/Redirect/SSO"/>
-  </IDPSSODescriptor>
-  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
-    <Extensions>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>
+						MIIDQDCCAiigAwIBAgIVAOIaZM3vDoHKS6s49KFRowGWMrhoMA0GCSqGSIb3DQEB
+						CwUAMCAxHjAcBgNVBAMMFWlkcC5zdXNzZXhkb3ducy5hYy51azAeFw0xNTEyMTcx
+						MTE5MzVaFw0zNTEyMTcxMTE5MzVaMCAxHjAcBgNVBAMMFWlkcC5zdXNzZXhkb3du
+						cy5hYy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIpvgW9+B595
+						D0WgHoZOS4cBeQc9GfA9kSPW1EyyfManq4uJ/DTqlaFTVwKUyfq4TAxrDDTR5Oty
+						cEdZQVzlrWxXXCf1x1MbvGmx3XsLj3VG/CSDEoFVlUlP2Fyhf9x4WWiFETbmeDTy
+						SXbI5/7i1R4sFIdatgJzEsTmVxVshtfVZca3Th0JuWUGd4bRpfFC7w32uwa/aUSx
+						JRQpN6pP3Wgp0cl9LBHWvq7vvnwYFxW2WwnW15SsFXMOp8wYYxvuJd60U+tndpFL
+						k5drnW33mF12so1k8MlJDu04tSMENE0U02YjF1ZElImKvtgEfLwbJzFTJFnFNJn2
+						JPS/P42KlKECAwEAAaNxMG8wHQYDVR0OBBYEFG3Rqg36hQNcgq33iUo4KK4Zdy7n
+						ME4GA1UdEQRHMEWCFWlkcC5zdXNzZXhkb3ducy5hYy51a4YsaHR0cHM6Ly9pZHAu
+						c3Vzc2V4ZG93bnMuYWMudWsvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQAD
+						ggEBAIRIojOcGmCWa9k1bPDPYIoaNf/ZVXQokPMBIV6szhP1+/pYQYf3JY/0hAXv
+						TcZRDFdd708Y3IByyH/WckVzQFuQq1WSN90DPIgKKXf3SLGXhnv9eVC9MnUlB7s2
+						83YCmBNctkQQ4ZEu2ZvchQaxzp0Gx+Emu7lyDM20XdqCZfR2ovuLq9LlOdtlGxgO
+						GRr0Do1F9M6GFLCZg/t4D7+cjOP0+v7HB/dmLItt9zAaRWDIrnQqoP940PwaBqCh
+						NYbRkFbjPKQhDvO4kI4QqLYBCvVWEsba+Z+/scBMWwHU4fHONpP4s/54gYifgH/e
+						APhr3gWeqRKI8ywdO1Rm4eziOxE=
+					</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>
+						MIIDPzCCAiegAwIBAgIUa5OG5i1Wpluu9P44ecwPAnoEUWowDQYJKoZIhvcNAQEL
+						BQAwIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25zLmFjLnVrMB4XDTE1MTIxNzEx
+						MTkzNloXDTM1MTIxNzExMTkzNlowIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25z
+						LmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGUkJb5iXiLp
+						6RtG+A0Clx5j9lrmAmvU/PKUFCCv/UCuFeIVsXAeBzz0mdGOdPw+17p1xQssyro5
+						mD80ikQV3eCnSqJt3N9opH+itpeZWLnvqIbv7DnCg1iqT4GbYQF2b6OlrIrdyYtO
+						DR+15R2WRTz2wqhv4buLe0fhTXDFKD15SE8CEl/hRxXq8ccG1syhb/LjcG3uXgPz
+						wEtP4iKPCCJG2I9tX85+Darae5JIs2qHebiiuFUyUv+u2x2a9uK4VsmfWVGPdttm
+						OzOrGmxQ89aP8Bjf32sxuJ6WnLpC9hmAtN0oIMRknTOckjD5c1Kyvk77yxJ2dnk5
+						JHaEaUCaUQIDAQABo3EwbzAdBgNVHQ4EFgQUfHVM1sqRpbYALTwazKjUJmqyS6ow
+						TgYDVR0RBEcwRYIVaWRwLnN1c3NleGRvd25zLmFjLnVrhixodHRwczovL2lkcC5z
+						dXNzZXhkb3ducy5hYy51ay9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
+						AQEAWDD1JH+p8VZRUKTNOvcMIHK58/fgYudN+Ce205BdFeAk+5lQFNmbGlQ1089U
+						1zCDqTkDOZOL6BuLocAPRqAK+IAyTFpHXA3XeZWU/AtEPxyaETtXiWn0CONd8oBV
+						4sXKlWCUpv8PEdG8HG00ssDDDjnJwGSS0kX7pSzVfbLoKFC5CJgLAIiyBt7xk3X8
+						IwccljGvtByHXsPyhiKcNwIhrCwArOqG96rmCTZh7oX6WvSMFEs+w8oBb0PMZp/3
+						Q16I9/JE3NKX6hVlO19PFwBeJ9ZlVh53zBDSfIuZPlGYK5KFlC3PE/HowDnPa3Xv
+						cd/dBsqyzhYBk6a6l0Gi7CukFQ==
+					</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.sussexdowns.ac.uk/idp/profile/Shibboleth/SSO"/>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.sussexdowns.ac.uk/idp/profile/SAML2/POST/SSO"/>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.sussexdowns.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.sussexdowns.ac.uk/idp/profile/SAML2/Redirect/SSO"/>
+  </md:IDPSSODescriptor>
+  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
+    <md:Extensions>
       <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">sussexdowns.ac.uk</shibmd:Scope>
-    </Extensions>
-    <KeyDescriptor>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>
+						MIIDPzCCAiegAwIBAgIURAFiqUwkPEeqc96JttxXGAE26L4wDQYJKoZIhvcNAQEL
+						BQAwIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25zLmFjLnVrMB4XDTE1MTIxNzEx
+						MTkzN1oXDTM1MTIxNzExMTkzN1owIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25z
+						LmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlGQ/46Zz8XS
+						ITjMuhfDCzm5/oD4jbdpqXDIhZ1wYs2RGgv76L4qDT6DFM9ZayZ5j/pMyA+Nu66Y
+						rsO4gfhrVsaZvM16QX8+/jNdYMbBkPdIu/6VaZWXrGFyaX1G0gDR+eeUbsfhTjPA
+						O/UlHeaT+veqE7qea/HcDmE4IyuPg+VihxiWbUJr7AWM3PsHY3vxGF56F660CJB6
+						+3x/dITHpaLzTDjx4+EJHQx15YA3JFy/oVmzlFXiGv7bFeaGFkwXRbGITy3i9qrQ
+						TkPH0d0vVoliQUy/WA6kYg3zvEo1AuvFPOBikoyuvG/S0/MdYdYtQ88XNN/JD71g
+						e49Rhe7PAQIDAQABo3EwbzAdBgNVHQ4EFgQU+P2pTqq/YUXsA6I/zNvITmp9m/Qw
+						TgYDVR0RBEcwRYIVaWRwLnN1c3NleGRvd25zLmFjLnVrhixodHRwczovL2lkcC5z
+						dXNzZXhkb3ducy5hYy51ay9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
+						AQEAOU6r12uD595fLRVZ/MZDYZ1ZeyJpGvLzQdb9UizHt8V1hdVGPcNY+GfL4bp7
+						QrGPnWr+e64PvswEXA25ELy3ecpsNAdbL5u2iGpYgDLnqqX3+wmaGwSyTkT9bQ8H
+						DIyt0PGnv9OjLm8Cv+UEYyneTP/sha3QRUdXrgqlAaWu489ZbSiaPoNd9gRg7E6i
+						Z9HN/Yt9NiPHit56211YR/a/SZY7bX/ML3G9mOhTPy0lnYh/dFJjLLKNJnK0BXDq
+						qRGS+ddJ2d88CbPTgU0IIAKzNK3OnmEX/PJ/WJOgKV1ThFXs2d3EWeL46AKrgHMW
+						t52x/Ffb6//Lld/tcohp/7D89g==
+					</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>
+						MIIDQDCCAiigAwIBAgIVAOIaZM3vDoHKS6s49KFRowGWMrhoMA0GCSqGSIb3DQEB
+						CwUAMCAxHjAcBgNVBAMMFWlkcC5zdXNzZXhkb3ducy5hYy51azAeFw0xNTEyMTcx
+						MTE5MzVaFw0zNTEyMTcxMTE5MzVaMCAxHjAcBgNVBAMMFWlkcC5zdXNzZXhkb3du
+						cy5hYy51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIpvgW9+B595
+						D0WgHoZOS4cBeQc9GfA9kSPW1EyyfManq4uJ/DTqlaFTVwKUyfq4TAxrDDTR5Oty
+						cEdZQVzlrWxXXCf1x1MbvGmx3XsLj3VG/CSDEoFVlUlP2Fyhf9x4WWiFETbmeDTy
+						SXbI5/7i1R4sFIdatgJzEsTmVxVshtfVZca3Th0JuWUGd4bRpfFC7w32uwa/aUSx
+						JRQpN6pP3Wgp0cl9LBHWvq7vvnwYFxW2WwnW15SsFXMOp8wYYxvuJd60U+tndpFL
+						k5drnW33mF12so1k8MlJDu04tSMENE0U02YjF1ZElImKvtgEfLwbJzFTJFnFNJn2
+						JPS/P42KlKECAwEAAaNxMG8wHQYDVR0OBBYEFG3Rqg36hQNcgq33iUo4KK4Zdy7n
+						ME4GA1UdEQRHMEWCFWlkcC5zdXNzZXhkb3ducy5hYy51a4YsaHR0cHM6Ly9pZHAu
+						c3Vzc2V4ZG93bnMuYWMudWsvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQAD
+						ggEBAIRIojOcGmCWa9k1bPDPYIoaNf/ZVXQokPMBIV6szhP1+/pYQYf3JY/0hAXv
+						TcZRDFdd708Y3IByyH/WckVzQFuQq1WSN90DPIgKKXf3SLGXhnv9eVC9MnUlB7s2
+						83YCmBNctkQQ4ZEu2ZvchQaxzp0Gx+Emu7lyDM20XdqCZfR2ovuLq9LlOdtlGxgO
+						GRr0Do1F9M6GFLCZg/t4D7+cjOP0+v7HB/dmLItt9zAaRWDIrnQqoP940PwaBqCh
+						NYbRkFbjPKQhDvO4kI4QqLYBCvVWEsba+Z+/scBMWwHU4fHONpP4s/54gYifgH/e
+						APhr3gWeqRKI8ywdO1Rm4eziOxE=
+					</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
         <ds:X509Data>
           <ds:X509Certificate>
-						MIIEwjCCA6qgAwIBAgIQTrh+jfRf1aCGSyqnZqrgqTANBgkqhkiG9w0BAQUFADA2
-						MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
-						U1NMIENBMB4XDTEzMDEyMjAwMDAwMFoXDTE2MDEyMjIzNTk1OVowgY0xCzAJBgNV
-						BAYTAkdCMRQwEgYDVQQIEwtFYXN0IFN1c3NleDEOMAwGA1UEBxMFTGV3ZXMxHTAb
-						BgNVBAoTFFN1c3NleCBEb3ducyBDb2xsZWdlMRkwFwYDVQQLExBOZXR3b3JrIFNl
-						cnZpY2VzMR4wHAYDVQQDExVpZHAuc3Vzc2V4ZG93bnMuYWMudWswggEiMA0GCSqG
-						SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzasViv6sqpPwhpSx5LMRX+IIZX/Us0+T6
-						Umeqz/zzATJ2oAq/Vc3K6vbkWHOqBRSHu81YTtubITgCVamjjeMRw2upCWP52z45
-						X4NG6uueNOxsHArEsI34nKumCJPpGi7g/yEI2t55MlXRKCjYx0SGXQ+HQVbS5+ck
-						7Xfg14J3ykCrVP20tg03VCWABX8HpFGs2jBXdaTMzJNPQDgUspBoahdaVdSAzPJH
-						rE+r6OzM39siItlYUuw6HROqUCNsPPBx5+weO/zzbaj1sfAxfuM7qq5E3v1uDXcC
-						sm9ci3Ai7sigirORZYWcbD1y1HeUgZFlUt9vW3lUyCrze3FKhkNvAgMBAAGjggFy
-						MIIBbjAfBgNVHSMEGDAWgBQMvZNoDPPeq6NJays3V0fqkOO57TAdBgNVHQ4EFgQU
-						stJtWpehWtVLmajr+G8NZ33QgaowDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC
-						MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIGA1UdIAQbMBkwDQYL
-						KwYBBAGyMQECAh0wCAYGZ4EMAQICMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9j
-						cmwudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUFBwEBBGEw
-						XzA1BggrBgEFBQcwAoYpaHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9URVJFTkFT
-						U0xDQS5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJlbmEub3Jn
-						MCAGA1UdEQQZMBeCFWlkcC5zdXNzZXhkb3ducy5hYy51azANBgkqhkiG9w0BAQUF
-						AAOCAQEAX6a8z1WqpzNGKYLE3plawtzyMa8cwkvZnNvkAdyl0PSFF4ylEHBjF85n
-						0ZXE6FqIpLUZJxlKKfqj3CeIxFqX1noxKndZzu7QsxcspXU3ubPWVJBoJZ4XO4jr
-						G9Gw+R+kR5e3QfNDrCZKmU247vuvJIqnbF9NT+gm7IHBvFLnx+r3zxUpX4Ca8D8+
-						IkrhWCUQ9kS2brLwJ/nJhY9P00IaeYFQiC2UEYqf71UskUw8i0BNw/33/q1lUYy6
-						VsyB6e6DKfCbunbrHgMyk4/qvOy2JfvGh+41qEJENYKaOqu00MDk0R7yzrMWXEIH
-						3TlWjRfFNTVhbVx6Di+CwcDEcXpQ2g==
+						MIIDPzCCAiegAwIBAgIUa5OG5i1Wpluu9P44ecwPAnoEUWowDQYJKoZIhvcNAQEL
+						BQAwIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25zLmFjLnVrMB4XDTE1MTIxNzEx
+						MTkzNloXDTM1MTIxNzExMTkzNlowIDEeMBwGA1UEAwwVaWRwLnN1c3NleGRvd25z
+						LmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGUkJb5iXiLp
+						6RtG+A0Clx5j9lrmAmvU/PKUFCCv/UCuFeIVsXAeBzz0mdGOdPw+17p1xQssyro5
+						mD80ikQV3eCnSqJt3N9opH+itpeZWLnvqIbv7DnCg1iqT4GbYQF2b6OlrIrdyYtO
+						DR+15R2WRTz2wqhv4buLe0fhTXDFKD15SE8CEl/hRxXq8ccG1syhb/LjcG3uXgPz
+						wEtP4iKPCCJG2I9tX85+Darae5JIs2qHebiiuFUyUv+u2x2a9uK4VsmfWVGPdttm
+						OzOrGmxQ89aP8Bjf32sxuJ6WnLpC9hmAtN0oIMRknTOckjD5c1Kyvk77yxJ2dnk5
+						JHaEaUCaUQIDAQABo3EwbzAdBgNVHQ4EFgQUfHVM1sqRpbYALTwazKjUJmqyS6ow
+						TgYDVR0RBEcwRYIVaWRwLnN1c3NleGRvd25zLmFjLnVrhixodHRwczovL2lkcC5z
+						dXNzZXhkb3ducy5hYy51ay9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
+						AQEAWDD1JH+p8VZRUKTNOvcMIHK58/fgYudN+Ce205BdFeAk+5lQFNmbGlQ1089U
+						1zCDqTkDOZOL6BuLocAPRqAK+IAyTFpHXA3XeZWU/AtEPxyaETtXiWn0CONd8oBV
+						4sXKlWCUpv8PEdG8HG00ssDDDjnJwGSS0kX7pSzVfbLoKFC5CJgLAIiyBt7xk3X8
+						IwccljGvtByHXsPyhiKcNwIhrCwArOqG96rmCTZh7oX6WvSMFEs+w8oBb0PMZp/3
+						Q16I9/JE3NKX6hVlO19PFwBeJ9ZlVh53zBDSfIuZPlGYK5KFlC3PE/HowDnPa3Xv
+						cd/dBsqyzhYBk6a6l0Gi7CukFQ==
 					</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-    </KeyDescriptor>
-    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
-    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
-    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
-  </AttributeAuthorityDescriptor>
-  <Organization>
-    <OrganizationName xml:lang="en">Sussex Downs College</OrganizationName>
-    <OrganizationDisplayName xml:lang="en">Sussex Downs College</OrganizationDisplayName>
-    <OrganizationURL xml:lang="en">http://www.sussexdowns.ac.uk/</OrganizationURL>
-  </Organization>
-  <ContactPerson contactType="support">
-    <GivenName>Gavin</GivenName>
-    <SurName>Counahan</SurName>
-    <EmailAddress>mailto:gavin.counahan@sussexdowns.ac.uk</EmailAddress>
-  </ContactPerson>
-  <ContactPerson contactType="technical">
-    <GivenName>Gavin</GivenName>
-    <SurName>Counahan</SurName>
-    <EmailAddress>mailto:gavin.counahan@sussexdowns.ac.uk</EmailAddress>
-  </ContactPerson>
-</EntityDescriptor>
+    </md:KeyDescriptor>
+    <md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.sussexdowns.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+  </md:AttributeAuthorityDescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Sussex Downs College</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="en">Sussex Downs College</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">http://www.sussexdowns.ac.uk/</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="support">
+    <md:GivenName>Gavin</md:GivenName>
+    <md:SurName>Counahan</md:SurName>
+    <md:EmailAddress>mailto:gavin.counahan@sussexdowns.ac.uk</md:EmailAddress>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:GivenName>Gavin</md:GivenName>
+    <md:SurName>Counahan</md:SurName>
+    <md:EmailAddress>mailto:gavin.counahan@sussexdowns.ac.uk</md:EmailAddress>
+  </md:ContactPerson>
+</md:EntityDescriptor>