<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://devpassport.lu.se/SAML2/Shibboleth">
  <md:Extensions>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    <mdattr:EntityAttributes>
      <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
        <samla:AttributeValue>https://refeds.org/category/code-of-conduct/v2</samla:AttributeValue>
      </samla:Attribute>
    </mdattr:EntityAttributes>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2024-01-11T14:33:42Z">
      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
  </md:Extensions>
  <md:SPSSODescriptor AuthnRequestsSigned="1" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://nyadevpassport.lu.se/Shibboleth.sso/Login"/>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="sv">Lund universitets kontoaktivering och lösenordsåterställning</mdui:DisplayName>
        <mdui:DisplayName xml:lang="en">Lund University user account activation and password reset</mdui:DisplayName>
        <mdui:Description xml:lang="sv">Denna tjänst används för att du som ny vid universitetet ska kunna aktivera ditt användarkonto vid universitetet.</mdui:Description>
        <mdui:Description xml:lang="en">As a new user you use this service to activate your university user account.</mdui:Description>
        <mdui:InformationURL xml:lang="sv">https://devpassport.lu.se</mdui:InformationURL>
        <mdui:InformationURL xml:lang="en">https://devpassport.lu.se</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="sv">https://devpassport.lu.se/privacy/</mdui:PrivacyStatementURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://devpassport.lu.se/privacy/</mdui:PrivacyStatementURL>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:KeyName>devpassport.lu.se</ds:KeyName>
        <ds:KeyName>https://testidpv4.lu.se/idp/shibboleth</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>CN=devpassport.lu.se</ds:X509SubjectName>
          <ds:X509Certificate>MIIFLTCCAxWgAwIBAgIURAOOH4oM0FnAl8I0Du/H2FaycTwwDQYJKoZIhvcNAQEL
BQAwHDEaMBgGA1UEAxMRZGV2cGFzc3BvcnQubHUuc2UwHhcNMjQwMTEwMTQxNTUy
WhcNMzQwMTA3MTQxNTUyWjAcMRowGAYDVQQDExFkZXZwYXNzcG9ydC5sdS5zZTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPTLjNtwsAttvEzfLSuyndYs
I7A//OsdzOSD5JXwS1qDCBD8iVvDU9D3TG2UTPjqDiPCBMHye3DjHZ0JIIIFAJ57
7JyW2K/UyANt6Q1Hs6ZMPL9QR3vlLNDra/Y9jtujIwNQcaXLy7gcpANaAQcqXfPg
O3TDhz+NuLZVsVd15AG1BapQ400btBPUbxmJVm1dH6qOB/45m0lzPeqH/QN+vUQI
hpl8FI666Buf5SgFpmfb5TJtJmJHUWVaqV4NCocFhgKozDk69vOSdGTFIBET3ij9
3D8Rd+cf8TaDtR0eW0m9E6kBMM40gZUF5NB4tkstdulRixKeicyLDhCbKOcNhofT
Fp1OI34YkjO/GZ/OXgowJ2CQyYrvuE4owZ/ODLVulEM8IANqx/rJfJIKj/1uPpoU
tiCZ3yfAsl4qX2TUd/KXV410caWTrMl3G/jYXI/Ff6Xl5EwFlpGF3llHxHTqMwkp
kXC/ZCfPpUtLTfxqKVVanEmjFLrJd/z+NQzY1n3FjYHhYS+xDDAddX/nLovKeuf+
Lp4mVAQitH25ODNNxwJ79W/iKHM3oL8nWRebmxMa+q434OXEBdbw5piXdQfKmMdT
6KM5vY+Rfnn/PRFGr9Q78le/uS1xFeBRoo4evQug6TH+dSo9SDThYM1GRTHBFIiy
cCQHz9OHtX66UHYjH0AxAgMBAAGjZzBlMEQGA1UdEQQ9MDuCEWRldnBhc3Nwb3J0
Lmx1LnNlhiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDAd
BgNVHQ4EFgQUuI3oHLrOixGUFQQd9TTvCUB4wmowDQYJKoZIhvcNAQELBQADggIB
AMfKZI+PCZ9nYjsPycAfNhUIXICvJHZB1FIu//GGBPZdypHxaCrdtQE7/6uad7YP
Fq8WmaYP+cP/NMvU+Q18izE6a2bZAzPkD5Bk1lVX9kau4bUYVrkRGKLZk0Xaw7HU
AilWjgU275Bmo2dtGpqh9xlRX2sCEihtaDSVDC8O8LuJMamiJfydxxc19hwDT4h5
aBq4pR5stnmZB3ezJl+EIz/AR1lT8+wEE7mNOj0Y6dIO6yRqyv+PFl65jSLYwi5E
ztXsWiC+3/VeZ3Pqn8qfyccwUAeay1wr9W0cuV53h5KIUXVvEePNNOeQnecJf14I
XZI/UBrTNQF2T4l8KEiImKxoOzZnCAK7HQ4sbh72HKzB/qaRIK7JZ3Rv7Hqe7mho
44zNXQ1h5TVyGNt0pN3XCwdziz24ciq55bXMsU2PFL/GkO6Am1u7ag0aJTtKv196
cXqR/mylf4tbIsamGnb9hyOpLqsmts3VSV3I40k3aDOGQZ1dyRvMb+n96TQaghWZ
M2b8VQJPeszavSkKW5TQk6efhsDKdzY2l2rC17NACLQ3zkAEr9euTefr94h5dsGS
0sQTD2A7aRlgcSC0G1jxL2yK3zXw5KVQ2S67ubnEtPqcvDysFc8tzRulsNSSRvCx
7Z3PXIKMnDEMeCMuM7Li3bQaQp37YbeVwbe09RL1Gqof</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:KeyName>devpassport.lu.se</ds:KeyName>
        <ds:KeyName>https://testidpv4.lu.se/idp/shibboleth</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>CN=devpassport.lu.se</ds:X509SubjectName>
          <ds:X509Certificate>MIIFLTCCAxWgAwIBAgIUCgjapWs7pevWpys82wAYi0RH7hwwDQYJKoZIhvcNAQEL
BQAwHDEaMBgGA1UEAxMRZGV2cGFzc3BvcnQubHUuc2UwHhcNMjQwMTEwMTQxNjA0
WhcNMzQwMTA3MTQxNjA0WjAcMRowGAYDVQQDExFkZXZwYXNzcG9ydC5sdS5zZTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKQukP7LnYdswt3tSP/EF1lI
Hz7gPG+FWlXXAU0asveEGQHN2SMH2l/95+oI2CkYfxQzSRgBqOZmaWevLvmsW3xo
RjjKfjZ0V5WQq3t78j0hGzMVcgjlFqbFYxHJ4H4TrFWsDCbEWivxox8tMvdavmni
0jbDNje9gNZ6NzShGkdz2o9STbsi/FJlmSK15QR9XWOFwXbFEWiJOODuV3qYAmhe
qckmToZal254GIUyuRdufoVdsCDPX1Ep0KakyhSSujLydEpIvDX5FmGW9sLDcE4t
YYu0lpv1fRUoav8KySVEU9FHYXGjFuZSunx6Ypd+BIUXrH+mVTZGvsBqNHSbKX4a
EGqG5iib623bJV7b6ZUg+F2uBCj2/6ez3gUtqYUYx6tIQqidp5i1o4k22oYavIwc
3hveyvn9uI68MFu8xHOiDUgMzzTL+RFL3k0CFsAw1i83eBM9JORHDzgkwHd5UtGX
1CfBTwwFG3EQmMAsCoqbAglQU83xEfBIiix7VZ+JTEQtk/CU5vkP8abYoye/ymws
nITG3PiyFMzQd3o6B95BrDqJgoEt1+0/6mHx/LSHlPS/TdVj4aBXq4wUZdZrVHby
MwtEmHLw60/IAFNDdb3WMmcneK5/jCgIMcVO+Ypo/PlK5lqoks/ngUGr9XV/4Wg7
nB1u2vSvindTc+G/NpTRAgMBAAGjZzBlMEQGA1UdEQQ9MDuCEWRldnBhc3Nwb3J0
Lmx1LnNlhiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDAd
BgNVHQ4EFgQU/XLO9ECrWhAdIvOtUB+cbNOaUOgwDQYJKoZIhvcNAQELBQADggIB
AC2HLGABIYd94ayv+KTprh+xYSfelIicIEBc/UizfJlkb3C85poUYvckRvKOpH1j
TOYBAXqXtD0awNYWyQVZjy3HH7ztgQnNYDYe7+3WY31EERgDIDMTXQ8ivyINQ1/p
Lcbe6U771jkIkBisZiuFrQA30Qgs1ynDCVt2eLtRELSxHO++PRumCwSCObJ9pwPb
uCI7w/Qrl163YlVkYqUIkq7aIUN934ZBMhpmY5KCA2zc/vR92NfXsZiLBUJOJIFA
F9hdJZPoyqzb273HaZpfwblInLpc9g2aLef0D+centgM4gOb3l5sCnhn0JDm3o6i
l/os4omsIv/+PHO/uFdXFqqQvdz2ai1k1WZ1YwVJl9CdusugNaZc7gmFH4c/ew/u
iXzqhTtAHpw4Zii9xF+6lrG0v5B6xn+BexUfFWu0X1hMNOug6syL9z2GVAmmv+6+
EocjGvYNfOll430X0jy8RpiuBau2Dii2j4VpnEJuZx2ZEYADrboUxctBXP2QhXeH
CKR9NEHJtp2xphijiOtNME5ghxouE8Xg1FsqhZZzDnoCZ6sbkFMUWkvKxPty9GKd
3/SnxsW0x/B63nt+wUhrRKOazv/taAzT7T/esDMPHxKKw5I8ihCOBR3IlgJOitfr
xJzdda9Ua6FK0k0huckyD9Jcf8pMlBagW5iHUv6avcCX</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://nyadevpassport.lu.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SLO/SOAP"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SLO/Redirect"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SLO/POST"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SLO/Artifact"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SAML2/POST" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://nyadevpassport.lu.se/Shibboleth.sso/SAML2/ECP" index="4"/>
    <md:AttributeConsumingService index="1">
      <md:ServiceName xml:lang="en">Lund University user account management portal</md:ServiceName>
      <md:ServiceName xml:lang="sv">Lunds universitets kontohanteringsportal</md:ServiceName>
      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="sv">Lunds universitet</md:OrganizationName>
    <md:OrganizationName xml:lang="en">Lund University</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="sv">Lunds universitet</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="en">Lund University</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="sv">https://www.lu.se/</md:OrganizationURL>
    <md:OrganizationURL xml:lang="en">https://www.lunduniversity.lu.se/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:EmailAddress>mailto:passportadmin@epic.lu.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="administrative">
    <md:EmailAddress>mailto:servicedesk@lu.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="support">
    <md:EmailAddress>mailto:passportadmin@epic.lu.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
    <md:GivenName>LU IRT</md:GivenName>
    <md:EmailAddress>mailto:abuse@lu.se</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>