<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://reset.hig.se/shibboleth">
  <md:Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2022-09-21T12:18:49Z">
      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    <mdattr:EntityAttributes>
      <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
      </samla:Attribute>
      <samla:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <samla:AttributeValue>https://refeds.org/sirtfi</samla:AttributeValue>
      </samla:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    <md:Extensions>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="en">Högskolan i Gävle password reset service</mdui:DisplayName>
        <mdui:DisplayName xml:lang="sv">Högskolan i Gävle lösenordsåterställningtjänst</mdui:DisplayName>
        <mdui:Description xml:lang="en">You can use this service to reset your password for your user account after the account activation.</mdui:Description>
        <mdui:Description xml:lang="sv">Denna tjänst används för sätta ett nytt lösenord om du glömt bort det.</mdui:Description>
        <mdui:Logo xml:lang="en" height="45" width="50">https://reset.hig.se/img/cencolor-50.gif</mdui:Logo>
        <mdui:Logo xml:lang="sv" height="44" width="50">https://reset.hig.se/img/cenfarg-50.gif</mdui:Logo>
        <mdui:InformationURL xml:lang="en">https://reset.hig.se</mdui:InformationURL>
        <mdui:InformationURL xml:lang="sv">https://reset.hig.se</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://reset.hig.se/privacy.policy.php?lang=en</mdui:PrivacyStatementURL>
        <mdui:PrivacyStatementURL xml:lang="sv">https://reset.hig.se/privacy.policy.php?lang=sv</mdui:PrivacyStatementURL>
      </mdui:UIInfo>
      <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://reset.hig.se/Shibboleth.sso/DS/ds.swamid.se"/>
      <idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://reset.hig.se/Shibboleth.sso/DS/ds.swamid.se" index="1"/>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:KeyName>https://reset.hig.se/shibboleth</ds:KeyName>
        <ds:KeyName>reset.hig.se</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>CN=reset.hig.se</ds:X509SubjectName>
          <ds:X509Certificate>MIIFFzCCAv+gAwIBAgIUMEOFBn80zTBuyN1+IqonA/bVmU4wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:KeyName>https://reset.hig.se/shibboleth</ds:KeyName>
        <ds:KeyName>reset.hig.se</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>CN=reset.hig.se</ds:X509SubjectName>
          <ds:X509Certificate>MIIFFzCCAv+gAwIBAgIUAXNBkF5eSI93Hg2TWSrRzUG7Cb8wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://reset.hig.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://reset.hig.se/Shibboleth.sso/SLO/SOAP"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://reset.hig.se/Shibboleth.sso/SLO/Redirect"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://reset.hig.se/Shibboleth.sso/SLO/POST"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://reset.hig.se/Shibboleth.sso/SLO/Artifact"/>
    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://reset.hig.se/Shibboleth.sso/NIM/SOAP"/>
    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://reset.hig.se/Shibboleth.sso/NIM/Redirect"/>
    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://reset.hig.se/Shibboleth.sso/NIM/POST"/>
    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://reset.hig.se/Shibboleth.sso/NIM/Artifact"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://reset.hig.se/Shibboleth.sso/SAML2/POST" index="1"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://reset.hig.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://reset.hig.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://reset.hig.se/Shibboleth.sso/SAML2/ECP" index="4"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://reset.hig.se/Shibboleth.sso/SAML/POST" index="5"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://reset.hig.se/Shibboleth.sso/SAML/Artifact" index="6"/>
    <md:AttributeConsumingService index="1">
      <md:ServiceName xml:lang="en">Högskolan i Gävle user account password reset</md:ServiceName>
      <md:ServiceName xml:lang="sv">Högskolan i Gävle lösenordsåterställning</md:ServiceName>
      <md:RequestedAttribute FriendlyName="norEduPersonNIN" Name="urn:oid:1.3.6.1.4.1.2428.90.1.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">University of Gävle</md:OrganizationName>
    <md:OrganizationName xml:lang="sv">Högskolan i Gävle</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">University of Gävle</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="sv">Högskolan i Gävle</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.hig.se</md:OrganizationURL>
    <md:OrganizationURL xml:lang="sv">https://www.hig.se</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="support">
    <md:Company>University of Gävle</md:Company>
    <md:SurName>ITsupport</md:SurName>
    <md:EmailAddress>mailto:itsupport@hig.se</md:EmailAddress>
    <md:TelephoneNumber>+46 26 648800</md:TelephoneNumber>
  </md:ContactPerson>
  <md:ContactPerson contactType="administrative">
    <md:Company>University of Gävle</md:Company>
    <md:SurName>Network Operations</md:SurName>
    <md:EmailAddress>mailto:nat@hig.se</md:EmailAddress>
    <md:TelephoneNumber>+46 26 648500</md:TelephoneNumber>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:Company>University of Gävle</md:Company>
    <md:SurName>Operations</md:SurName>
    <md:EmailAddress>mailto:nat@hig.se</md:EmailAddress>
    <md:TelephoneNumber>+46 26 648500</md:TelephoneNumber>
  </md:ContactPerson>
  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
    <md:GivenName>Security Response Team</md:GivenName>
    <md:EmailAddress>mailto:nat@hig.se</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>