<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://saml.salesforce.com/sunet">
  <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIFHzCCBAegAwIBAgIQD2tONdSBjQGbZ8+sA+HVEzANBgkqhkiG9w0BAQsFADBk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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sunet.my.salesforce.com?so=00D24000000IrNa" index="0" isDefault="true"/>
    <md:AttributeConsumingService index="0" isDefault="true">
      <md:ServiceName xml:lang="en">Salesforce.com</md:ServiceName>
      <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
</md:EntityDescriptor>