<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://siths-idp.sunet.se/saml2/idp/metadata.php">
  <md:Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/">
      <mdrpi:RegistrationPolicy xml:lang="en">https://www.sunet.se/wp-content/uploads/2016/08/SWAMID-Metadata-Registration-Practice-Statement-v2.pdf</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <samla:DigestMethod xmlns:samla="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <samla:DigestMethod xmlns:samla="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    <samla:DigestMethod xmlns:samla="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    <samla:SigningMethod xmlns:samla="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <samla:SigningMethod xmlns:samla="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    <samla:SigningMethod xmlns:samla="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    <mdattr:EntityAttributes xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <shibmd:Scope regexp="false">siths.sunet.se</shibmd:Scope>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="sv">SITHS Login (SUNET)</mdui:DisplayName>
        <mdui:DisplayName xml:lang="en">SITHS Login (SUNET)</mdui:DisplayName>
        <mdui:Description xml:lang="sv">Inloggning med SITHS-kort (via SUNET)</mdui:Description>
        <mdui:Description xml:lang="en">Login using SITHS smartcards (via SUNET)</mdui:Description>
        <mdui:Logo height="256" width="256">https://www.inera.se/Static/build/images/Inera-Logo.png</mdui:Logo>
        <mdui:Logo xml:lang="sv" height="256" width="256">https://www.inera.se/Static/build/images/Inera-Logo.png</mdui:Logo>
        <mdui:Logo xml:lang="en" height="256" width="256">https://www.inera.se/Static/build/images/Inera-Logo.png</mdui:Logo>
      </mdui:UIInfo>
      <mdui:DiscoHints>
        <mdui:DomainHint>sunet.se</mdui:DomainHint>
      </mdui:DiscoHints>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIDbzCCAlegAwIBAgIJAP1fusJ+KQcAMA0GCSqGSIb3DQEBCwUAME4xCzAJBgNVBAYTAlNFMRIwEAYDVQQIDAlTdG9ja2hvbG0xDjAMBgNVBAoMBVNVTkVUMRswGQYDVQQDDBJzaXRocy1pZHAuc3VuZXQuc2UwHhcNMTcxMDIzMTQzMTA0WhcNMjcxMDIzMTQzMTA0WjBOMQswCQYDVQQGEwJTRTESMBAGA1UECAwJU3RvY2tob2xtMQ4wDAYDVQQKDAVTVU5FVDEbMBkGA1UEAwwSc2l0aHMtaWRwLnN1bmV0LnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjoqhQiDgAGVG3BFEKULnYd093LSotq8JE++rxYGiuzvh75mbPVi1BRqho0a8jRDBA4tQ7Blzv123rEDsZ2XI9FCnQXFbxqtWkwd5mGCkVvRmfcNY7MhakjnOCfOZBfrb2ZXmJPfaS4Be2odkMACbXzLb1tXE8a/bB0Nw6At6I4m3T31iQnXSDnlp39c1yZnqt6Q4qpqLemFyef3B0uEO8Nk8SyxhGR5slQ1WG5KLYjVe6L1weIWdwjTT8BK76nySXxCIA4cDGNClGVGQ8DDN8cu3SAmkt422QCv1v60EwF4cJDq+aW73aM33h9JI+bA3mYAjASe+lYteblwMI0twIDAQABo1AwTjAdBgNVHQ4EFgQUwKDdJtHgtPt/Mq3uAZKiECSTwd4wHwYDVR0jBBgwFoAUwKDdJtHgtPt/Mq3uAZKiECSTwd4wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAXy3Qp9jRAcirkLI38KJdJhO+oeohOYmLiyi4nCkkJgKu6y5Nqm9aNBxxsSH7RH7wReJnXUmwjmEkQ12yyyY5/BPZUqTeJF1Z2t6ORkWyvX4nXnJPj8G0U1mHkI11u3eiQfXQrGX2cnAq2h/MLY5+fJ+RZxvmmWRImkKsukmQZJHzX72csY3IPo9YdVXk87IG3r6eBEeDhGVEYvmxqnJgeZFu4MtMCsth9tXFm46Gcs1B47Xc/Ko+AEs95EUVJSPdzeKQnP+R5rfq2uhyWs6Bw7+rP/YwAMPGzNe2d99soChOp/dlSMAo6+f3dL8XzhiX39ZiwPv8maM0iTerL9ROCg==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIDbzCCAlegAwIBAgIJAP1fusJ+KQcAMA0GCSqGSIb3DQEBCwUAME4xCzAJBgNVBAYTAlNFMRIwEAYDVQQIDAlTdG9ja2hvbG0xDjAMBgNVBAoMBVNVTkVUMRswGQYDVQQDDBJzaXRocy1pZHAuc3VuZXQuc2UwHhcNMTcxMDIzMTQzMTA0WhcNMjcxMDIzMTQzMTA0WjBOMQswCQYDVQQGEwJTRTESMBAGA1UECAwJU3RvY2tob2xtMQ4wDAYDVQQKDAVTVU5FVDEbMBkGA1UEAwwSc2l0aHMtaWRwLnN1bmV0LnNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjoqhQiDgAGVG3BFEKULnYd093LSotq8JE++rxYGiuzvh75mbPVi1BRqho0a8jRDBA4tQ7Blzv123rEDsZ2XI9FCnQXFbxqtWkwd5mGCkVvRmfcNY7MhakjnOCfOZBfrb2ZXmJPfaS4Be2odkMACbXzLb1tXE8a/bB0Nw6At6I4m3T31iQnXSDnlp39c1yZnqt6Q4qpqLemFyef3B0uEO8Nk8SyxhGR5slQ1WG5KLYjVe6L1weIWdwjTT8BK76nySXxCIA4cDGNClGVGQ8DDN8cu3SAmkt422QCv1v60EwF4cJDq+aW73aM33h9JI+bA3mYAjASe+lYteblwMI0twIDAQABo1AwTjAdBgNVHQ4EFgQUwKDdJtHgtPt/Mq3uAZKiECSTwd4wHwYDVR0jBBgwFoAUwKDdJtHgtPt/Mq3uAZKiECSTwd4wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAXy3Qp9jRAcirkLI38KJdJhO+oeohOYmLiyi4nCkkJgKu6y5Nqm9aNBxxsSH7RH7wReJnXUmwjmEkQ12yyyY5/BPZUqTeJF1Z2t6ORkWyvX4nXnJPj8G0U1mHkI11u3eiQfXQrGX2cnAq2h/MLY5+fJ+RZxvmmWRImkKsukmQZJHzX72csY3IPo9YdVXk87IG3r6eBEeDhGVEYvmxqnJgeZFu4MtMCsth9tXFm46Gcs1B47Xc/Ko+AEs95EUVJSPdzeKQnP+R5rfq2uhyWs6Bw7+rP/YwAMPGzNe2d99soChOp/dlSMAo6+f3dL8XzhiX39ZiwPv8maM0iTerL9ROCg==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://siths-idp.sunet.se/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://siths-idp.sunet.se/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  
  
<md:Organization>
    <md:OrganizationName xml:lang="en">SITHS Login (SUNET)</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">SITHS Login (SUNET)</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://sunet.se</md:OrganizationURL>
  </md:Organization><md:ContactPerson contactType="technical">
    <md:GivenName>Leif</md:GivenName>
    <md:SurName>Johansson</md:SurName>
    <md:EmailAddress>mailto:leifj@sunet.se</md:EmailAddress>
  </md:ContactPerson></md:EntityDescriptor>