<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://cafe.on.br/idp/shibboleth">
  <Extensions>
    <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://cafe.rnp.br" registrationInstant="2010-01-01T00:00:00Z">
      <mdrpi:RegistrationPolicy xml:lang="pt-br">
                                http://www.rnp.br/_arquivo/servicos/Politica_CAFe_IDP_final.pdf
                              </mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
  </Extensions>
  <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <Extensions>
      <shibmd:Scope regexp="false">on.br</shibmd:Scope>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">ON - Observatorio Nacional</mdui:DisplayName>
        <mdui:DisplayName xml:lang="pt-br">ON - Observatorio Nacional</mdui:DisplayName>
        <mdui:Description xml:lang="en">ON - Observatorio Nacional</mdui:Description>
        <mdui:Description xml:lang="pt-br">ON - Observatorio Nacional</mdui:Description>
        <mdui:InformationURL xml:lang="en">http://www.on.br/</mdui:InformationURL>
        <mdui:InformationURL xml:lang="pt-br">http://www.on.br/</mdui:InformationURL>
      </mdui:UIInfo>
    </Extensions>
    <KeyDescriptor>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
    MIID7DCCAtQCAQAwDQYJKoZIhvcNAQEFBQAwgbsxHjAcBgNVBAoTFU9ic2VydmF0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            </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://cafe.on.br:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://cafe.on.br:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://cafe.on.br/idp/profile/SAML2/POST-SimpleSign/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://cafe.on.br/idp/profile/SAML2/POST/SSO"/>
    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://cafe.on.br/idp/profile/Shibboleth/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://cafe.on.br/idp/profile/SAML2/Redirect/SSO"/>
  </IDPSSODescriptor>
  <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <Extensions>
      <shibmd:Scope regexp="false">on.br</shibmd:Scope>
    </Extensions>
    <KeyDescriptor>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
      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                    
            </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://cafe.on.br:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://cafe.on.br:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
  </AttributeAuthorityDescriptor>
  <Organization>
    <OrganizationName xml:lang="en">ON - Observatorio Nacional</OrganizationName>
    <OrganizationName xml:lang="pt-br">ON - Observatorio Nacional</OrganizationName>
    <OrganizationDisplayName xml:lang="en">ON - Observatorio Nacional</OrganizationDisplayName>
    <OrganizationDisplayName xml:lang="pt-br">ON - Observatorio Nacional</OrganizationDisplayName>
    <OrganizationURL xml:lang="en">http://www.on.br/</OrganizationURL>
    <OrganizationURL xml:lang="pt-br">http://www.on.br/</OrganizationURL>
  </Organization>
  <ContactPerson contactType="technical">
    <SurName>luisriera</SurName>
    <EmailAddress>luisriera@on.br</EmailAddress>
  </ContactPerson>
</EntityDescriptor>