<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.incommonfederation.org/idp/shibboleth">
  <md:Extensions>
    <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="https://incommon.org"/>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
        <saml:AttributeValue>http://id.incommon.org/category/registered-by-incommon</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">incommonfederation.org</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">incommon.org</shibmd:Scope>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">InCommon Operations</mdui:DisplayName>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>
MIIDQzCCAiugAwIBAgIBADANBgkqhkiG9w0BAQQFADAlMSMwIQYDVQQDExppZHAu
aW5jb21tb25mZWRlcmF0aW9uLm9yZzAeFw0xMjA4MjcyMDUyMzFaFw0yMjA4MjUy
MDUyMzFaMCUxIzAhBgNVBAMTGmlkcC5pbmNvbW1vbmZlZGVyYXRpb24ub3JnMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+GeQ4P+Zj5FoWT/4EpmKRSN
ZQ1dNgYvMZDPLpfEbY6Ugumn9CjZeTOXS678k7o83Otrzk1fWzjenOGRDnvSasgE
FASa5ZFYOfG/7IsAvta1IE/TQsFQ3I79IU53lGSpNFoE+5n56sNii1IGYc8vnkDa
YKfyaOd6jESVjDOP7kh9Fs6lAe/bnpJhmAzXEgFtg48ABPDuC3CMQkXhNmMz822Z
T2LGnxACgqYIJRRzoC+NMnHH4sp4c+mBNvVIrEkn4YUKUVLuXoGpS7NKURyrDfcF
sZ7iXaEA58JgFUfEK9enE6f7UAI28aYzNm4OpZmNA3+XuPuiG+7juxJci39umQID
AQABo34wfDAdBgNVHQ4EFgQU8BBxA91k1pP0f/luBTRl3sPNQNIwTQYDVR0jBEYw
RIAU8BBxA91k1pP0f/luBTRl3sPNQNKhKaQnMCUxIzAhBgNVBAMTGmlkcC5pbmNv
bW1vbmZlZGVyYXRpb24ub3JnggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEE
BQADggEBAIMEpWyaYAfJZsULpiJqFjkNACXpQmLIEVCudv4U7xxHi9wnlAFHc3zM
ArolddB+y8ff9DorJNe2OM9+Xi39vtVkV8eqspmhJL4iW0uXcHeD+02z0w8JySGv
IsdNGAFeVZn/1v9+nv34z8rvnfFDvP5kfyL2xXeV0rn9ChD/utvf3C0+6HvT1Zls
1AG71uT/nnMWTGj7xg2rP9+bxVlZLpWliArevXac0/OjOOKQp8x6n+DHE0NVSENK
5QOJmNi7uAS1xr5AvbV8eVrOGtqemGVlSxJAtjG7DStzfLGDoMKOR5NkBmUzK+8i
FZHt70mZqw2O8mIkp6DuO+EJLYkB1/4=
          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.incommonfederation.org:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.incommonfederation.org/idp/profile/SAML2/Redirect/SSO"/>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.incommonfederation.org/idp/profile/Shibboleth/SSO"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.incommonfederation.org/idp/profile/SAML2/SOAP/ECP"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.incommonfederation.org/idp/profile/SAML2/POST/SSO"/>
  </md:IDPSSODescriptor>
  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
    <md:Extensions>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">incommonfederation.org</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">incommon.org</shibmd:Scope>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.incommonfederation.org:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
  </md:AttributeAuthorityDescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">InCommon LLC</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">InCommon Operations</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">http://www.incommon.org</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="support">
    <md:GivenName>Tech Support</md:GivenName>
    <md:EmailAddress>techsupport@internet2.edu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>