<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.infn.it/saml2/idp/metadata.php">
  <md:Extensions>
    <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://www.idem.garr.it/" registrationInstant="2011-11-28T15:00:00Z">
      <mdrpi:RegistrationPolicy xml:lang="en">https://www.idem.garr.it/idem-metadata-registration-practice-statement</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
  </md:Extensions>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">National Institute for Nuclear Physics (INFN)</mdui:DisplayName>
        <mdui:DisplayName xml:lang="it">Istituto Nazionale di Fisica Nucleare (INFN)</mdui:DisplayName>
        <mdui:Description xml:lang="en">Identity Provider for National Institute for Nuclear Physics (INFN) users</mdui:Description>
        <mdui:Description xml:lang="it">Identity Provider per gli utenti di Istituto Nazionale di Fisica Nucleare (INFN)</mdui:Description>
        <mdui:InformationURL xml:lang="it">https://idp.infn.it/utils/info.php?l=en</mdui:InformationURL>
      </mdui:UIInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">infn.it</shibmd:Scope>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>
MIIDtTCCAp2gAwIBAgIJAOU29OWoolW3MA0GCSqGSIb3DQEBBQUAMEUxFDASBgNV
BAMTC2lkcC5pbmZuLml0MREwDwYDVQQLEwhJTkZOLUFBSTENMAsGA1UEChMESU5G
TjELMAkGA1UEBhMCSVQwHhcNMTQwNDE0MTQ1NzI2WhcNNDEwODI5MTQ1NzI2WjBF
MRQwEgYDVQQDEwtpZHAuaW5mbi5pdDERMA8GA1UECxMISU5GTi1BQUkxDTALBgNV
BAoTBElORk4xCzAJBgNVBAYTAklUMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxTXQ7OFlyqDxcDkdUgPXtKrHw2vUkKuGkEMpQrrK/PU/emzT13Jualti
38jV4NTSBSIXc7P3PTTUsfnk3o+IAej1JKNlQ2klqFDvPiwl9sKFh4Pd66K0g6eb
GunsRZtR5LJLMJrrqOhRiLZdAcJzB4RxZsqSYxz0EDw6S5r6w6Sgm4xiupviC9gI
NAzpTkjFR78dbJ7fDzvvVUXxPz1T4awL01RCt0s/05fHeWM1I4cPjoVSB0t6wzv0
CfaWWlid3I6yyFWiFYeVGvn7eeqhvRckthumYOayL18Ri+S2vxYkDqDcY6b6y2OW
YhFZ1VTosUoUBPhwXyCYYJ2wAmi2VwIDAQABo4GnMIGkMB0GA1UdDgQWBBROEkiq
rjIVFsHZKsnYbh+xPNmilDB1BgNVHSMEbjBsgBROEkiqrjIVFsHZKsnYbh+xPNmi
lKFJpEcwRTEUMBIGA1UEAxMLaWRwLmluZm4uaXQxETAPBgNVBAsTCElORk4tQUFJ
MQ0wCwYDVQQKEwRJTkZOMQswCQYDVQQGEwJJVIIJAOU29OWoolW3MAwGA1UdEwQF
MAMBAf8wDQYJKoZIhvcNAQEFBQADggEBALVVWVWP9nrWlmU37KbTE3kuqJWptGma
DS2uuOg5RN5lGevQvVu4cac23qaZZ+TN+b6WDXuhEfmVJzBYczxByVeGEvew0fHg
RRMZLqST6j2gyb89qzNNFyTcyRZ/5Z7jXWjrnDp3pOLNvrr9BhVojoC2F7EYjSdd
dwq2pb++9FiHglwSTl5WV+V4ZuNUMemY8jzhqayOK6UuwdL61UE4dPGKnlCgMaiY
VST86HkiqFh9oOJ8D6jtlk695pRaz1h3ajxwB9zOa2VAWEsi40P2tZIzY3ek25wT
M2vuvHO4YsOmkAOxj2Wk/itj5MnK1tT0u840b61Q/j4SJGuKLe4Tzzg=
</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>
MIIEZDCCA0ygAwIBAgIRAJtYpZkrXh+6+4/H9lRGN+gwDQYJKoZIhvcNAQEFBQAw
NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
IFNTTCBDQTAeFw0xMzExMDcwMDAwMDBaFw0xNjEyMDMyMzU5NTlaMDkxITAfBgNV
BAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEUMBIGA1UEAxMLaWRwLmluZm4u
aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhXjZzNhibw+wWO18
a1xsZv+SwEKvfLeDcS+wmkkjt537rJmVJH3NMGRQHxlADQ4VIJHXi5rC7R3tQjHi
gcxoitPryb02DsrpTz8wNbqF6cY5I02xV2gDjvVZIjBUFEzH2Qq2AvZDlSv2pINk
AW8NALfk5M8j6yukd35Wxm+EugwlAEaYnGyE7dHpM3AyFJlK+yp0guh1YwGVz4LT
xI23eHNsdxiJmDSq2ac57D6tmQgUuzj/s5PJOP9n8wDK3YXc48RW8UwQXDxP/o8U
Wo+ZkcAeNYVpeaSyme2Do/us36Vtk44mL13Sh5MjAplSC2rJdSD2V62eomgTZxsr
X62BAgMBAAGjggFoMIIBZDAfBgNVHSMEGDAWgBQMvZNoDPPeq6NJays3V0fqkOO5
7TAdBgNVHQ4EFgQUvAzDM5m+wp/rK4ScoCezlzF27i8wDgYDVR0PAQH/BAQDAgWg
MAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCIG
A1UdIAQbMBkwDQYLKwYBBAGyMQECAh0wCAYGZ4EMAQIBMDoGA1UdHwQzMDEwL6At
oCuGKWh0dHA6Ly9jcmwudGNzLnRlcmVuYS5vcmcvVEVSRU5BU1NMQ0EuY3JsMG0G
CCsGAQUFBwEBBGEwXzA1BggrBgEFBQcwAoYpaHR0cDovL2NydC50Y3MudGVyZW5h
Lm9yZy9URVJFTkFTU0xDQS5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9vY3NwLnRj
cy50ZXJlbmEub3JnMBYGA1UdEQQPMA2CC2lkcC5pbmZuLml0MA0GCSqGSIb3DQEB
BQUAA4IBAQBclu01pFdY9/QUnNh89d5BuYj/4Rd9JG8cjTnzjU1+Zb+QHSmUNlk0
15vebyx30FjbnnCH8NBpiPMG63osofR3Bp098yqV1+W9MGekflromp9mF5w098xL
313ysJX+29u9uDIWYiQhEYASOxbsubAwX0EZaPL1mwFJVsXzYVTKbrFBHpRthU1c
6njn9Aks4jqeE30Md3nA720jkc3gjcYU4t0eI/m2dVsTwfnwTJh7SjXS2GrzsNU1
cDhA29FRWYWUwT0z3fA1EDvmYpfP926yoYcrrwguDJzz7BVjMKsHLD/jn8zb3W0v
jp7JtavGgA6UwGLX5KnnpPeICQozxORx
</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.infn.it/saml2/idp/ArtifactResolutionService.php" index="0"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.infn.it/saml2/idp/SingleLogoutService.php"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.infn.it/saml2/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.infn.it/shib13/idp/SSOService.php"/>
  </md:IDPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="it">Istituto Nazionale di Fisica Nucleare (INFN)</md:OrganizationName>
    <md:OrganizationName xml:lang="en">National Institute for Nuclear Physics (INFN)</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="it">Istituto Nazionale di Fisica Nucleare (INFN)</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="en">National Institute for Nuclear Physics (INFN)</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="it">http://www.infn.it</md:OrganizationURL>
    <md:OrganizationURL xml:lang="en">http://www.infn.it/index.php?option=com_content&amp;view=article&amp;id=2&amp;Itemid=108&amp;lang=en</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="technical">
    <md:SurName>Administrator</md:SurName>
    <md:EmailAddress>mailto:aai-support@lists.infn.it</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>