swamid-2.0/testidpv4.lu.se-idp-shibboleth.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273

<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://testidpv4.lu.se/idp/shibboleth">
  <md:Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2020-04-21T08:31:10Z">
      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
    </mdrpi:RegistrationInfo>
    <mdattr:EntityAttributes>
      <samla:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al1</samla:AttributeValue>
        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al2</samla:AttributeValue>
        <samla:AttributeValue>http://www.swamid.se/policy/assurance/al3</samla:AttributeValue>
        <samla:AttributeValue>http://www.swamid.se/policy/authentication/swamid-al2-mfa</samla:AttributeValue>
        <samla:AttributeValue>http://www.swamid.se/policy/authentication/swamid-al2-mfa-hi</samla:AttributeValue>
        <samla:AttributeValue>https://refeds.org/sirtfi</samla:AttributeValue>
      </samla:Attribute>
      <samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
        <samla:AttributeValue>http://refeds.org/category/research-and-scholarship</samla:AttributeValue>
        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
      </samla:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0" errorURL="https://error.swamid.se/?errorurl_code=ERRORURL_CODE&amp;errorurl_ts=ERRORURL_TS&amp;errorurl_rp=ERRORURL_RP&amp;errorurl_tid=ERRORURL_TID&amp;errorurl_ctx=ERRORURL_CTX&amp;entityid=https://testidpv4.lu.se/idp/shibboleth">
    <md:Extensions>
      <shibmd:Scope regexp="false">lu.se</shibmd:Scope>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="sv">Lunds universitet (Test)</mdui:DisplayName>
        <mdui:DisplayName xml:lang="en">Lund University (Test)</mdui:DisplayName>
        <mdui:Description xml:lang="sv">Testidentitetstjänst för anställda och studenter vid Lunds universitet (Shibboleth IdPv4)</mdui:Description>
        <mdui:Description xml:lang="en">Test identity provider for employees and students at Lund University (Shibboleth IdPv4)</mdui:Description>
        <mdui:Keywords xml:lang="sv">lu lth</mdui:Keywords>
        <mdui:Keywords xml:lang="en">lu lth</mdui:Keywords>
        <mdui:InformationURL xml:lang="sv">https://www.lu.se/</mdui:InformationURL>
        <mdui:InformationURL xml:lang="en">https://www.lunduniversity.lu.se/</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="sv">https://www.it.lu.se/fileadmin/user_upload/itlu/personuppgiftshantering.html</mdui:PrivacyStatementURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://www.it.lu.se/fileadmin/user_upload/itlu/personaldata.html</mdui:PrivacyStatementURL>
        <mdui:Logo xml:lang="sv" height="146" width="121">https://testidpv4.lu.se/idp/images/mdui-logo-sv.png</mdui:Logo>
        <mdui:Logo xml:lang="en" height="146" width="116">https://testidpv4.lu.se/idp/images/mdui-logo-en.png</mdui:Logo>
      </mdui:UIInfo>
      <mdui:DiscoHints>
        <mdui:DomainHint>lu.se</mdui:DomainHint>
        <mdui:DomainHint>lth.se</mdui:DomainHint>
        <mdui:IPHint>130.235.0.0/16</mdui:IPHint>
      </mdui:DiscoHints>
    </md:Extensions>
    <!-- First signing certificate is BackChannel -->
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
                        MIIEJzCCAo+gAwIBAgIUax5wlSZ9mfr4nj6Nq3lG3OJ/rlAwDQYJKoZIhvcNAQEL
                        BQAwGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMB4XDTIwMDIyODE0MTkzMloX
                        DTQwMDIyODE0MTkzMlowGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMIIBojAN
                        BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAjSLQZe0gVwlmXmX7Aodd7RtVIq7x
                        SdGkUMzXKWmu0RrGoEYiIqWGPl4vwepj8rxpB+3fn1ICYLNzDZ/uZjIrQpRRLVFo
                        EpkvPtio7DiBP67CFBrW8dqeFljyyeJ1x9LXEElM5RTnduwLZfz19QnhKT3BJ6nl
                        ErtQX6AEhDaGBQr5xPcx6MOmEL6Z3l8oOuIHEJzs++CWUsaGGratFalk1mRKPjOS
                        OVS8ABKTL2WSGFWN9lg262YSozDg/b9A2Yb1CO9BfqSQLf7dqDjT8ncuQSeJ0F+k
                        9TbVgoclFPwCGW2ozi0I521UePRaAIQ9K9ogdyHntcGzg6CI4vBIiQTwBqxxBwQc
                        6Y0E9SKeNajx2zBUuXKhU7Ny+xk/fCSB8/tCn/hU1cSI+3nOpD7I+W5AkI1aJarE
                        16qmpeqnE0hVsSnJrRvR3RXcUkuFfjNR4ZDSzPgvF4zRgbXHDuN7CQAi+6zhdcnW
                        M8mxrv0Kv8+2x1rrKsqU2O0ug/N5vaEDasZXAgMBAAGjZTBjMB0GA1UdDgQWBBRQ
                        E/8BKrHdzUJ77Gwu73rUEDJGMDBCBgNVHREEOzA5gg90ZXN0aWRwdjQubHUuc2WG
                        Jmh0dHBzOi8vdGVzdGlkcHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3
                        DQEBCwUAA4IBgQAEX8bVUgn4Fx11xpM1InUKTX5PCFABCCEHrcogdisG+i9D/6vp
                        lByz8+htRhWK3NiQcFeEvb22+vWSdILQ2Orxkr5pKnq/gwwtxCtwyLLzppN9Apk8
                        MdGKykZhTt5q2vC+z5QIYVAFqop+Aur8PV8/jh5hfOS1A8qP9f4CdDbJ4yut9slD
                        ezmhSDyBzwBGw9Gp9MMwki8wUxPABnYSO0tB9hHqHcNs66L9TnU7MHFwgttWkVAe
                        fEtnmE3TOfhDvPKfA0GvxMx+8Yq33l5ULYpe7VTIZ9cnB8JDyVmxQEVY/OzfBTzr
                        4+MRo+Mla4dxpRFZCjjPzJfIoWZ4zyRCknVyITj10tVFDyZhgoGlwj3OXrny8HEz
                        syr6g6Dv3/Dvpa2hfvagYaV7MCS63lxnEwhrfHR9s8BwYhmLzKybVc+V+39cddMb
                        rQxCop8QUrH5asbJFtrD181RVvg+78kE6+06+ZpRK3fMWOxaXYQNgTsV9SUknt9W
                        vfDfE7lmEmBH3KU=
                    </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <!-- Second signing certificate is FrontChannel -->
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
                        MIIEKDCCApCgAwIBAgIVALKujwaVHaZhGOqyCUibFCDSPg+WMA0GCSqGSIb3DQEB
                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKV4FKUullzDjlhIueafuIMUklq4
                        PnkRpcLedmblQ52Vla7kA4ZWJlTihFBuxNrnV3zrRMMdvjZI1u69HgdgZHSwtCFc
                        TsqiKc3Mj2LaWrRn9+CXPvgsoHNLSVJNHBugm1lDrX/9ON5qPfcF4ojaYdvUVi56
                        ZNNhSGYUQ0zZ1+BhdUMGNAJDPL1keqsxS+OHlJzcAAhWWLEwiEohfZEcKItvE5w4
                        m53q1nJaPKZCmNRMu/U0cS5Kglr6mkF9x11HmVswdIrWEtTD7n5cfqt/2d/fimK5
                        TErL4tHLnxN8iXp5k/2ZvXKEhgT8RLczVArl7ji3WG7Uyf/+tCvbMQxsZDx5lfar
                        237f/lBQz98/73hNa6eu20Jk4aiz5RnWQDJVr5J0vxKnls6CVZ7VvckLQazQLLRw
                        LiEngXL3vRw9ZgDioKudpiPwTRvbL7Q5VjYr4WBAMImSR//AEdW14O6xSq11eKmI
                        ydEHHvH+mfEu1jwc5obRnKPgtRi44FqqVTnU3wIDAQABo2UwYzAdBgNVHQ4EFgQU
                        AFbJB7RnXcAZhzFHErMsHIWyvtMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
                        9w0BAQsFAAOCAYEAJH5eXOsHdSeq29vW0v0NJs3WhQILiyykp6I7yyy8gM8LSv4j
                        mQvzKDwGZUYkbhpGHm0zlKc+hMUA/xwZ6aoIk2/rj/ZZRa5HX0/y+UWMiQJ1mnF5
                        3PPxR/95cAwD7dOJVM5gn4Bos8DWSNI6dgSaqS59FkSFrVtWFxRLbsyviq8eRfT0
                        mVqBszBh3YYvsv3YCgVlDhW9UmvA7DsHD1UK4Ot3dfV7NkB4XMb1o6LJ1/fjP8Jt
                        Vhi0fmZx/Jjf7yBZZsZvXuty9NSeJYSFl4CrV5FtZyDjv81PpT1Ho5tFDGF+MWAP
                        xZlszLFdompzKrg4GV0hOYCVzbYHP87okyKexYqM+ILsjnbiBaYPhvbT0OvqzCyB
                        3xR3z6v9VJ7iZb6s53/6hfPIOaqoigCVVs9kryL/LWxAcONVe3j+LHSpO/LbVeVl
                        PhPdkKEJlNSh0fl1He/4tDRgn6oxtriCeGhkgkgec1Wts9ToVkVTx8Qj7KOH5pY7
                        /3I+s2NlmSzSfJF2
                    </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
                        MIIEKDCCApCgAwIBAgIVAL5LJ0uT+Dd+w/aIz5bHK/9jbaYQMA0GCSqGSIb3DQEB
                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAIxmBcbFnCYXL5QozP0c1RSoAs9R
                        +LLhYdFM8zXE1pfg0MGlNGylU/OyrDG80pRV3RvNFYLWWJ8y0w2I2aVmWjxrcCt0
                        g95qQC/MbIc7yMJXL5X8jzIJ7dTT3npW+QCzgXOvV+9kk9ukG0/Z6tJiRz2Ici6a
                        1fvJU8QjfRJqJsm4iRGYvoxLZiLlQcwyGerzoS2rDgIor99KSQEONYjoRdp/6VNy
                        yCNBta9/ZWCxAd8TFfU2QmilDR+t846IeSWuZ0lhLywr+GzxmEycklAPN/xaNQ1K
                        /nConoYA6TiJD3ecLm/K9fEay+wCN918ENJABHiQ+i2KStnhqL8oUeudPL5zUgen
                        D767tUYSjJ10orRSv0agqX7HMYMBl65Zqw9asjZNL9DZkyomyL40QIv5eFV7GmvD
                        0XyBtem7IR7SGdxloOxFE8PdRYBW655e8ojxIKoMEyoHkelhEtobzIJlYCpE44/I
                        LDxgt+NRgQ7Cjq2vh/A89JpWbYo0h2hoy6zUvwIDAQABo2UwYzAdBgNVHQ4EFgQU
                        I5jXm8+Npq8IslUUAkBW3tlyrGMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
                        9w0BAQsFAAOCAYEAN1yFroy/gJAvGQ/wcKLrbWHCeCBp8HXGRh+bJIzJoE6/JKSw
                        BNGLbd6Jp2rYobG4AnyThYn3FeaCWwq0cSyCJZ+7r+xf/X7nqWp1Hz9ols2pM7l2
                        Gszd3DP3Op8Dv1MPPbb1vWiYHhQY/AwH0dDGpkMiouxyhL7bRkId1tka6/y4olYb
                        JsqFquFZzWxiicBiY/xPqBgOA1Xd3nusiXfpawtP/5cH+HwJTMaQqDDqW9yzhZAI
                        jm8y85Vo2h4lXtqRcOJKt7m2mpGEJHKEODr7ZnmCi8gpjlwXYBqn/4ztEQCgsQwy
                        K8iUARfquSCvJbq9u68bpfG85c3CPwX4Wjke71CV50P1fwWosXUZDawR+am6PEP6
                        OJ8Dg60C40ih35vpVLw3Ro7L/48vDtE79Ncc6jPEoincmJNHsdzhWwhB0kdPC2hy
                        BOk5y8w16iqOOkOJmt1bBG5Y3fxXxFKsqecJnGu+bz++xLjtCOJhV2WEsevWKelB
                        S1UOXyr6n+XEbwgu
                    </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://testidpv4.lu.se:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidpv4.lu.se:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://testidpv4.lu.se/idp/profile/SAML2/Redirect/SLO"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://testidpv4.lu.se/idp/profile/SAML2/POST/SLO"/>
    <md:SingleSignOnService xmlns:ns1="urn:oasis:names:tc:SAML:protocol:ext:req-attr" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" ns1:supportsRequestedAttributes="true" Location="https://testidpv4.lu.se/idp/profile/SAML2/Redirect/SSO"/>
    <md:SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://testidpv4.lu.se/idp/profile/Shibboleth/SSO"/>
    <md:SingleSignOnService xmlns:ns1="urn:oasis:names:tc:SAML:protocol:ext:req-attr" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" ns1:supportsRequestedAttributes="true" Location="https://testidpv4.lu.se/idp/profile/SAML2/POST/SSO"/>
  </md:IDPSSODescriptor>
  <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
    <md:Extensions>
      <shibmd:Scope regexp="false">lu.se</shibmd:Scope>
    </md:Extensions>
    <!-- First signing certificate is BackChannel -->
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
                        MIIEJzCCAo+gAwIBAgIUax5wlSZ9mfr4nj6Nq3lG3OJ/rlAwDQYJKoZIhvcNAQEL
                        BQAwGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMB4XDTIwMDIyODE0MTkzMloX
                        DTQwMDIyODE0MTkzMlowGjEYMBYGA1UEAwwPdGVzdGlkcHY0Lmx1LnNlMIIBojAN
                        BgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAjSLQZe0gVwlmXmX7Aodd7RtVIq7x
                        SdGkUMzXKWmu0RrGoEYiIqWGPl4vwepj8rxpB+3fn1ICYLNzDZ/uZjIrQpRRLVFo
                        EpkvPtio7DiBP67CFBrW8dqeFljyyeJ1x9LXEElM5RTnduwLZfz19QnhKT3BJ6nl
                        ErtQX6AEhDaGBQr5xPcx6MOmEL6Z3l8oOuIHEJzs++CWUsaGGratFalk1mRKPjOS
                        OVS8ABKTL2WSGFWN9lg262YSozDg/b9A2Yb1CO9BfqSQLf7dqDjT8ncuQSeJ0F+k
                        9TbVgoclFPwCGW2ozi0I521UePRaAIQ9K9ogdyHntcGzg6CI4vBIiQTwBqxxBwQc
                        6Y0E9SKeNajx2zBUuXKhU7Ny+xk/fCSB8/tCn/hU1cSI+3nOpD7I+W5AkI1aJarE
                        16qmpeqnE0hVsSnJrRvR3RXcUkuFfjNR4ZDSzPgvF4zRgbXHDuN7CQAi+6zhdcnW
                        M8mxrv0Kv8+2x1rrKsqU2O0ug/N5vaEDasZXAgMBAAGjZTBjMB0GA1UdDgQWBBRQ
                        E/8BKrHdzUJ77Gwu73rUEDJGMDBCBgNVHREEOzA5gg90ZXN0aWRwdjQubHUuc2WG
                        Jmh0dHBzOi8vdGVzdGlkcHY0Lmx1LnNlL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3
                        DQEBCwUAA4IBgQAEX8bVUgn4Fx11xpM1InUKTX5PCFABCCEHrcogdisG+i9D/6vp
                        lByz8+htRhWK3NiQcFeEvb22+vWSdILQ2Orxkr5pKnq/gwwtxCtwyLLzppN9Apk8
                        MdGKykZhTt5q2vC+z5QIYVAFqop+Aur8PV8/jh5hfOS1A8qP9f4CdDbJ4yut9slD
                        ezmhSDyBzwBGw9Gp9MMwki8wUxPABnYSO0tB9hHqHcNs66L9TnU7MHFwgttWkVAe
                        fEtnmE3TOfhDvPKfA0GvxMx+8Yq33l5ULYpe7VTIZ9cnB8JDyVmxQEVY/OzfBTzr
                        4+MRo+Mla4dxpRFZCjjPzJfIoWZ4zyRCknVyITj10tVFDyZhgoGlwj3OXrny8HEz
                        syr6g6Dv3/Dvpa2hfvagYaV7MCS63lxnEwhrfHR9s8BwYhmLzKybVc+V+39cddMb
                        rQxCop8QUrH5asbJFtrD181RVvg+78kE6+06+ZpRK3fMWOxaXYQNgTsV9SUknt9W
                        vfDfE7lmEmBH3KU=
                    </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <!-- Second signing certificate is FrontChannel -->
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
                        MIIEKDCCApCgAwIBAgIVALKujwaVHaZhGOqyCUibFCDSPg+WMA0GCSqGSIb3DQEB
                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKV4FKUullzDjlhIueafuIMUklq4
                        PnkRpcLedmblQ52Vla7kA4ZWJlTihFBuxNrnV3zrRMMdvjZI1u69HgdgZHSwtCFc
                        TsqiKc3Mj2LaWrRn9+CXPvgsoHNLSVJNHBugm1lDrX/9ON5qPfcF4ojaYdvUVi56
                        ZNNhSGYUQ0zZ1+BhdUMGNAJDPL1keqsxS+OHlJzcAAhWWLEwiEohfZEcKItvE5w4
                        m53q1nJaPKZCmNRMu/U0cS5Kglr6mkF9x11HmVswdIrWEtTD7n5cfqt/2d/fimK5
                        TErL4tHLnxN8iXp5k/2ZvXKEhgT8RLczVArl7ji3WG7Uyf/+tCvbMQxsZDx5lfar
                        237f/lBQz98/73hNa6eu20Jk4aiz5RnWQDJVr5J0vxKnls6CVZ7VvckLQazQLLRw
                        LiEngXL3vRw9ZgDioKudpiPwTRvbL7Q5VjYr4WBAMImSR//AEdW14O6xSq11eKmI
                        ydEHHvH+mfEu1jwc5obRnKPgtRi44FqqVTnU3wIDAQABo2UwYzAdBgNVHQ4EFgQU
                        AFbJB7RnXcAZhzFHErMsHIWyvtMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
                        9w0BAQsFAAOCAYEAJH5eXOsHdSeq29vW0v0NJs3WhQILiyykp6I7yyy8gM8LSv4j
                        mQvzKDwGZUYkbhpGHm0zlKc+hMUA/xwZ6aoIk2/rj/ZZRa5HX0/y+UWMiQJ1mnF5
                        3PPxR/95cAwD7dOJVM5gn4Bos8DWSNI6dgSaqS59FkSFrVtWFxRLbsyviq8eRfT0
                        mVqBszBh3YYvsv3YCgVlDhW9UmvA7DsHD1UK4Ot3dfV7NkB4XMb1o6LJ1/fjP8Jt
                        Vhi0fmZx/Jjf7yBZZsZvXuty9NSeJYSFl4CrV5FtZyDjv81PpT1Ho5tFDGF+MWAP
                        xZlszLFdompzKrg4GV0hOYCVzbYHP87okyKexYqM+ILsjnbiBaYPhvbT0OvqzCyB
                        3xR3z6v9VJ7iZb6s53/6hfPIOaqoigCVVs9kryL/LWxAcONVe3j+LHSpO/LbVeVl
                        PhPdkKEJlNSh0fl1He/4tDRgn6oxtriCeGhkgkgec1Wts9ToVkVTx8Qj7KOH5pY7
                        /3I+s2NlmSzSfJF2
                    </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
                        MIIEKDCCApCgAwIBAgIVAL5LJ0uT+Dd+w/aIz5bHK/9jbaYQMA0GCSqGSIb3DQEB
                        CwUAMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTAeFw0yMDAyMjgxNDE5MTNa
                        Fw00MDAyMjgxNDE5MTNaMBoxGDAWBgNVBAMMD3Rlc3RpZHB2NC5sdS5zZTCCAaIw
                        DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAIxmBcbFnCYXL5QozP0c1RSoAs9R
                        +LLhYdFM8zXE1pfg0MGlNGylU/OyrDG80pRV3RvNFYLWWJ8y0w2I2aVmWjxrcCt0
                        g95qQC/MbIc7yMJXL5X8jzIJ7dTT3npW+QCzgXOvV+9kk9ukG0/Z6tJiRz2Ici6a
                        1fvJU8QjfRJqJsm4iRGYvoxLZiLlQcwyGerzoS2rDgIor99KSQEONYjoRdp/6VNy
                        yCNBta9/ZWCxAd8TFfU2QmilDR+t846IeSWuZ0lhLywr+GzxmEycklAPN/xaNQ1K
                        /nConoYA6TiJD3ecLm/K9fEay+wCN918ENJABHiQ+i2KStnhqL8oUeudPL5zUgen
                        D767tUYSjJ10orRSv0agqX7HMYMBl65Zqw9asjZNL9DZkyomyL40QIv5eFV7GmvD
                        0XyBtem7IR7SGdxloOxFE8PdRYBW655e8ojxIKoMEyoHkelhEtobzIJlYCpE44/I
                        LDxgt+NRgQ7Cjq2vh/A89JpWbYo0h2hoy6zUvwIDAQABo2UwYzAdBgNVHQ4EFgQU
                        I5jXm8+Npq8IslUUAkBW3tlyrGMwQgYDVR0RBDswOYIPdGVzdGlkcHY0Lmx1LnNl
                        hiZodHRwczovL3Rlc3RpZHB2NC5sdS5zZS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG
                        9w0BAQsFAAOCAYEAN1yFroy/gJAvGQ/wcKLrbWHCeCBp8HXGRh+bJIzJoE6/JKSw
                        BNGLbd6Jp2rYobG4AnyThYn3FeaCWwq0cSyCJZ+7r+xf/X7nqWp1Hz9ols2pM7l2
                        Gszd3DP3Op8Dv1MPPbb1vWiYHhQY/AwH0dDGpkMiouxyhL7bRkId1tka6/y4olYb
                        JsqFquFZzWxiicBiY/xPqBgOA1Xd3nusiXfpawtP/5cH+HwJTMaQqDDqW9yzhZAI
                        jm8y85Vo2h4lXtqRcOJKt7m2mpGEJHKEODr7ZnmCi8gpjlwXYBqn/4ztEQCgsQwy
                        K8iUARfquSCvJbq9u68bpfG85c3CPwX4Wjke71CV50P1fwWosXUZDawR+am6PEP6
                        OJ8Dg60C40ih35vpVLw3Ro7L/48vDtE79Ncc6jPEoincmJNHsdzhWwhB0kdPC2hy
                        BOk5y8w16iqOOkOJmt1bBG5Y3fxXxFKsqecJnGu+bz++xLjtCOJhV2WEsevWKelB
                        S1UOXyr6n+XEbwgu
                    </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://testidpv4.lu.se:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
  </md:AttributeAuthorityDescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">Lund University</md:OrganizationName>
    <md:OrganizationName xml:lang="sv">Lunds universitet</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="sv">Lunds universitet</md:OrganizationDisplayName>
    <md:OrganizationDisplayName xml:lang="en">Lund University</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.lunduniversity.lu.se/</md:OrganizationURL>
    <md:OrganizationURL xml:lang="sv">https://www.lu.se/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="administrative">
    <md:GivenName>LU IdP administrators</md:GivenName>
    <md:EmailAddress>mailto:idpadmin@epic.lu.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="support">
    <md:GivenName>LU Servicedesk</md:GivenName>
    <md:EmailAddress>mailto:servicedesk@lu.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
    <md:GivenName>IRT Lund University</md:GivenName>
    <md:EmailAddress>mailto:abuse@lu.se</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:GivenName>LU IdP administrators</md:GivenName>
    <md:EmailAddress>mailto:idpadmin@epic.lu.se</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>