<EntityDescriptor entityID="https://idp.cc.binghamton.edu/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                  xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
                  xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
                  xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">

    <IDPSSODescriptor errorURL="https://www.binghamton.edu/its/index.html" protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">binghamton.edu</shibmd:Scope>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
              <mdui:DisplayName xml:lang="en">Binghamton University</mdui:DisplayName>
              <mdui:InformationURL xml:lang="en">http://www.binghamton.edu/</mdui:InformationURL>
              <mdui:Description xml:lang="en">Binghamton University Authentication Service</mdui:Description>
              <mdui:PrivacyStatementURL xml:lang="en">https://www.binghamton.edu/its/about/governance/policies/privacy.html</mdui:PrivacyStatementURL>
              <mdui:Logo height="115" width="315" xml:lang="en">https://www.binghamton.edu/images/v2/binghamton-university-logo2.png</mdui:Logo>
            </mdui:UIInfo>
            <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
              <mdui:DomainHint>www.binghamton.edu</mdui:DomainHint>
              <mdui:DomainHint>idp.cc.binghamton.edu</mdui:DomainHint>
            </mdui:DiscoHints>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDPzCCAiegAwIBAgIUPwS/fjOHvVaoftRxnBZPdAOw/PwwDQYJKoZIhvcNAQEL
BQAwIDEeMBwGA1UEAwwVaWRwLmNjLmJpbmdoYW10b24uZWR1MB4XDTE5MDcxOTE2
MjAwOVoXDTM5MDcxOTE2MjAwOVowIDEeMBwGA1UEAwwVaWRwLmNjLmJpbmdoYW10
b24uZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfy9Fmguqnu9
lF9h7L0iRvhNn3lteFFhBK9EJw8LgzX+ppxgUde9jukeH1b1qm9sKHoG+Gqr0sia
eN9bkC4W8SLqddeujRYpFR6KCn3tlT/X2IBJSh/AsACgpe+/r2+Wpin6eWRRqkKt
vI2UlDcQ7JqlkWNHWe63Ue9FZkcCGufDlZrprPAEovxheqp8kbcImMCAzV6DEiKW
DGhtWnQxt2wM89rZGOzvyttdnFBaHJt789DR6AA4M6viBBwIa6qPRf5ZqGAUh7rN
3pWFoJ+JYk0F7+cOrOaM3vCSFnZwbdGdDuZMDZO1lPWCCh02ls4nT0xGQsuV2jmL
uGC0Buw3jQIDAQABo3EwbzAdBgNVHQ4EFgQUFbJpjrECRYL/0FknHSi4fjan614w
TgYDVR0RBEcwRYIVaWRwLmNjLmJpbmdoYW10b24uZWR1hixodHRwczovL2lkcC5j
Yy5iaW5naGFtdG9uLmVkdS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
AQEARwEBCRodW6eYP/hMZPdj7fDYpJU+MERaBpZwxgs/9mdA0grb6D8IeH2Yvk0X
JTXlSHKgsAUxI9hQzb+59nlMTx0u7UTxLw1xv2L/zZg62rOw9okOf6Auot9wGp3/
StKEV1+kmCFSp36XlyOrhNvy4EDncQwe8Va7+xfDxulYsIu2MLtCFWnEztdrcAks
S+g5R/Ook3epvuFvpw55ZkaEaPFKJAYgMKWulz1xcgmdlVUjITixxNBRSvCBPyuc
5xj7j71z8ARF7nfPuBbingiq22XHbWFOTJLmYWybeM7qCE2bEa9kHx/v+6HSDmGd
ySWc+0B89OVAZr7HOytEsWxFkw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://idp.cc.binghamton.edu/idp/profile/SAML1/SOAP/ArtifactResolution" 
                                   index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                             Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                             Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                             Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/SOAP/SLO"/>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://idp.cc.binghamton.edu/idp/profile/Shibboleth/SSO" />
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/POST/SSO" />
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/POST-SimpleSign/SSO" />
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">binghamton.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://idp.cc.binghamton.edu/idp/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://idp.cc.binghamton.edu/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    
       <Organization>
                <OrganizationName xml:lang="en">Binghamton University</OrganizationName>
                <OrganizationDisplayName xml:lang="en">Binghamton University</OrganizationDisplayName>
                <OrganizationURL xml:lang="en">http://www.binghamton.edu/</OrganizationURL>
        </Organization>
        <ContactPerson contactType="administrative">
                <GivenName>Michael Hizny</GivenName>
                <EmailAddress>mhizny@binghamton.edu</EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="technical">
                <GivenName>Jeffrey Ramsay</GivenName>
                <EmailAddress>jramsay@binghamton.edu</EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="support">
                <GivenName>ITS Help Desk</GivenName>
                <EmailAddress>helpdesk@binghamton.edu</EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="other">
                <GivenName>Security</GivenName>
                <EmailAddress>security@binghamton.edu</EmailAddress>
        </ContactPerson>
</EntityDescriptor>
