<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.duq.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0" errorURL="https://www.duq.edu/about/campus/computing-and-technology-services/idp-error">

        <Extensions>
            <shibmd:Scope regexp="false">cr.duq.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.duq.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.duq.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.duq.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.duq.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.duq.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.duq.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.duq.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.duq.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.duq.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.duq.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">cr.duq.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.duq.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.duq.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
