<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shibboleth.ucalgary.ca/idp/shibboleth">

    <Organization>
        <OrganizationName xml:lang="en" xmlns:xml="http://www.w3.org/XML/1998/namespace">University of Calgary</OrganizationName>
        <OrganizationDisplayName xml:lang="en" xmlns:xml="http://www.w3.org/XML/1998/namespace">University of Calgary</OrganizationDisplayName>
        <OrganizationURL xml:lang="en" xmlns:xml="http://www.w3.org/XML/1998/namespace">http://www.ucalgary.ca/</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
        <GivenName>IT</GivenName>
        <SurName>Support</SurName>
        <EmailAddress>it@ucalgary.ca</EmailAddress>
    </ContactPerson>

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ucalgary.ca</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">University of Calgary</mdui:DisplayName>
                <mdui:Description xml:lang="en">University of Calgary Identity Provider</mdui:Description>
                <mdui:Logo height="132" width="113">http://static.ucalgary.ca/2013-001/980/global/images/identity/vertical-crest.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.ucalgary.ca:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.ucalgary.ca:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.ucalgary.ca/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.ucalgary.ca/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.ucalgary.ca/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.ucalgary.ca:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.ucalgary.ca/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibboleth.ucalgary.ca/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibboleth.ucalgary.ca/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibboleth.ucalgary.ca/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ucalgary.ca</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDQzCCAiugAwIBAgIUJCj4uNVwOtTjEfqpD8LF+f85i6IwDQYJKoZIhvcNAQEL
BQAwITEfMB0GA1UEAwwWc2hpYmJvbGV0aC51Y2FsZ2FyeS5jYTAeFw0xNTExMjYy
MjAyMDJaFw0zNTExMjYyMjAyMDJaMCExHzAdBgNVBAMMFnNoaWJib2xldGgudWNh
bGdhcnkuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXv4Nzsy9V
dRdBCFZO40Lzo9fccpi4T9HManUDTR9Uik/ShzdE2G7kl7ClPj3IhgPs7ETFc7JG
I2rIc4oHcIhW80WMaVxy6T6XVl9LQf1WJ4ha585XW534Ph4hD0ii/JsnGrMY3K8k
Q//6cc/1Y2HSBDlMp/NK6oOy+fM1ev1Do4dQos9TkmGxSd0IGl3oUoCp5vW+5hcu
q4rb5AgDfjqTdrQTi8SPwNn6LvEa1jLJDhwHe44YQ6K58FGBsxC4nIZaxc4S1xTI
a3tuzuLeTBnTBlG7vvaXpVvrpd7QM32oT63xcckgib45SEpGrZLs+TPlse9bURF+
HJWqAT3Dx44XAgMBAAGjczBxMB0GA1UdDgQWBBR9JAr986zmluKaGZotuJ8BrZmA
1DBQBgNVHREESTBHghZzaGliYm9sZXRoLnVjYWxnYXJ5LmNhhi1odHRwczovL3No
aWJib2xldGgudWNhbGdhcnkuY2EvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL
BQADggEBAGaJCSHnzvbZ1oUmsWb0p+NYhTDjVqs9U5ZHUKVVPttiPXT4N3Za/nyA
xEALqBgcLEHaUn0QStjr0t2LRV2FrgcbMVO5N/72OFpf0eVq20/t8rvBV+8yeqx6
0tEo8khakBRe4RimJ56CJWAj0ZmBWs4oF0/H1m7ikUmIY0WLpW9HLSy7cU+Nssui
dH+/9sPdsXK396IdpCd8KLGCuXyGxPmpveMBvB8yhkGvWbIRLGHaw1x2Q+WhHW8c
eCpi73WglffqQDPwbEYuFmqkxhNW5k0IpD/+kKIHqmb8Tn3gGYQwvXhqoYBFDz7d
emY0ALbqLBrjbt4HUaucdGvZcRhSIIg=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.ucalgary.ca:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibboleth.ucalgary.ca:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
