<EntityDescriptor entityID="http://iam.auckland.ac.nz/idp"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

        <Extensions>
            <shibmd:Scope regexp="false">auckland.ac.nz</shibmd:Scope>
            <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
                <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification">
                    <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
        </Extensions>
  
        <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
        
        <Extensions>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">https://www.auckland.ac.nz/en.html</mdui:DisplayName>
                <mdui:Description xml:lang="en">The identity provider at the University of Auckland</mdui:Description>
                <mdui:Logo height="132" width="320" xml:lang="en">https://iam.auckland.ac.nz/logo/the-university-of-auckland-logo-tiny.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFOTCCBCGgAwIBAgIJALWAESNtBD3HMA0GCSqGSIb3DQEBCwUAMIHDMQswCQYD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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://iam.auckland.ac.nz/profile/SAML1/SOAP/ArtifactResolution"
                                   index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://iam.auckland.ac.nz/profile/SAML2/SOAP/ArtifactResolution"
                                   index="2"/>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://iam.auckland.ac.nz/profile/Shibboleth/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://iam.auckland.ac.nz/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://iam.auckland.ac.nz/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://iam.auckland.ac.nz/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">auckland.ac.nz</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>MIIFOTCCBCGgAwIBAgIJALWAESNtBD3HMA0GCSqGSIb3DQEBCwUAMIHDMQswCQYD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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://iam.auckland.ac.nz/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://iam.auckland.ac.nz/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    <md:ContactPerson xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security" xmlns:remd="http://refeds.org/metadata">
      <md:GivenName>Security Response Team</md:GivenName>
      <md:EmailAddress>mailto:security@auckland.ac.nz</md:EmailAddress>
   </md:ContactPerson>    
</EntityDescriptor>    
