<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:pyff="http://pyff.io/NS" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ser="http://eidas.europa.eu/metadata/servicelist" xmlns:eidas="http://eidas.europa.eu/saml-extensions" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:remd="http://refeds.org/metadata" xmlns:saml1md="urn:mace:shibboleth:metadata:1.0" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:algsupport="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" xmlns:disco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0" xmlns:elab="http://eduserv.org.uk/labels" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:hoksso="urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser" xmlns:mduri="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ns1="http://www.w3.org/2000/09/xmldsig#" xmlns:ns2="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:ns3="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns4="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ns5="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ns6="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:ns7="urn:oasis:names:tc:SAML:metadata:ui" xmlns:oaf="http://schemas.eduserv.org.uk/openathens-federation/1.0" xmlns:privacy="http://docs.oasis-open.org/wsfed/privacy/200706" xmlns:refeds="http://refeds.org/metadata" xmlns:req="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" xmlns:taat="http://www.eenet.ee/EENet/urn" xmlns:ukfedlabel="http://ukfederation.org.uk/2006/11/label" xmlns:wayf="http://sdss.ac.uk/2006/06/WAYF" xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:xi="http://www.w3.org/2001/XInclude" xmlns:xsd="http://www.w3.org/2001/XMLSchema" entityID="https://idp.dfn-cert.de/idp/shibboleth">
    <md:Extensions>
        <mdrpi:RegistrationInfo registrationAuthority="https://www.aai.dfn.de" registrationInstant="2009-05-26T08:35:12Z">
            <mdrpi:RegistrationPolicy xml:lang="de">https://www.aai.dfn.de/teilnahme/</mdrpi:RegistrationPolicy>
            <mdrpi:RegistrationPolicy xml:lang="en">https://www.aai.dfn.de/en/join/</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
        <mdattr:EntityAttributes>
            <saml:Attribute Name="http://macedir.org/entity-category-support" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>http://aai.dfn.de/category/dfn-edu-id</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
            </saml:Attribute>
        <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://pyff.io/collection"><saml:AttributeValue>DFN-AAI-IdP</saml:AttributeValue></saml:Attribute><saml:Attribute Name="http://aai.dfn.de/edugain/registrationAuthority" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"><saml:AttributeValue>https://www.aai.dfn.de</saml:AttributeValue></saml:Attribute></mdattr:EntityAttributes>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">dfn-cert.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="de">DFN-CERT Services GmbH</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">DFN-CERT Services GmbH</mdui:DisplayName>
                <mdui:Description xml:lang="de">Identity Provider der DFN-CERT Services GmbH</mdui:Description>
                <mdui:Description xml:lang="en">Identity Provider for DFN-CERT Services GmbH</mdui:Description>
                <mdui:InformationURL xml:lang="de">https://www.dfn-cert.de</mdui:InformationURL>
                <mdui:Logo height="77" width="240">https://mdv.aai.dfn.de/media/logos/e16/dfn-cert-services-gmbh-logo-blue.svg</mdui:Logo>
                <mdui:Logo height="16" width="16">https://mdv.aai.dfn.de/media/icons/e16/favicon.0a04b05ad23a.svg</mdui:Logo>
                <mdui:InformationURL xml:lang="en">https://www.dfn-cert.de</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="de">https://www.dfn-cert.de/datenschutzerklaerung.html</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:KeyName>idp.dfn-cert.de</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=idp.dfn-cert.de,O=DFN-CERT Services GmbH,L=Hamburg,ST=Hamburg,C=DE</ds:X509SubjectName>
                    <ds:X509Certificate>MIIHzTCCBbWgAwIBAgIMLmWZ+piI6Pb+pAocMA0GCSqGSIb3DQEBCwUAMIGVMQsw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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:KeyName>idp.dfn-cert.de</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=idp.dfn-cert.de,O=DFN-CERT Services GmbH,L=Hamburg,ST=Hamburg,C=DE</ds:X509SubjectName>
                    <ds:X509Certificate>MIIHzTCCBbWgAwIBAgIMLmWZ+piI6Pb+pAocMA0GCSqGSIb3DQEBCwUAMIGVMQsw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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.dfn-cert.de/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.dfn-cert.de/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.dfn-cert.de/idp/profile/SAML2/POST/SLO"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.dfn-cert.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.dfn-cert.de/idp/profile/SAML2/Redirect/SLO"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.dfn-cert.de/idp/profile/SAML2/SOAP/SLO"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.dfn-cert.de/idp/profile/SAML2/POST/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.dfn-cert.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.dfn-cert.de/idp/profile/SAML2/Redirect/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.dfn-cert.de/idp/profile/SAML2/SOAP/ECP"/>
    </md:IDPSSODescriptor>
    <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">dfn-cert.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="de">DFN-CERT Services GmbH</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">DFN-CERT Services GmbH</mdui:DisplayName>
                <mdui:Description xml:lang="de">Identity Provider der DFN-CERT Services GmbH</mdui:Description>
                <mdui:Description xml:lang="en">Identity Provider for DFN-CERT Services GmbH</mdui:Description>
                <mdui:InformationURL xml:lang="de">https://www.dfn-cert.de</mdui:InformationURL>
                <mdui:Logo height="77" width="240">https://mdv.aai.dfn.de/media/logos/e16/dfn-cert-services-gmbh-logo-blue.svg</mdui:Logo>
                <mdui:Logo height="16" width="16">https://mdv.aai.dfn.de/media/icons/e16/favicon.0a04b05ad23a.svg</mdui:Logo>
                <mdui:InformationURL xml:lang="en">https://www.dfn-cert.de</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="de">https://www.dfn-cert.de/datenschutzerklaerung.html</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:KeyName>idp.dfn-cert.de</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=idp.dfn-cert.de,O=DFN-CERT Services GmbH,L=Hamburg,ST=Hamburg,C=DE</ds:X509SubjectName>
                    <ds:X509Certificate>MIIHzTCCBbWgAwIBAgIMLmWZ+piI6Pb+pAocMA0GCSqGSIb3DQEBCwUAMIGVMQsw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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.dfn-cert.de/idp/profile/SAML2/SOAP/AttributeQuery"/>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    </md:AttributeAuthorityDescriptor>
    <md:Organization>
        <md:OrganizationName xml:lang="de">e16</md:OrganizationName>
        <md:OrganizationName xml:lang="en">e16</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="de">DFN-CERT Services GmbH</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">DFN-CERT Services GmbH</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="de">http://www.dfn-cert.de</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">http://www.dfn-cert.de</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="administrative">
        <md:GivenName>PKI-Administratoren</md:GivenName>
        <md:EmailAddress>mailto:pki-admin@dfn-cert.de</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
        <md:GivenName>DFN-CERT</md:GivenName>
        <md:EmailAddress>mailto:cert@dfn-cert.de</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="support">
        <md:GivenName>DFN-PCA</md:GivenName>
        <md:EmailAddress>mailto:dfnpca@dfn-cert.de</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
        <md:GivenName>PKI-Administratoren</md:GivenName>
        <md:EmailAddress>mailto:pki-admin@dfn-cert.de</md:EmailAddress>
    </md:ContactPerson>
</md:EntityDescriptor>