<?xml version="1.0" encoding="UTF-8"?>

<!-- Ansible managed -->

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                   xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://login.hs-albsig.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">hs-albsig.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Albstadt-Sigmaringen University of Applied Sciences</mdui:DisplayName>
                <mdui:DisplayName xml:lang="de">Hochschule Albstadt-Sigmaringen</mdui:DisplayName>
                <mdui:Description xml:lang="en">Web login service of Albstadt-Sigmaringen University of Applied Sciences</mdui:Description>
                <mdui:Description xml:lang="de">Login Dienst der Hochschule Albstadt-Sigmaringen</mdui:Description>
                <mdui:Logo height="16" width="16">https://login.hs-albsig.de/idp/images/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://login.hs-albsig.de/idp/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.hs-albsig.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hs-albsig.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.hs-albsig.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.hs-albsig.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.hs-albsig.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hs-albsig.de:8443/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.hs-albsig.de/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.hs-albsig.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.hs-albsig.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.hs-albsig.de/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hs-albsig.de/idp/profile/SAML2/SOAP/ECP"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </IDPSSODescriptor>

    <!-- Protocol-Support für SAML2-Queries im AA-Descriptor aktivieren -->
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hs-albsig.de</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIFPzCCAyegAwIBAgIVAJmb3b9BBy9oJW4jeU4s0+AWHOxSMA0GCSqGSIb3DQEB
CwUAMB0xGzAZBgNVBAMMEmxvZ2luLmhzLWFsYnNpZy5kZTAeFw0yNTA5MDUxMDI0
NDRaFw0yODA5MDUxMDI0NDRaMB0xGzAZBgNVBAMMEmxvZ2luLmhzLWFsYnNpZy5k
ZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKmo+Rhmi7zv29QwF33w
xlEx72cgbz5E2wuXzqMuQJS8kMRksb/n8KxZIvdQ41xP5wYZweDcaB89yuvZs8hW
FpKQcdExlz2SP2cyxN0AYUnK4LX2zdmKcybF3DaQKieRar2/tMHFJ9fFbr935xaV
xx4MjT6DpjWw3upV6T5PV0DcFTO/ZR3aHQ4GTqKpfK0qI2oEVJq5gwtLFvCBcwTx
F0rjUrVVh9zIvjKwCuLaEKBfwGX7zqNAsR4cIrafOIekoyPtWWlUQz5ZRN1P5yHi
5qcv2n+PPg8QLno+crkqce2o/DPIspPmNA7Efnvjl7BCd8usIoW037jT8Phv3RRu
HG0zUNwq1x16W1SP4wIkHd61uO+/vFxOrhcW35r+JWsc3U+ZxGaCmojMXUXwSADW
myal1bALFxgpxiGO6cfxv4PQD4HRnhOKrncsIAD2RmxuoB+9WQNx+BGqBAdfcB9j
dZcHT9uhDntHJONgy0CmzsAS7cDdaJeFfZCqff+cpgSMYOZW9E0BPLp37INpEE8N
bLMogaFc8mm9RCjE1wLrqLZE9PK7ZB381mVGuTClBkF8XkiI6UIOud0uLlVaCXek
qG5eVi2FcHYQuw+zDnuQ2w763j0BBNIZ4fKm+DbDLyfTh4Jr6nyjLsT95jIJ8rVV
B2adr+/wo3BnOg5bb6Kx6OPRAgMBAAGjdjB0MB0GA1UdDgQWBBQQXQ0UpXpK2SzF
BJQO2o930ZNjgTBIBgNVHREEQTA/ghJsb2dpbi5ocy1hbGJzaWcuZGWGKWh0dHBz
Oi8vbG9naW4uaHMtYWxic2lnLmRlL2lkcC9zaGliYm9sZXRoMAkGA1UdEwQCMAAw
DQYJKoZIhvcNAQELBQADggIBAF1PZrDUOxxk8fkr7lkmwPHzhKxfinfViJtaPLxX
4Lb/kwzQO6na9a4n8b3HoGhouIxc0e6fYbu1pl70xJ2Q7FLtthE6tgIzv6+8s7Js
wy84lA8z52Zhjd+6CGpxawDsJSGUD3wBfNezGrdJLxwHXpmxgkKNYJQJ96xIU3Fi
Hw4ENBCnWtMXKneTly7IB46/MMmgpR6uuEVOjnUQSDiOQkwsMaH8hoNaSAuvadb8
DMR/UOt7mVb4rvprnzxkTi9MoueGj4xYH+T1+kB7zBo6P3qJhu06RPVeEcyOrLnX
19kTFiGt9H5en/BIzoTF62/A2dquOFw6472w2VW2KGR6IaZqZSXHuulx6YpIp4cV
F+PrW+LVNZFz6e5wdcUJD3MTLeQ8+g9ZwdEGFl7fyRgZTYt4OJdXAe3ezBbzimKH
fnEfWrjVGtA6EoTwWhKhaqnrYoPXdL9iWdDGeGZEXeZ8V3F21pMjPzjaaXHzBrY8
MLbRjxG9p0f8rActvS3KKEf5TmlHB45J1NCl6iIh+2Z4xeVafUnGBHQxInoq4r9M
vHqo5DQhT8cZssX1APip4dYkLyb5PFsRMuxw0nzbPzLZ6kwWDUW6PSvYArYkshx7
u+sBiatYhu/H1nEtLujJ9P8Y0MPZO1dtEeHuKlTvk2U0IQac84pnVLpTEKWgQdTK
H3lj
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.hs-albsig.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP-binding" Location="https://login.hs-albsig.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
