<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://shib-idp-staging.dsc.umich.edu/idp/shibboleth">

    <Extensions xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <mdattr:EntityAttributes xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
       <saml:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" Name="environment">
          <saml:AttributeValue>nonprod</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>https://github.com/umich-iam/shibboleth-umich-federation/raw/master/category/nonprod.md</saml:AttributeValue>
      </saml:Attribute>
      </mdattr:EntityAttributes>
    </Extensions>

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">umich.edu</shibmd:Scope>
            <shibmd:Scope regexp="false">annarbor.umich.edu</shibmd:Scope>
            <shibmd:Scope regexp="false">umd.umich.edu</shibmd:Scope>
            <shibmd:Scope regexp="false">dearborn.umich.edu</shibmd:Scope>
            <shibmd:Scope regexp="false">flint.umich.edu</shibmd:Scope>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                <mdui:DisplayName xml:lang="en">University of Michigan</mdui:DisplayName>
                <mdui:Description xml:lang="en">The University of Michigan</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://umich.edu/</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://it.umich.edu/security-privacy</mdui:PrivacyStatementURL>
                <mdui:Logo height="150" width="150" xml:lang="en">https://shib-idp-staging.dsc.umich.edu/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>MIIEZjCCAs6gAwIBAgIVAKPRJ3kOnVLto2br+gW9zUCYU5IFMA0GCSqGSIb3DQEB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</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>



        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>MIIEZjCCAs6gAwIBAgIVAOIZ/xNXb+Yyvr4nW5JAldgIA/JSMA0GCSqGSIb3DQEB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</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/SAML2/POST/SLO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib-idp-staging.dsc.umich.edu/idp/profile/Shibboleth/SSO"/>
    </IDPSSODescriptor>

    <Organization>
        <OrganizationName xml:lang="en">University of Michigan</OrganizationName>
        <OrganizationDisplayName xml:lang="en">University of Michigan</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">https://umich.edu/</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
        <GivenName>ITS Identity and Access Management</GivenName>
        <EmailAddress>shibboleth@umich.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="support">
        <GivenName>ITS Identity and Access Management</GivenName>
        <EmailAddress>shibboleth@umich.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
        <GivenName>ITS Security</GivenName>
        <EmailAddress>security@umich.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="technical">
        <GivenName>ITS Identity and Access Management</GivenName>
        <EmailAddress>shibboleth@umich.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="administrative">
        <GivenName>ITS Identity and Access Management</GivenName>
        <EmailAddress>shibboleth@umich.edu</EmailAddress>
    </ContactPerson>

</EntityDescriptor>
