<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.helmholtz-hzi.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">helmholtz-hzi.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Helmholtz Center for Infection Research GmbH</mdui:DisplayName>
                <mdui:DisplayName xml:lang="de">Helmholtz-Zentrum für Infektionsforschung GmbH</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of Helmholtz Center for Infection Research</mdui:Description>
                <mdui:Description xml:lang="de">Identity Provider des Helmholtz-Zentrums für Infektionsforschung</mdui:Description>
                <mdui:Logo height="16" width="16">https://idp.helmholtz-hzi.de/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://idp.helmholtz-hzi.de/idp/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.helmholtz-hzi.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.helmholtz-hzi.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.helmholtz-hzi.de:8443/idp/profile/SAML2/SOAP/SLO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.helmholtz-hzi.de/idp/profile/Shibboleth/SSO"/>

        <!-- den fehlenden ECP-Endpoint hinzufügen -->
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.helmholtz-hzi.de/idp/profile/SAML2/SOAP/ECP"/>
 
        <!-- die fehlenden NameID-Formate hinzufügen -->
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>


    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">helmholtz-hzi.de</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIFRjCCAy6gAwIBAgIUZsWLe/Td0mLM8CmyNRTvvg5cWMgwDQYJKoZIhvcNAQEL
BQAwHzEdMBsGA1UEAwwUaWRwLmhlbG1ob2x0ei1oemkuZGUwHhcNMjYwNjI2MDkx
OTUzWhcNMjkwNjI2MDkxOTUzWjAfMR0wGwYDVQQDDBRpZHAuaGVsbWhvbHR6LWh6
aS5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL561d08652XeG+W
RTgAufYFqaTkjVIz9AqpzU2ERHS0wctAwWWTtc/TxF07cwdEuaFbyEBjDfRrPrJ2
3obZNLqNysA8SDWt3u2Vmh4P53jrH0EwGNvn76f6/I0ediFmxFD/bqcophHeahqe
F1I7Jfywrwn1eQ2HhwrpXfV5DMgr1+abTxdukM9iTbNFXTEIhYA7uITyoJCgpLEw
T0QV+2UxXX2qeaXZV+hjmwxHhMQsQMVXZZo3fY4Oo8EgyK5siSiYoGQ+DA1yKDkv
sfN35frgRlN2Y5/BY/croGw/fFk8wb8Mb/g/QEGHEf/koDwQWvAVkEB26Up4eBhG
dMKsMUvjm/CQx/sc+7rinopSq/bZRdXXQGhHLJQas/nA70BfY+YYF35FHPaBmaOe
3gTW4k368IMF2vUA5MgLqCVaxszfE5wn53TajbpVAPfurZsTJPRrqEy58wOOk+Yf
KcrRFcGP/ZjZkBZakH7pxGKqwGKOKPwBXI1rS39dkov3gZ087iSNYsNeiwyueXiv
ESLnkotJdVsDhegxGM9G/iGscFXKu6wAYJIm1iDtf9rfx2np6pXuce4OuLKgLdio
6i6VWXXeRHfSK7qHRuZXP9vRd3dmqhkwhqlCqD7EkPi5WA8OS9jced4fdUrhnx3a
mwUJx1uLgkosmzjPFdMCioeZZlyfAgMBAAGjejB4MB0GA1UdDgQWBBR1j+AMSsRh
9ZfYHM+Myi6F+5S25TBMBgNVHREERTBDghRpZHAuaGVsbWhvbHR6LWh6aS5kZYYr
aHR0cHM6Ly9pZHAuaGVsbWhvbHR6LWh6aS5kZS9pZHAvc2hpYmJvbGV0aDAJBgNV
HRMEAjAAMA0GCSqGSIb3DQEBCwUAA4ICAQA6dJEbpCijq4/wO0fEP8pjKQTBA6Yc
f2+XmmmRK+P+zw9S2STGbXP7dy7WC+ZFHQ7L0dwQBZMRPQzPPsG9HcKh+K/KSGIS
lzL8kNO04Ih4Ph4z/CxD5V6fTb+DSUPJOonZoNQC6G4wB5lO8qklO7Qda6XBmaF1
JXB2W+BCxqZU1k8iIo/hPmUydo0nei+zD4bDDff/6B0MZbfQtsar+vcqxisFE4Xr
Gg9uOZyNH9eWg8ZZMyS0n32uKJTh0G7IqPeO2dwivclxN7YTbywOa9LqcpNEiZyr
RBJELhhwtqDJxjOrJWKSMqmIqM9TLY+kdo0amdxlWBWapupwTudafQaXcF23xFgy
7ioQjMxwwCccPFvcvt79r5fhkysLDVnMowq2PZDfaOOAb0rnWtpT7O6Vr4xAzmoj
6wfLQHQ9lLSJfSkvOhkWAz37vHQ7HHUMW16pWgkPdiIjjU/utnSmPCkqoSYx30FZ
tR/3ukDzNO+kyqWlNAUi+s8EDpAdN/LggnalZN232j7PtDb+FIP4dWPPN+2qpIBL
Bf7f2cQuzp7qqvy5lLjL2dn2BFoRNN+yHssvRgr++qwic27c8ip2TTHiRSseI+Gs
irGy6ZYdnZzXXnbtABm0yo/4LgUwhO8jRmS0fNPaZC6ZUsyyLbd3+IgMSGONJXVn
QI9KPOrgSFO+vw==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.helmholtz-hzi.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.helmholtz-hzi.de:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> 

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>


    </AttributeAuthorityDescriptor>

</EntityDescriptor>
