<?xml version="1.0" encoding="UTF-8"?>
<!-- may 2020 -->
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://auth.lmu.edu/idp/shibboleth">

    <IDPSSODescriptor errorURL="https://its.lmu.edu/gethelp/itsservicedesk/" protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">lmu.edu</shibmd:Scope>
            <shibmd:Scope regexp="false">auth.lmu.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <!-- Not active yet
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.lmu.edu/idp/profile/SAML2/Redirect/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.lmu.edu/idp/profile/SAML2/POST/SLO" />
        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.lmu.edu/idp/profile/SAML2/SOAP/SLO" />
        -->
                                   
       <!-- Not actually a SAMLv2 Logout endpoint, but it is where we want SPs to send the user for logout if appropriate -->
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.lmu.edu/idp/profile/Logout"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://auth.lmu.edu/idp/profile/SAML2/SOAP/ECP"/>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://auth.lmu.edu/idp/profile/Shibboleth/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auth.lmu.edu/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.lmu.edu/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>
    
</EntityDescriptor>
