<EntityDescriptor entityID="https://idea.ifc.cnr.it/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ifc.cnr.it</shibmd:Scope>

<mdui:UIInfo>
	<mdui:DisplayName xml:lang="en">
		CNR Institute of Clinical Physiology
	</mdui:DisplayName>
	<mdui:DisplayName xml:lang="it">
		CNR Istituto di Fisiologia Clinica
	</mdui:DisplayName>

	<mdui:Description xml:lang="en">
		Identity Provider for CNR Institute of Clinical Physiology users
	</mdui:Description>
	<mdui:Description xml:lang="it">
		Identity Provider per gli utenti di CNR Istituto di Fisiologia Clinica
	</mdui:Description>

	<mdui:InformationURL xml:lang="en">
		https://www.ifc.cnr.it/index.php/en
	</mdui:InformationURL>
	<mdui:InformationURL xml:lang="it">
		https://www.ifc.cnr.it
	</mdui:InformationURL>

	<mdui:Logo height="16" width="17" xml:lang="unspecified">
		https://idea.ifc.cnr.it/logo/1616.png
	</mdui:Logo>
	<mdui:Logo height="60" width="80" xml:lang="unspecified">
		https://idea.ifc.cnr.it/logo/8060.png
	</mdui:Logo>
</mdui:UIInfo>

        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://idea.ifc.cnr.it:8443/idp/profile/SAML1/SOAP/ArtifactResolution" 
                                   index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://idea.ifc.cnr.it:8443/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://idea.ifc.cnr.it/idp/profile/Shibboleth/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://idea.ifc.cnr.it/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://idea.ifc.cnr.it/idp/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://idea.ifc.cnr.it/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ifc.cnr.it</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://idea.ifc.cnr.it:8443/idp/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://idea.ifc.cnr.it:8443/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    <ContactPerson contactType="technical">
	<SurName>Raffaele Conte</SurName>
	<EmailAddress>idem@ifc.cnr.it</EmailAddress>
    </ContactPerson>
 
</EntityDescriptor>    

