<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2023-05-02T14:24:36.060Z" entityID="https://eduid.collegium-carolinum.de/idp/shibboleth">

    <Extensions xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
            <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
        </eduidmd:RepublishRequest>
    </Extensions>


    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
		<shibmd:Scope regexp="false">collegium-carolinum.de</shibmd:Scope>
     <mdui:UIInfo>
        <mdui:DisplayName xml:lang="en">Collegium Carolinum</mdui:DisplayName>
        <mdui:DisplayName xml:lang="cs">Collegium Carolinum</mdui:DisplayName>
        <mdui:Description xml:lang="en">Collegium Carolinum Identity Provider.</mdui:Description>
        <mdui:Description xml:lang="cs">Poskytovatel identity pro Collegium Carolinum</mdui:Description>
        <mdui:InformationURL xml:lang="en">https://www.collegium-carolinum.de/en/</mdui:InformationURL>
        <mdui:InformationURL xml:lang="cs">https://www.collegium-carolinum.de/cs/</mdui:InformationURL>
        <mdui:Logo height="333" width="1000">https://eduid.collegium-carolinum.de/logo.png</mdui:Logo>
    </mdui:UIInfo>
 
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

         <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://eduid.collegium-carolinum.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

<!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://eduid.collegium-carolinum.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://eduid.collegium-carolinum.de:8443/idp/profile/SAML2/SOAP/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduid.collegium-carolinum.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eduid.collegium-carolinum.de/idp/profile/SAML2/POST/SLO"/>
--> 

         <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://eduid.collegium-carolinum.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://eduid.collegium-carolinum.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://eduid.collegium-carolinum.de/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>
    
<Organization>
    <OrganizationName xml:lang="en">Collegium Carolinum</OrganizationName>
    <OrganizationName xml:lang="cs">Collegium Carolinum</OrganizationName>
    <OrganizationDisplayName xml:lang="en">Collegium Carolinum</OrganizationDisplayName>
    <OrganizationDisplayName xml:lang="cs">Collegium Carolinum</OrganizationDisplayName>
    <OrganizationURL xml:lang="en">https://www.collegium-carolinum.de/en/</OrganizationURL>
    <OrganizationURL xml:lang="cs">https://www.collegium-carolinum.de/cs/</OrganizationURL>
</Organization>
    <ContactPerson contactType="technical">
      <GivenName>Petr</GivenName>
      <SurName>Vaníček</SurName>
      <EmailAddress>mailto:vanicekp@utia.cas.cz</EmailAddress>
    </ContactPerson>
</EntityDescriptor>
