<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.mh-trossingen.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">mh-trossingen.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Hochschule für Musik Trossingen</mdui:DisplayName>
                <mdui:DisplayName xml:lang="de">Hochschule für Musik Trossingen</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of Hochschule für Musik Trossingen</mdui:Description>
                <mdui:Description xml:lang="de">Identity Provider der Hochschule für Musik Trossingen</mdui:Description>
                <mdui:Logo height="16" width="16">https://idp.mh-trossingen.de/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://idp.mh-trossingen.de/logo.svg</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                    <ds:X509Data>
			<ds:X509Certificate>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=
			</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.mh-trossingen.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>-->         
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>


        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/SOAP/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/Redirect/SLO"/> 

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/POST/SSO"/>
        <!--<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.mh-trossingen.de/idp/profile/Shibboleth/SSO"/>
         <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>-->
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/Redirect/SSO"/>

        <!-- den fehlenden ECP-Endpoint hinzufügen -->
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/SOAP/ECP"/>
 
        <!-- die fehlenden NameID-Formate hinzufügen -->
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </IDPSSODescriptor>


   <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">mh-trossingen.de</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                    <ds:X509Data>
			    <ds:X509Certificate>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=
			</ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.mh-trossingen.de/idp/profile/SAML1/SOAP/AttributeQuery"/> 
       <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.mh-trossingen.de/idp/profile/SAML2/SOAP/AttributeQuery"/>


        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above--> 

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
