<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://sso.fau.edu/idp/shibboleth">

<!--Use this file as a Secret on sso deployment-->

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">fau.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://sso.fau.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sso.fau.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.fau.edu/idp/profile/SAML2/Redirect/SLO" />

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.fau.edu/idp/profile/SAML2/POST/SLO" />

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sso.fau.edu:8443/idp/profile/SAML2/SOAP/SLO" />

                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://sso.fau.edu/idp/profile/Shibboleth/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.fau.edu/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sso.fau.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.fau.edu/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">fau.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://sso.fau.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sso.fau.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    <!-- New Block for Entra -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDGDCCAgCgAwIBAgIVAPXvW42xKsbM/hd7Kz3NbFQcB2eYMA0GCSqGSIb3DQEB
BQUAMBYxFDASBgNVBAMTC3Nzby5mYXUuZWR1MB4XDTEyMDYwMjIwMDUxNFoXDTMy
MDYwMjIwMDUxNFowFjEUMBIGA1UEAxMLc3NvLmZhdS5lZHUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDKSEyeGUqxBlVwKg3HMQSX+CSEngA3t10bE4Ks
+dNLQuBT8dG/2BW0ByoLuY26OUjE/pD/8AfpP96NXninzQl0x6pVm5BPpQC4Ds2m
VrXjGqOpPddaL/DCxp/MOOuOhsfr4oeIh1wlypMnTey3Q1Ew0Qrn253IUn8VufDW
MIb0CHGfGOajen0muPHcumuDjqVJm/06ID1h0dygTeTizxY5LfvpmEZYxtuVP4ns
VTt9qZxRUK92AWGiRPW95ezzNIhNzGSgFk/y0ctdK87Q69Og+kE9Cf8PJVcDjRKB
kHwWhEVpR/9wXD9VnIOKdXHR2wNb0MNrxxKUWGuhZ0iJINl1AgMBAAGjXTBbMDoG
A1UdEQQzMDGCC3Nzby5mYXUuZWR1hiJodHRwczovL3Nzby5mYXUuZWR1L2lkcC9z
aGliYm9sZXRoMB0GA1UdDgQWBBQpo7vIce0XZ8XgsfkQMH6fElF7gzANBgkqhkiG
9w0BAQUFAAOCAQEArw1nkMaS7/56SOkCmSf9dha9iyCXTrLOYi8Mrlc12Q479+sI
eddtX47ShJhlUqXlIvZi/HLPMUHoyG5zIwTzD9a+o9nc4+dC9TTL64lcCiDkAPyB
jC8zkXMjZogLu2qiSBUdaaAYr1RswiNpUgJEdnl7FxeFUFD1TZ7yFsjOzgLC6W4W
NVUVQWYfRbQOFizPJBtA+QdWDB/tHnMgOm+jjgwVXupex20rdV6vVq/sKTzE1tCn
Sy7y61N6qVJjnmbH4IdFnrQib4jc16mOWBob8JUD/nSozArIjurFPIBCZWtfkqhb
8RgOqewQBP/7Gw84rIidKEycldMKMkP7EtKyeQ==

                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.fau.edu/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
</EntityDescriptor>
