<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.bnl.gov/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">bnl.gov</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.bnl.gov/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.bnl.gov/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.bnl.gov/idp/profile/Shibboleth/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.bnl.gov/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.bnl.gov/idp/profile/SAML2/POST-SimpleSign/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.bnl.gov/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">bnl.gov</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.bnl.gov/idp/profile/SAML1/SOAP/AttributeQuery"/>

        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.bnl.gov/idp/profile/SAML2/SOAP/AttributeQuery"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

    </AttributeAuthorityDescriptor>

       <Organization>
                <OrganizationName xml:lang="en">BNL</OrganizationName>
                <OrganizationDisplayName xml:lang="en">Brookhaven National Laboratory - BNL.GOV</OrganizationDisplayName>
                <OrganizationURL xml:lang="en">http://www.bnl.gov/</OrganizationURL>
        </Organization>
        <ContactPerson contactType="technical">
                <GivenName>David</GivenName>
                <SurName>Cortijo</SurName>
                <EmailAddress>dcortijo@bnl.gov</EmailAddress>
        </ContactPerson>


</EntityDescriptor>
