<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://aai.egi.eu/auth/realms/egi">
  <md:Extensions>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">https://aai.egi.eu/LoA#High</saml:AttributeValue>
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">https://aai.egi.eu/LoA#Low</saml:AttributeValue>
        <saml:AttributeValue xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">https://aai.egi.eu/LoA#Substantial</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">d4science.org</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">deep-hybrid-datacloud.eu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">eduteams.org</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">egi.eu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">eudat.eu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">umbrellaid.org</shibmd:Scope>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">EGI Check-in</mdui:DisplayName>
        <mdui:Description xml:lang="en">EGI Check-in Identity Provider Proxy</mdui:Description>
        <mdui:InformationURL xml:lang="en">https://www.egi.eu/services/check-in/</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://aai.egi.eu/privacy/en</mdui:PrivacyStatementURL>
        <mdui:Logo width="80" height="60">https://aai.egi.eu/proxy/module.php/themeegi/resources/images/EGI_Logo-80x60.png</mdui:Logo>
        <mdui:Logo width="50" height="50">https://aai.egi.eu/proxy/module.php/themeegi/resources/images/EGI_Logo-50x50.png</mdui:Logo>
      </mdui:UIInfo>
      <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DomainHint>egi.eu</mdui:DomainHint>
      </mdui:DiscoHints>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:KeyName>PUYOirA3Y-d_dGpdj4iJDHw4zHa8IY-bhZdaEj0rjbU</ds:KeyName>
        <ds:X509Data>
          <ds:X509Certificate>MIIDCzCCAfOgAwIBAgIUPczXrTwPFkoYpKMNuQ6+KbKHQscwDQYJKoZIhvcNAQELBQAwFTETMBEGA1UEAwwKYWFpLmVnaS5ldTAeFw0yMjA1MjQwMTAyMzBaFw0zMjA1MjMwMTAyMzBaMBUxEzARBgNVBAMMCmFhaS5lZ2kuZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCurCF25r7/NMblIPD90WRb47NgyHl7t7f6d56JnL9qMpVEIcaTLiNLHlaOhXF9a+q38mkZsJD9WT3HX1SJFCVIE2a58m1W2sEdxdKumlOMAGDbRNVj6ZErZYl93ArZhRzzG03DWsIw5BCTQILmPYB5SDABjTZYtpTQVgqbKkmB9JAR5bULLCXw6uSRiFycQRPsTCB6a4RuoNj6lyp3eQgf76TCCPKZRDwImAiAjf/MctWsmwLF0AMM//MUWxM6cTbTmcygExOTXQRx1MYBQGPciixOfseKtXJCCIUvay2yObErdN4GWLRjNWqU/SK5ID0UI8LierNEgPKePLvTPaFnAgMBAAGjUzBRMB0GA1UdDgQWBBSjl/e26XSINToR6Ck2SRA2h9EawzAfBgNVHSMEGDAWgBSjl/e26XSINToR6Ck2SRA2h9EawzAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCZA/Rd1S/9REfn8RuHZwaoi//5LGQrMtJbomGOoVTsQ9ZVmA0S6vdpx9K1n0VM8/+L5tAB9a/djPP8OvoMIA+R2pzCmbObekPxMqjRyQrW80FVd+Fp81r9/JlFlf26zLqZM8gVZpELsiXdllTAJwsgrCju4USIYPJvMP7qab4OPUPx+PQ+HbjZkOxQQQtjCK6CJ9Vs59Q8rAdutjFGhKDg/Pfr8Wg4E9hYgGbKSvBOL60wgpjRt4IC7Bd4yx6stSmpvYR11hqa5+UQZWpAYLtJnUj+E+eSjj+OWUuX6uurbdWnIhkNf4oHrxU5YGzAz+yD7u9+LDlGRqDeB37br549</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.egi.eu/auth/realms/egi/protocol/saml"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.egi.eu/auth/realms/egi/protocol/saml"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.egi.eu/auth/realms/egi/protocol/saml"/>
    <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.egi.eu/auth/realms/egi/protocol/saml"/>
  </md:IDPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">EGI Foundation</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">EGI Foundation</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.egi.eu/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="administrative">
    <md:GivenName>EGI Check-in</md:GivenName>
    <md:EmailAddress>mailto:check-in@egi.eu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="support">
    <md:GivenName>EGI Check-in Support</md:GivenName>
    <md:EmailAddress>mailto:checkin-support@mailman.egi.eu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:GivenName>EGI Check-in</md:GivenName>
    <md:EmailAddress>mailto:check-in@egi.eu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>
