<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://aai.egi.eu/proxy/module.php/saml/sp/metadata.php/sso">
  <md:Extensions>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
        <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:profiles:subject-id:req" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>any</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>
  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="false" WantAssertionsSigned="false">
    <md:Extensions>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">EGI Check-in Service</mdui:DisplayName>
        <mdui:Description xml:lang="en">EGI Check-in Identity and Access Management Service</mdui:Description>
        <mdui:InformationURL xml:lang="en">https://www.egi.eu/services/check-in/</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="en">https://aai.egi.eu/privacy/en</mdui:PrivacyStatementURL>
        <mdui:Logo height="152" width="200">https://aai.egi.eu/assets/images/egi-logo-200x152.png</mdui:Logo>
        <mdui:Logo height="16" width="16">https://aai.egi.eu/assets/images/egi-logo-16x16.png</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:KeyName>6qpAmEdOEQhhYy2Em8arKbD5E-UiEEc7guAmK8D5YwQ</ds:KeyName>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:KeyName>GotdCJhVb0R3ItLR_Xck0jZIbkPk1e52hR9nM89VAn8</ds:KeyName>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.egi.eu/auth/realms/id/broker/endpoint"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.egi.eu/auth/realms/id/broker/endpoint" isDefault="true" index="1">
</md:AssertionConsumerService>
    <md:AttributeConsumingService isDefault="true" index="1">
      <md:ServiceName xml:lang="en">EGI Check-in Service</md:ServiceName>
      <md:ServiceDescription xml:lang="en">EGI Check-in Identity and Access Management Service</md:ServiceDescription>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.13" FriendlyName="eduPersonUniqueId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" FriendlyName="eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" FriendlyName="eduPersonTargetedID" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:2.5.4.4" FriendlyName="sn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:2.5.4.42" FriendlyName="givenName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:2.16.840.1.113730.3.1.241" FriendlyName="displayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:0.9.2342.19200300.100.1.3" FriendlyName="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" FriendlyName="schacHomeOrganization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" FriendlyName="eduPersonScopedAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="true" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" FriendlyName="eduPersonAssurance" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      <md:RequestedAttribute isRequired="false" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" FriendlyName="eduPersonEntitlement" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">EGI Foundation</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">EGI Foundation</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.egi.eu/</md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson contactType="administrative">
    <md:GivenName>EGI Check-in</md:GivenName>
    <md:EmailAddress>mailto:check-in@egi.eu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="support">
    <md:GivenName>EGI Check-in Support</md:GivenName>
    <md:EmailAddress>mailto:checkin-support@mailman.egi.eu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson contactType="technical">
    <md:GivenName>EGI Check-in</md:GivenName>
    <md:EmailAddress>mailto:check-in@egi.eu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
    <md:Company>EGI Foundation</md:Company>
    <md:GivenName>EGI Check-in Computer Security and Incident Response Team</md:GivenName>
    <md:EmailAddress>mailto:check-in-abuse@mailman.egi.eu</md:EmailAddress>
  </md:ContactPerson>
</md:EntityDescriptor>
