samltest/data/saml2/metadata/InCommon-metadata.xml

   1 <EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" Name="urn:mace:incommon" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata sstc-saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
   2 <ds:SignedInfo>
   3 <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"/>
   4 <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
   5 <ds:Reference URI="">
   6 <ds:Transforms>
   7 <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
   8 <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"/>
   9 </ds:Transforms>
  10 <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
  11 <ds:DigestValue>91oiRc8Bwf+DJq/kO/4vQh723F8=</ds:DigestValue>
  12 </ds:Reference>
  13 </ds:SignedInfo>
  14 <ds:SignatureValue>
  15 txodSjGrZlegJY9lHLlxfhOpK0v8SGNmFFHPXM9j54gZdbK+N8+4rPEjVCOg33Bk8RZ+OcBQNQQH
  16 otCvlXEpput84qTDVbe8xIGXzTbRH+45oLV6PQCEvZ4Pd3W/D2BZmI77DLHOlsQFJW2B6Ct98sO6
  17 qvWi7hStX8qaPnZe3hpDOgdhNpfZh/WiY5VTPsYT/+KHFv1wM3AqIPUKJ/9q6ahD80NlpJzpliE9
  18 PbEnEiuUKWq255jNBnbl/xR4jN+MhX1pOzxD1x+tDqJLVL+rgoHQZJHoxHzYykRKW4FITRL0ASXZ
  19 lgKxBy5k/W0hPzm4ntrX3OvpW49S0ys3BlAEWQ==
  20 </ds:SignatureValue>
  21 <ds:KeyInfo>
  22 <ds:X509Data>
  23 <ds:X509Certificate>
  24 MIIF2zCCBMOgAwIBAgIBQjANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJVUzEcMBoGA1UEChMT
  25 SW5Db21tb24gRmVkZXJhdGlvbjEpMCcGA1UEAxMgSW5Db21tb24gQ2VydGlmaWNhdGlvbiBBdXRo
  26 b3JpdHkwHhcNMDYwNDEwMTY1NjM3WhcNMDcwNDEwMTY1NjM3WjBSMQswCQYDVQQGEwJVUzEcMBoG
  27 A1UEChMTSW5Db21tb24gRmVkZXJhdGlvbjElMCMGA1UEAxMcZmVkb3AuaW5jb21tb25mZWRlcmF0
  28 aW9uLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAoXZK5/nRuWY+S91CMPsXl
  29 oDc5vGo8O/xcqkUNUow+C34NlgnZX4zq2BjZ1WTAk3yLaF00qYOK18R0LMpHjYmEbtvtNrjEvtaZ
  30 walo83TyRNKHfqvBG3bxOkoYpo8jZ9MkHxskCgjXWLnPu+TCB7GiDgBLQ2VEk/UneKHlNc0Y1drB
  31 r1HfiRR73lAIUXNG/iRGXyBLqvyyFPasZv/oBWmsJZqI2T8jlmdSZbMG66yWGMp9dKoJyb44fYGV
  32 lyo5j8arxyiXAEz4QIdoFhmm1k1wSQnJDHtYaxwpf72wywps9P6GLqGkg8z+sxPWEgP8QqZWhwNJ
  33 qAtVbNh+TDkBpXsCAwEAAaOCArYwggKyMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
  34 A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU5ij9YLU5zQ6K75kPgVpyQ2N/
  35 lPswfgYDVR0jBHcwdYAUky3IYRitY+ObZbOd3Y2TuufKY0WhWqRYMFYxCzAJBgNVBAYTAlVTMRww
  36 GgYDVQQKExNJbkNvbW1vbiBGZWRlcmF0aW9uMSkwJwYDVQQDEyBJbkNvbW1vbiBDZXJ0aWZpY2F0
  37 aW9uIEF1dGhvcml0eYIBADCBugYIKwYBBQUHAQEEga0wgaowgacGCCsGAQUFBzAChoGaaHR0cDov
  38 L2luY29tbW9uY2ExLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvYnJpZGdlL2NlcnRzL2NhLWNlcnRz
  39 LnA3YgoJCUNBIElzc3VlcnMgLSBVUkk6aHR0cDovL2luY29tbW9uY2EyLmluY29tbW9uZmVkZXJh
  40 dGlvbi5vcmcvYnJpZGdlL2NlcnRzL2NhLWNlcnRzLnA3YjCBjQYDVR0fBIGFMIGCMD+gPaA7hjlo
  41 dHRwOi8vaW5jb21tb25jcmwxLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvY3JsL2VlY3Jscy5jcmww
  42 P6A9oDuGOWh0dHA6Ly9pbmNvbW1vbmNybDIuaW5jb21tb25mZWRlcmF0aW9uLm9yZy9jcmwvZWVj
  43 cmxzLmNybDBeBgNVHSAEVzBVMFMGCysGAQQBriMBBAEBMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly9p
  44 bmNvbW1vbmNhLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvcHJhY3RpY2VzLnBkZjAnBgNVHREEIDAe
  45 ghxmZWRvcC5pbmNvbW1vbmZlZGVyYXRpb24ub3JnMA0GCSqGSIb3DQEBBQUAA4IBAQDNwpH5FdVi
  46 qXKwN51xRQhSabH04DIFo9tnGWA/U2MOH1Gwh2Vt0JzlxZ5gZrsUM9gQBMLmifjxB29rY2xnhhjW
  47 FJhoTsI2F2KPav6W5Eqykq3yDV06oqNq0N0yMtB+og2yCIIZFvEG0wTKyv2n3bZqNaXz9r808b7p
  48 v/OVPW4HnmUtfFDg8q7C4Y2wbWqBYINkOi4lVbKzi2Sk5nVohuRGBja7eTYlpBP3nF+E/xb49JxQ
  49 AErc8wFZhJJdKNBnGWKOxelxC4nwda+g3mcc2T6REM0OUU7ArAlOdXW1eYNtflZe1G4qJ+6lTbpx
  50 8unyNnbIxDshbno8FbG0gIXOQ/4s
  51 </ds:X509Certificate>
  52 <ds:X509Certificate>
  53 MIIFmjCCBIKgAwIBAgIBADANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJVUzEcMBoGA1UEChMT
  54 SW5Db21tb24gRmVkZXJhdGlvbjEpMCcGA1UEAxMgSW5Db21tb24gQ2VydGlmaWNhdGlvbiBBdXRo
  55 b3JpdHkwHhcNMDQwMzMwMjAzNDAwWhcNMTQwMzI5MjAzNDAwWjBWMQswCQYDVQQGEwJVUzEcMBoG
  56 A1UEChMTSW5Db21tb24gRmVkZXJhdGlvbjEpMCcGA1UEAxMgSW5Db21tb24gQ2VydGlmaWNhdGlv
  57 biBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGjKsUM2QAupLAaWx
  58 82/CWPalKjKFY8UPmz0T3gf7tJPztTy1Zq8pD0WFRLcQeSBKZGCu8upe8X966b6TZ5yuoUDA754I
  59 f0DWismuHNoMgRR/l0UvZmPWDGRWd3NBTB8/soLA4EbqFf5Xq8MOJKhPtzcDR33gtaAb3oilZ+ZT
  60 pnhTFFrn/qXrAKcSDBpuW2JRpi3xaF/hTPI097oUShOzD1Zj21UYLA6iSFVN+1wlfwilf2KFNK/+
  61 zbkCge6wgipZyXxaOAam6ncqmkxy+hy/OiJMmdB+6xkO0xXSBUUcqxJrOcUQhA1vntgb3q5zOJIS
  62 XhC4RAReA0HyBp/wd0iDAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUw
  63 AwEB/zAdBgNVHQ4EFgQUky3IYRitY+ObZbOd3Y2TuufKY0UwfgYDVR0jBHcwdYAUky3IYRitY+Ob
  64 ZbOd3Y2TuufKY0WhWqRYMFYxCzAJBgNVBAYTAlVTMRwwGgYDVQQKExNJbkNvbW1vbiBGZWRlcmF0
  65 aW9uMSkwJwYDVQQDEyBJbkNvbW1vbiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eYIBADCBugYIKwYB
  66 BQUHAQEEga0wgaowgacGCCsGAQUFBzAChoGaaHR0cDovL2luY29tbW9uY2ExLmluY29tbW9uZmVk
  67 ZXJhdGlvbi5vcmcvYnJpZGdlL2NlcnRzL2NhLWNlcnRzLnA3YgoJCUNBIElzc3VlcnMgLSBVUkk6
  68 aHR0cDovL2luY29tbW9uY2EyLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvYnJpZGdlL2NlcnRzL2Nh
  69 LWNlcnRzLnA3YjCBjQYDVR0fBIGFMIGCMD+gPaA7hjlodHRwOi8vaW5jb21tb25jcmwxLmluY29t
  70 bW9uZmVkZXJhdGlvbi5vcmcvY3JsL2VlY3Jscy5jcmwwP6A9oDuGOWh0dHA6Ly9pbmNvbW1vbmNy
  71 bDIuaW5jb21tb25mZWRlcmF0aW9uLm9yZy9jcmwvZWVjcmxzLmNybDBeBgNVHSAEVzBVMFMGCysG
  72 AQQBriMBBAEBMEQwQgYIKwYBBQUHAgEWNmh0dHA6Ly9pbmNvbW1vbmNhLmluY29tbW9uZmVkZXJh
  73 dGlvbi5vcmcvcHJhY3RpY2VzLnBkZjANBgkqhkiG9w0BAQUFAAOCAQEAZfgKUPA+Ky+Ou/vclMlF
  74 TMlUGspfbNSdG/fmIq+E/Lv1d2c73Am1zGhOpxgdkM8SE+BPnXW2rl71/N8gaqwgBBxkpwn410si
  75 umxlDTwV3HoVFvCGWylNy9o8OE1LyTCqfo8PRwrMzhwcagDgD813BIyjuJg/JQz1LnHMocIW/Jli
  76 gloSIzF1O435/+ckfWXQsmBIhvV5TmA3ZrcycrI1cHGEZqrCXL0FMZLSr+Vady/tFbVojqI8pSub
  77 SMxNkZectePTBjVj1Qeb4hmG8jRv/fwy1Iw6OFH8RKny8nQaO5mOe/fF/swEsMVU9TDpvLIgbhTw
  78 nP7Nhfotgaxf5wG8WA==
  79 </ds:X509Certificate>
  80 </ds:X509Data>
  81 </ds:KeyInfo></ds:Signature>
  82   <Extensions>
  83     <shibmd:KeyAuthority xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" VerifyDepth="5">
  84       <!-- InCommon CA -->
  85       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  86         <ds:X509Data>
  87           <ds:X509Certificate>
  88 MIIFmjCCBIKgAwIBAgIBADANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJVUzEc
  89 MBoGA1UEChMTSW5Db21tb24gRmVkZXJhdGlvbjEpMCcGA1UEAxMgSW5Db21tb24g
  90 Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDQwMzMwMjAzNDAwWhcNMTQwMzI5
  91 MjAzNDAwWjBWMQswCQYDVQQGEwJVUzEcMBoGA1UEChMTSW5Db21tb24gRmVkZXJh
  92 dGlvbjEpMCcGA1UEAxMgSW5Db21tb24gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw
  93 ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGjKsUM2QAupLAaWx82/C
  94 WPalKjKFY8UPmz0T3gf7tJPztTy1Zq8pD0WFRLcQeSBKZGCu8upe8X966b6TZ5yu
  95 oUDA754If0DWismuHNoMgRR/l0UvZmPWDGRWd3NBTB8/soLA4EbqFf5Xq8MOJKhP
  96 tzcDR33gtaAb3oilZ+ZTpnhTFFrn/qXrAKcSDBpuW2JRpi3xaF/hTPI097oUShOz
  97 D1Zj21UYLA6iSFVN+1wlfwilf2KFNK/+zbkCge6wgipZyXxaOAam6ncqmkxy+hy/
  98 OiJMmdB+6xkO0xXSBUUcqxJrOcUQhA1vntgb3q5zOJISXhC4RAReA0HyBp/wd0iD
  99 AgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAd
 100 BgNVHQ4EFgQUky3IYRitY+ObZbOd3Y2TuufKY0UwfgYDVR0jBHcwdYAUky3IYRit
 101 Y+ObZbOd3Y2TuufKY0WhWqRYMFYxCzAJBgNVBAYTAlVTMRwwGgYDVQQKExNJbkNv
 102 bW1vbiBGZWRlcmF0aW9uMSkwJwYDVQQDEyBJbkNvbW1vbiBDZXJ0aWZpY2F0aW9u
 103 IEF1dGhvcml0eYIBADCBugYIKwYBBQUHAQEEga0wgaowgacGCCsGAQUFBzAChoGa
 104 aHR0cDovL2luY29tbW9uY2ExLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvYnJpZGdl
 105 L2NlcnRzL2NhLWNlcnRzLnA3YgoJCUNBIElzc3VlcnMgLSBVUkk6aHR0cDovL2lu
 106 Y29tbW9uY2EyLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvYnJpZGdlL2NlcnRzL2Nh
 107 LWNlcnRzLnA3YjCBjQYDVR0fBIGFMIGCMD+gPaA7hjlodHRwOi8vaW5jb21tb25j
 108 cmwxLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvY3JsL2VlY3Jscy5jcmwwP6A9oDuG
 109 OWh0dHA6Ly9pbmNvbW1vbmNybDIuaW5jb21tb25mZWRlcmF0aW9uLm9yZy9jcmwv
 110 ZWVjcmxzLmNybDBeBgNVHSAEVzBVMFMGCysGAQQBriMBBAEBMEQwQgYIKwYBBQUH
 111 AgEWNmh0dHA6Ly9pbmNvbW1vbmNhLmluY29tbW9uZmVkZXJhdGlvbi5vcmcvcHJh
 112 Y3RpY2VzLnBkZjANBgkqhkiG9w0BAQUFAAOCAQEAZfgKUPA+Ky+Ou/vclMlFTMlU
 113 GspfbNSdG/fmIq+E/Lv1d2c73Am1zGhOpxgdkM8SE+BPnXW2rl71/N8gaqwgBBxk
 114 pwn410siumxlDTwV3HoVFvCGWylNy9o8OE1LyTCqfo8PRwrMzhwcagDgD813BIyj
 115 uJg/JQz1LnHMocIW/JligloSIzF1O435/+ckfWXQsmBIhvV5TmA3ZrcycrI1cHGE
 116 ZqrCXL0FMZLSr+Vady/tFbVojqI8pSubSMxNkZectePTBjVj1Qeb4hmG8jRv/fwy
 117 1Iw6OFH8RKny8nQaO5mOe/fF/swEsMVU9TDpvLIgbhTwnP7Nhfotgaxf5wG8WA==
 118           </ds:X509Certificate>
 119         </ds:X509Data>
 120       </ds:KeyInfo>
 121     </shibmd:KeyAuthority>
 122   </Extensions>
 123
 124 <EntityDescriptor entityID="urn:mace:incommon:internet2.edu">
 125    <IDPSSODescriptor errorURL="https://origin.internet2.edu/error.html" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 126       <Extensions>
 127          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">internet2.edu</shibmd:Scope>
 128       </Extensions>
 129       <KeyDescriptor use="signing">
 130          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 131             <ds:KeyName>origin.internet2.edu</ds:KeyName>
 132          </ds:KeyInfo>
 133       </KeyDescriptor>
 134       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 135       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://origin.internet2.edu/shibboleth/HS"/>
 136    </IDPSSODescriptor>
 137    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 138       <Extensions>
 139          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">internet2.edu</shibmd:Scope>
 140       </Extensions>
 141       <KeyDescriptor use="signing">
 142          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 143             <ds:KeyName>origin.internet2.edu</ds:KeyName>
 144          </ds:KeyInfo>
 145       </KeyDescriptor>
 146       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://origin.internet2.edu:8443/shibboleth/AA"/>
 147       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 148    </AttributeAuthorityDescriptor>
 149    <Organization>
 150       <OrganizationName xml:lang="en">Internet2</OrganizationName>
 151       <OrganizationDisplayName xml:lang="en">Internet2</OrganizationDisplayName>
 152       <OrganizationURL xml:lang="en"/>
 153    </Organization>
 154    <ContactPerson contactType="technical">
 155       <GivenName>IJ Kim</GivenName>
 156       <EmailAddress>ij@internet2.edu</EmailAddress>
 157    </ContactPerson>
 158 </EntityDescriptor>
 159
 160   <EntityDescriptor entityID="urn:mace:incommon:dartmouth.edu">
 161     <IDPSSODescriptor errorURL="http://giza.dartmouth.edu/shibboleth/error.html" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 162       <Extensions>
 163         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">dartmouth.edu</shibmd:Scope>
 164       </Extensions>
 165       <KeyDescriptor use="signing">
 166         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 167           <ds:KeyName>giza.dartmouth.edu</ds:KeyName>
 168         </ds:KeyInfo>
 169       </KeyDescriptor>
 170       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 171       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://giza.dartmouth.edu/shibboleth/HS"/>
 172     </IDPSSODescriptor>
 173     <AttributeAuthorityDescriptor errorURL="http://giza.dartmouth.edu/shibboleth/error.html" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 174       <Extensions>
 175         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">dartmouth.edu</shibmd:Scope>
 176       </Extensions>
 177       <KeyDescriptor use="signing">
 178         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 179           <ds:KeyName>giza.dartmouth.edu</ds:KeyName>
 180         </ds:KeyInfo>
 181       </KeyDescriptor>
 182       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://giza.dartmouth.edu:8443/shibboleth/AA"/>
 183       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 184     </AttributeAuthorityDescriptor>
 185     <Organization>
 186       <OrganizationName xml:lang="en">Dartmouth College</OrganizationName>
 187       <OrganizationDisplayName xml:lang="en">Dartmouth College</OrganizationDisplayName>
 188       <OrganizationURL xml:lang="en">http://www.dartmouth.edu/</OrganizationURL>
 189     </Organization>
 190     <ContactPerson contactType="administrative">
 191       <GivenName>Robert Brentrup</GivenName>
 192       <EmailAddress>Robert.J.Brentrup@dartmouth.edu</EmailAddress>
 193     </ContactPerson>
 194     <ContactPerson contactType="technical">
 195       <GivenName>Robert Brentrup</GivenName>
 196       <EmailAddress>Robert.J.Brentrup@dartmouth.edu</EmailAddress>
 197     </ContactPerson>
 198   </EntityDescriptor>
 199   <EntityDescriptor entityID="urn:mace:incommon:rochester.edu">
 200     <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 201       <Extensions>
 202         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">rochester.edu</shibmd:Scope>
 203       </Extensions>
 204       <KeyDescriptor use="signing">
 205         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 206           <ds:KeyName>shib.its.rochester.edu</ds:KeyName>
 207         </ds:KeyInfo>
 208       </KeyDescriptor>
 209       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 210       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib.its.rochester.edu/shibboleth/HS"/>
 211     </IDPSSODescriptor>
 212     <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 213       <Extensions>
 214         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">rochester.edu</shibmd:Scope>
 215       </Extensions>
 216       <KeyDescriptor use="signing">
 217         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 218           <ds:KeyName>shib.its.rochester.edu</ds:KeyName>
 219         </ds:KeyInfo>
 220       </KeyDescriptor>
 221       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.its.rochester.edu/shibboleth/AA"/>
 222       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 223     </AttributeAuthorityDescriptor>
 224     <Organization>
 225       <OrganizationName xml:lang="en">University of Rochester</OrganizationName>
 226       <OrganizationDisplayName xml:lang="en">University of Rochester</OrganizationDisplayName>
 227       <OrganizationURL xml:lang="en">http://www.rochester.edu/</OrganizationURL>
 228     </Organization>
 229     <ContactPerson contactType="administrative">
 230       <GivenName>Sean Singh</GivenName>
 231       <EmailAddress>sean.singh@rochester.edu</EmailAddress>
 232     </ContactPerson>
 233     <ContactPerson contactType="technical">
 234       <GivenName>Sean Singh</GivenName>
 235       <EmailAddress>sean.singh@rochester.edu</EmailAddress>
 236     </ContactPerson>
 237     <ContactPerson contactType="technical">
 238       <GivenName>Charles Yanaitis</GivenName>
 239       <EmailAddress>charles.yanaitis@rochester.edu</EmailAddress>
 240     </ContactPerson>
 241   </EntityDescriptor>
 242 <EntityDescriptor entityID="urn:mace:incommon:osu.edu">
 243    <IDPSSODescriptor errorURL="https://webauth.service.ohio-state.edu/support.html" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 244       <Extensions>
 245          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">osu.edu</shibmd:Scope>
 246       </Extensions>
 247       <KeyDescriptor use="signing">
 248          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 249             <ds:KeyName>webauth.service.ohio-state.edu</ds:KeyName>
 250          </ds:KeyInfo>
 251       </KeyDescriptor>
 252       <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://webauth.service.ohio-state.edu:8443/shibboleth/Artifact" index="1"/>
 253       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 254       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://webauth.service.ohio-state.edu/shibboleth/SSO"/>
 255    </IDPSSODescriptor>
 256    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 257       <Extensions>
 258          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">osu.edu</shibmd:Scope>
 259       </Extensions>
 260       <KeyDescriptor use="signing">
 261          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 262             <ds:KeyName>webauth.service.ohio-state.edu</ds:KeyName>
 263          </ds:KeyInfo>
 264       </KeyDescriptor>
 265       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://webauth.service.ohio-state.edu:8443/shibboleth/AA"/>
 266       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 267    </AttributeAuthorityDescriptor>
 268    <Organization>
 269       <OrganizationName xml:lang="en">The Ohio State University</OrganizationName>
 270       <OrganizationDisplayName xml:lang="en">The Ohio State University</OrganizationDisplayName>
 271       <OrganizationURL xml:lang="en">http://www.osu.edu/</OrganizationURL>
 272    </Organization>
 273    <ContactPerson contactType="technical">
 274       <GivenName>Scott Cantor</GivenName>
 275       <EmailAddress>cantor.2@osu.edu</EmailAddress>
 276    </ContactPerson>
 277    <ContactPerson contactType="administrative">
 278       <GivenName>Scott Cantor</GivenName>
 279       <EmailAddress>cantor.2@osu.edu</EmailAddress>
 280    </ContactPerson>
 281 </EntityDescriptor>
 282 <EntityDescriptor entityID="urn:mace:incommon:uci.edu">
 283    <IDPSSODescriptor errorURL="http://shib.nacs.uci.edu/error.html" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 284       <Extensions>
 285          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">uci.edu</shibmd:Scope>
 286       </Extensions>
 287       <KeyDescriptor use="signing">
 288          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 289             <ds:KeyName>shib.nacs.uci.edu</ds:KeyName>
 290          </ds:KeyInfo>
 291       </KeyDescriptor>
 292       <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.nacs.uci.edu/shibboleth-idp/Artifact" index="1"/>
 293       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 294       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib.nacs.uci.edu/shibboleth-idp/SSO"/>
 295    </IDPSSODescriptor>
 296    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 297       <Extensions>
 298          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">uci.edu</shibmd:Scope>
 299       </Extensions>
 300       <KeyDescriptor use="signing">
 301          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 302             <ds:KeyName>shib.nacs.uci.edu</ds:KeyName>
 303          </ds:KeyInfo>
 304       </KeyDescriptor>
 305       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.nacs.uci.edu:8443/shibboleth-idp/AA"/>
 306       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 307    </AttributeAuthorityDescriptor>
 308    <Organization>
 309       <OrganizationName xml:lang="en">University of California-Irvine</OrganizationName>
 310       <OrganizationDisplayName xml:lang="en">University of California-Irvine</OrganizationDisplayName>
 311       <OrganizationURL xml:lang="en">http://www.uci.edu/</OrganizationURL>
 312    </Organization>
 313    <ContactPerson contactType="administrative">
 314       <GivenName>Brian Roode</GivenName>
 315       <EmailAddress>bgroode@uci.edu</EmailAddress>
 316    </ContactPerson>
 317    <ContactPerson contactType="technical">
 318       <GivenName>Paul Main</GivenName>
 319       <EmailAddress>pmain@uci.edu</EmailAddress>
 320    </ContactPerson>
 321 </EntityDescriptor>
 322
 323   <EntityDescriptor entityID="urn:mace:incommon:buffalo.edu">
 324     <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 325       <Extensions>
 326         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">buffalo.edu</shibmd:Scope>
 327       </Extensions>
 328       <KeyDescriptor use="signing">
 329         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 330           <ds:KeyName>shibboleth.buffalo.edu</ds:KeyName>
 331         </ds:KeyInfo>
 332       </KeyDescriptor>
 333       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 334       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.buffalo.edu/shibboleth-ext/HS"/>
 335     </IDPSSODescriptor>
 336     <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 337       <Extensions>
 338         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">buffalo.edu</shibmd:Scope>
 339       </Extensions>
 340       <KeyDescriptor use="signing">
 341         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 342           <ds:KeyName>shibboleth.buffalo.edu</ds:KeyName>
 343         </ds:KeyInfo>
 344       </KeyDescriptor>
 345       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.buffalo.edu:7443/shibboleth-ext/AA"/>
 346       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 347     </AttributeAuthorityDescriptor>
 348     <Organization>
 349       <OrganizationName xml:lang="en">The State University of New York at Buffalo</OrganizationName>
 350       <OrganizationDisplayName xml:lang="en">The State University of New York at Buffalo</OrganizationDisplayName>
 351       <OrganizationURL xml:lang="en">http://www.buffalo.edu/</OrganizationURL>
 352     </Organization>
 353     <ContactPerson contactType="administrative">
 354       <GivenName>Charles Dunn</GivenName>
 355       <EmailAddress>chuck@buffalo.edu</EmailAddress>
 356     </ContactPerson>
 357     <ContactPerson contactType="technical">
 358       <GivenName>John A Ball</GivenName>
 359       <EmailAddress>auth-support@gory.acsu.buffalo.edu</EmailAddress>
 360     </ContactPerson>
 361     <ContactPerson contactType="technical">
 362       <GivenName>Joel W. Murphy</GivenName>
 363       <EmailAddress>jmurphy@buffalo.edu</EmailAddress>
 364     </ContactPerson>
 365   </EntityDescriptor>
 366   <EntityDescriptor entityID="urn:mace:incommon:washington.edu">
 367     <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 368       <Extensions>
 369         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">washington.edu</shibmd:Scope>
 370       </Extensions>
 371       <KeyDescriptor use="signing">
 372         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 373           <ds:KeyName>hs.so.cac.washington.edu</ds:KeyName>
 374         </ds:KeyInfo>
 375       </KeyDescriptor>
 376       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 377       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://hs.so.cac.washington.edu/shibboleth/HS"/>
 378     </IDPSSODescriptor>
 379     <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 380       <Extensions>
 381         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">washington.edu</shibmd:Scope>
 382       </Extensions>
 383       <KeyDescriptor use="signing">
 384         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 385           <ds:KeyName>hs.so.cac.washington.edu</ds:KeyName>
 386         </ds:KeyInfo>
 387       </KeyDescriptor>
 388       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aa.so.cac.washington.edu/shibboleth/AA"/>
 389       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 390     </AttributeAuthorityDescriptor>
 391     <Organization>
 392       <OrganizationName xml:lang="en">University of Washington</OrganizationName>
 393       <OrganizationDisplayName xml:lang="en">University of Washington</OrganizationDisplayName>
 394       <OrganizationURL xml:lang="en">http://www.washington.edu/</OrganizationURL>
 395     </Organization>
 396     <ContactPerson contactType="administrative">
 397       <GivenName>Nathan Dors</GivenName>
 398       <EmailAddress>dors@cac.washington.edu</EmailAddress>
 399     </ContactPerson>
 400     <ContactPerson contactType="technical">
 401       <GivenName>Nathan Dors</GivenName>
 402       <EmailAddress>pubcookie@cac.washington.edu</EmailAddress>
 403     </ContactPerson>
 404   </EntityDescriptor>
 405   <EntityDescriptor entityID="urn:mace:incommon:cornell.edu">
 406     <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 407       <Extensions>
 408         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cornell.edu</shibmd:Scope>
 409       </Extensions>
 410       <KeyDescriptor use="signing">
 411         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 412           <ds:KeyName>shiborigin.cit.cornell.edu</ds:KeyName>
 413         </ds:KeyInfo>
 414       </KeyDescriptor>
 415       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 416       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shiborigin.cit.cornell.edu/shibboleth/HS"/>
 417     </IDPSSODescriptor>
 418     <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 419       <Extensions>
 420         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cornell.edu</shibmd:Scope>
 421       </Extensions>
 422       <KeyDescriptor use="signing">
 423         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 424           <ds:KeyName>shiborigin.cit.cornell.edu</ds:KeyName>
 425         </ds:KeyInfo>
 426       </KeyDescriptor>
 427       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shiborigin.cit.cornell.edu:8443/shibboleth/AA"/>
 428       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 429     </AttributeAuthorityDescriptor>
 430     <Organization>
 431       <OrganizationName xml:lang="en">Cornell University</OrganizationName>
 432       <OrganizationDisplayName xml:lang="en">Cornell University</OrganizationDisplayName>
 433       <OrganizationURL xml:lang="en">http://www.cornell.edu/</OrganizationURL>
 434     </Organization>
 435     <ContactPerson contactType="administrative">
 436       <GivenName>Andrea Beesing</GivenName>
 437       <EmailAddress>amb3@cornell.edu</EmailAddress>
 438     </ContactPerson>
 439     <ContactPerson contactType="technical">
 440       <GivenName>Steve Edgar</GivenName>
 441       <EmailAddress>se10@cornell.edu</EmailAddress>
 442     </ContactPerson>
 443     <ContactPerson contactType="technical">
 444       <GivenName>Ron DiNapoli</GivenName>
 445       <EmailAddress>rd29@cornell.edu</EmailAddress>
 446     </ContactPerson>
 447   </EntityDescriptor>
 448 <EntityDescriptor entityID="urn:mace:incommon:psu.edu">
 449    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 450       <Extensions>
 451          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">psu.edu</shibmd:Scope>
 452       </Extensions>
 453       <KeyDescriptor use="signing">
 454          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 455             <ds:KeyName>as1.fim.psu.edu</ds:KeyName>
 456          </ds:KeyInfo>
 457       </KeyDescriptor>
 458       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 459       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://as1.fim.psu.edu/shibboleth-idp/SSO"/>
 460    </IDPSSODescriptor>
 461    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 462       <Extensions>
 463          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">psu.edu</shibmd:Scope>
 464       </Extensions>
 465       <KeyDescriptor use="signing">
 466          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 467             <ds:KeyName>as1.fim.psu.edu</ds:KeyName>
 468          </ds:KeyInfo>
 469       </KeyDescriptor>
 470       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://as1.fim.psu.edu:8443/shibboleth-idp/AA"/>
 471       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 472    </AttributeAuthorityDescriptor>
 473    <Organization>
 474       <OrganizationName xml:lang="en">The Pennsylvania State University</OrganizationName>
 475       <OrganizationDisplayName xml:lang="en">The Pennsylvania State University</OrganizationDisplayName>
 476       <OrganizationURL xml:lang="en">http://www.psu.edu/</OrganizationURL>
 477    </Organization>
 478    <ContactPerson contactType="technical">
 479       <GivenName>Technical Staff</GivenName>
 480       <EmailAddress>root@aset.psu.edu</EmailAddress>
 481    </ContactPerson>
 482    <ContactPerson contactType="administrative">
 483       <GivenName>Kevin Morooney</GivenName>
 484       <EmailAddress>kxm@psu.edu</EmailAddress>
 485    </ContactPerson>
 486    <ContactPerson contactType="technical">
 487       <GivenName>Mark Miller</GivenName>
 488       <EmailAddress>max@psu.edu</EmailAddress>
 489    </ContactPerson>
 490 </EntityDescriptor>
 491   <EntityDescriptor entityID="urn:mace:incommon:usc.edu">
 492     <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 493       <Extensions>
 494         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">usc.edu</shibmd:Scope>
 495       </Extensions>
 496       <KeyDescriptor use="signing">
 497         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 498           <ds:KeyName>shib1.usc.edu</ds:KeyName>
 499         </ds:KeyInfo>
 500       </KeyDescriptor>
 501       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 502       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib1.usc.edu/shibboleth/HS"/>
 503     </IDPSSODescriptor>
 504     <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 505       <Extensions>
 506         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">usc.edu</shibmd:Scope>
 507       </Extensions>
 508       <KeyDescriptor use="signing">
 509         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 510           <ds:KeyName>shib1.usc.edu</ds:KeyName>
 511         </ds:KeyInfo>
 512       </KeyDescriptor>
 513       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib1.usc.edu/shibboleth/AA"/>
 514       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 515     </AttributeAuthorityDescriptor>
 516     <Organization>
 517       <OrganizationName xml:lang="en">University of Southern California</OrganizationName>
 518       <OrganizationDisplayName xml:lang="en">University of Southern California</OrganizationDisplayName>
 519       <OrganizationURL xml:lang="en">http://www.usc.edu/</OrganizationURL>
 520     </Organization>
 521     <ContactPerson contactType="administrative">
 522       <GivenName>Cecelia E. Henderson</GivenName>
 523       <EmailAddress>shelley@usc.edu</EmailAddress>
 524     </ContactPerson>
 525     <ContactPerson contactType="technical">
 526       <GivenName>Phil Dibowitz</GivenName>
 527       <EmailAddress>phil@usc.edu</EmailAddress>
 528     </ContactPerson>
 529   </EntityDescriptor>
 530   <EntityDescriptor entityID="urn:mace:incommon:ucsd.edu">
 531     <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 532       <Extensions>
 533         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ucsd.edu</shibmd:Scope>
 534       </Extensions>
 535       <KeyDescriptor use="signing">
 536         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 537           <ds:KeyName>a4.ucsd.edu</ds:KeyName>
 538         </ds:KeyInfo>
 539       </KeyDescriptor>
 540       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 541       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://a4.ucsd.edu/tritON/HS"/>
 542     </IDPSSODescriptor>
 543     <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 544       <Extensions>
 545         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ucsd.edu</shibmd:Scope>
 546       </Extensions>
 547       <KeyDescriptor use="signing">
 548         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 549           <ds:KeyName>a4.ucsd.edu</ds:KeyName>
 550         </ds:KeyInfo>
 551       </KeyDescriptor>
 552       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://a4.ucsd.edu:8443/tritON/AA"/>
 553       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 554     </AttributeAuthorityDescriptor>
 555     <Organization>
 556       <OrganizationName xml:lang="en">University of California-San Diego</OrganizationName>
 557       <OrganizationDisplayName xml:lang="en">University of California-San Diego</OrganizationDisplayName>
 558       <OrganizationURL xml:lang="en">http://www.ucsd.edu/</OrganizationURL>
 559     </Organization>
 560     <ContactPerson contactType="technical">
 561       <GivenName>Crystal Harris</GivenName>
 562       <EmailAddress>crys@ucsd.edu</EmailAddress>
 563     </ContactPerson>
 564     <ContactPerson contactType="administrative">
 565       <GivenName>Anthony R. Wood</GivenName>
 566       <EmailAddress>twood@ucsd.edu</EmailAddress>
 567     </ContactPerson>
 568     <ContactPerson contactType="technical">
 569       <GivenName>Anthony R. Wood</GivenName>
 570       <EmailAddress>twood@ucsd.edu</EmailAddress>
 571     </ContactPerson>
 572   </EntityDescriptor>
 573   <EntityDescriptor entityID="urn:mace:incommon:ohio.edu">
 574     <IDPSSODescriptor errorURL="https://shibboleth.ohio.edu" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 575       <Extensions>
 576         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ohio.edu</shibmd:Scope>
 577       </Extensions>
 578       <KeyDescriptor use="signing">
 579         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 580           <ds:KeyName>shibboleth.ohio.edu</ds:KeyName>
 581         </ds:KeyInfo>
 582       </KeyDescriptor>
 583       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 584       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibboleth.ohio.edu/shibboleth/HS"/>
 585     </IDPSSODescriptor>
 586     <AttributeAuthorityDescriptor errorURL="https://shibboleth.ohio.edu" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 587       <Extensions>
 588         <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ohio.edu</shibmd:Scope>
 589       </Extensions>
 590       <KeyDescriptor use="signing">
 591         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 592           <ds:KeyName>shibboleth.ohio.edu</ds:KeyName>
 593         </ds:KeyInfo>
 594       </KeyDescriptor>
 595       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibboleth.ohio.edu:8443/shibboleth/AA"/>
 596       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 597     </AttributeAuthorityDescriptor>
 598     <Organization>
 599       <OrganizationName xml:lang="en">Ohio University Main Campus</OrganizationName>
 600       <OrganizationDisplayName xml:lang="en">Ohio University Main Campus</OrganizationDisplayName>
 601       <OrganizationURL xml:lang="en">http://www.ohiou.edu/</OrganizationURL>
 602     </Organization>
 603     <ContactPerson contactType="administrative">
 604       <GivenName>Todd Acheson</GivenName>
 605       <EmailAddress>acheson@ohio.edu</EmailAddress>
 606     </ContactPerson>
 607     <ContactPerson contactType="technical">
 608       <GivenName>Vitaliy Shipitsyn</GivenName>
 609       <EmailAddress>vshipits@ohio.edu</EmailAddress>
 610     </ContactPerson>
 611     <ContactPerson contactType="technical">
 612       <GivenName>David Alexander</GivenName>
 613       <EmailAddress>alexandd@ohio.edu</EmailAddress>
 614     </ContactPerson>
 615   </EntityDescriptor>
 616
 617 <EntityDescriptor entityID="https://getz.internet2.edu/shibboleth">
 618    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 619       <KeyDescriptor>
 620          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 621             <ds:KeyName>getz.internet2.edu</ds:KeyName>
 622          </ds:KeyInfo>
 623       </KeyDescriptor>
 624       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 625       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://getz.internet2.edu/Shibboleth.sso/SAML/POST" index="0"/>
 626       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://getz.internet2.edu/Shibboleth.shire" index="0"/>
 627    </SPSSODescriptor>
 628    <Organization>
 629       <OrganizationName xml:lang="en">Internet2</OrganizationName>
 630       <OrganizationDisplayName xml:lang="en">Internet2</OrganizationDisplayName>
 631       <OrganizationURL xml:lang="en"/>
 632    </Organization>
 633    <ContactPerson contactType="technical">
 634       <GivenName>IJ Kim</GivenName>
 635       <EmailAddress>ij@internet2.edu</EmailAddress>
 636    </ContactPerson>
 637 </EntityDescriptor>
 638   <EntityDescriptor entityID="https://www.internet2.edu/shibboleth">
 639     <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 640       <KeyDescriptor>
 641         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 642           <ds:KeyName>www.internet2.edu</ds:KeyName>
 643         </ds:KeyInfo>
 644       </KeyDescriptor>
 645       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 646       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://www.internet2.edu/Shibboleth.shire" index="0"/>
 647       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.internet2.edu/Shibboleth.shire" index="1"/>
 648     </SPSSODescriptor>
 649     <Organization>
 650       <OrganizationName xml:lang="en">Internet2 Web Site</OrganizationName>
 651       <OrganizationDisplayName xml:lang="en">Internet2 Web Site</OrganizationDisplayName>
 652       <OrganizationURL xml:lang="en">http://www.internet2.edu/</OrganizationURL>
 653     </Organization>
 654     <ContactPerson contactType="technical">
 655       <GivenName>IJ Kim</GivenName>
 656       <EmailAddress>ij@internet2.edu</EmailAddress>
 657     </ContactPerson>
 658   </EntityDescriptor>
 659   <EntityDescriptor entityID="https://sdauth.sciencedirect.com/">
 660     <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 661       <KeyDescriptor>
 662         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 663           <ds:KeyName>sdauth.sciencedirect.com</ds:KeyName>
 664         </ds:KeyInfo>
 665       </KeyDescriptor>
 666       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 667       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sdauth.sciencedirect.com/SHIRE" index="0"/>
 668       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sdauth-cert3.sciencedirect.com/SHIRE" index="1"/>
 669     </SPSSODescriptor>
 670     <Organization>
 671       <OrganizationName xml:lang="en">ScienceDirect</OrganizationName>
 672       <OrganizationDisplayName xml:lang="en">ScienceDirect</OrganizationDisplayName>
 673       <OrganizationURL xml:lang="en">http://www.sciencedirect.com/</OrganizationURL>
 674     </Organization>
 675     <ContactPerson contactType="technical">
 676       <GivenName>Chris Shillum</GivenName>
 677       <EmailAddress>c.shillum@elsevier.com</EmailAddress>
 678     </ContactPerson>
 679     <ContactPerson contactType="administrative">
 680       <GivenName>Chris Shillum</GivenName>
 681       <EmailAddress>c.shillum@elsevier.com</EmailAddress>
 682     </ContactPerson>
 683     <ContactPerson contactType="technical">
 684       <GivenName>Tony Gast</GivenName>
 685       <EmailAddress>tony.gast@lexisnexis.com</EmailAddress>
 686     </ContactPerson>
 687   </EntityDescriptor>
 688
 689
 690 <EntityDescriptor entityID="https://wiki.it.ohio-state.edu/shibboleth">
 691    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 692       <KeyDescriptor>
 693          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 694             <ds:KeyName>wiki.it.ohio-state.edu</ds:KeyName>
 695          </ds:KeyInfo>
 696       </KeyDescriptor>
 697       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 698       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://authdev.it.ohio-state.edu/twiki/Shibboleth.sso/SAML/Artifact" index="1" isDefault="true"/>
 699       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://wiki.it.ohio-state.edu/twiki/Shibboleth.sso/SAML/POST" index="2"/>
 700       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://wiki.it.ohio-state.edu/twiki/Shibboleth.sso/SAML/Artifact" index="3"/>
 701       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://authdev.it.ohio-state.edu/twiki/Shibboleth.sso/SAML/POST" index="4"/>
 702    </SPSSODescriptor>
 703    <Organization>
 704       <OrganizationName xml:lang="en">The Ohio State University</OrganizationName>
 705       <OrganizationDisplayName xml:lang="en">The Ohio State University</OrganizationDisplayName>
 706       <OrganizationURL xml:lang="en">http://www.osu.edu/</OrganizationURL>
 707    </Organization>
 708    <ContactPerson contactType="administrative">
 709       <GivenName>Webauth Technical Support Staff</GivenName>
 710       <EmailAddress>webauth-admin@lists.acs.ohio-state.edu</EmailAddress>
 711    </ContactPerson>
 712    <ContactPerson contactType="technical">
 713       <GivenName>Webauth Technical Support Staff</GivenName>
 714       <EmailAddress>webauth-admin@lists.acs.ohio-state.edu</EmailAddress>
 715    </ContactPerson>
 716 </EntityDescriptor>
 717
 718   <EntityDescriptor entityID="http://www.sciencedirect.com/">
 719     <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 720       <KeyDescriptor>
 721         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 722           <ds:KeyName>sdauth.sciencedirect.com</ds:KeyName>
 723         </ds:KeyInfo>
 724       </KeyDescriptor>
 725       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 726       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sdauth.sciencedirect.com/SHIRE" index="0"/>
 727     </SPSSODescriptor>
 728     <Organization>
 729       <OrganizationName xml:lang="en">ScienceDirect</OrganizationName>
 730       <OrganizationDisplayName xml:lang="en">ScienceDirect</OrganizationDisplayName>
 731       <OrganizationURL xml:lang="en">http://www.sciencedirect.com/</OrganizationURL>
 732     </Organization>
 733     <ContactPerson contactType="technical">
 734       <GivenName>Tony Gast</GivenName>
 735       <EmailAddress>tony.gast@lexisnexis.com</EmailAddress>
 736     </ContactPerson>
 737     <ContactPerson contactType="technical">
 738       <GivenName>Chris Shillum</GivenName>
 739       <EmailAddress>c.shillum@elsevier.com</EmailAddress>
 740     </ContactPerson>
 741     <ContactPerson contactType="administrative">
 742       <GivenName>Tony Gast</GivenName>
 743       <EmailAddress>tony.gast@lexisnexis.com</EmailAddress>
 744     </ContactPerson>
 745   </EntityDescriptor>
 746 <EntityDescriptor entityID="https://shib.dev.oclc.org/shibboleth">
 747    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 748       <KeyDescriptor>
 749          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 750             <ds:KeyName>shib.dev.oclc.org</ds:KeyName>
 751          </ds:KeyInfo>
 752       </KeyDescriptor>
 753       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 754       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://shib.dev.oclc.org:2080/Shibboleth.shire" index="1"/>
 755       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shib.dev.oclc.org:2443/Shibboleth.shire" index="2"/>
 756    </SPSSODescriptor>
 757    <Organization>
 758       <OrganizationName xml:lang="en">Online Computer Library Center Inc.</OrganizationName>
 759       <OrganizationDisplayName xml:lang="en">Online Computer Library Center Inc.</OrganizationDisplayName>
 760       <OrganizationURL xml:lang="en">http://www.oclc.org</OrganizationURL>
 761    </Organization>
 762    <ContactPerson contactType="administrative">
 763       <GivenName>Eva Marie Allen</GivenName>
 764       <EmailAddress>allene@oclc.org</EmailAddress>
 765    </ContactPerson>
 766    <ContactPerson contactType="technical">
 767       <GivenName>Eva Marie Allen</GivenName>
 768       <EmailAddress>allene@oclc.org</EmailAddress>
 769    </ContactPerson>
 770 </EntityDescriptor>
 771
 772 <EntityDescriptor entityID="https://shib.oclc.org/shibboleth">
 773    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 774       <KeyDescriptor>
 775          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 776             <ds:KeyName>shib.oclc.org</ds:KeyName>
 777          </ds:KeyInfo>
 778       </KeyDescriptor>
 779       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 780       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shib.oclc.org:2443/Shibboleth.shire" index="1"/>
 781       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://shib.oclc.org:2080/Shibboleth.shire" index="2"/>
 782    </SPSSODescriptor>
 783    <Organization>
 784       <OrganizationName xml:lang="en">Online Computer Library Center Inc.</OrganizationName>
 785       <OrganizationDisplayName xml:lang="en">Online Computer Library Center Inc.</OrganizationDisplayName>
 786       <OrganizationURL xml:lang="en">http://www.oclc.org</OrganizationURL>
 787    </Organization>
 788    <ContactPerson contactType="administrative">
 789       <GivenName>Sharon Ramsay</GivenName>
 790       <EmailAddress>shibboleth@oclc.org</EmailAddress>
 791    </ContactPerson>
 792    <ContactPerson contactType="technical">
 793       <GivenName>Eva Marie Allen</GivenName>
 794       <EmailAddress>shibboleth@oclc.org</EmailAddress>
 795    </ContactPerson>
 796    <ContactPerson contactType="technical">
 797       <GivenName>Richard Scranton</GivenName>
 798       <EmailAddress>shibboleth@oclc.org</EmailAddress>
 799    </ContactPerson>
 800 </EntityDescriptor>
 801
 802   <EntityDescriptor entityID="https://shibtest.nac.uci.edu/cgi-bin/printenv">
 803     <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 804       <KeyDescriptor>
 805         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 806           <ds:KeyName>shibtest.nac.uci.edu</ds:KeyName>
 807         </ds:KeyInfo>
 808       </KeyDescriptor>
 809       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 810       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shibtest.nac.uci.edu/Shibboleth.shire" index="0"/>
 811     </SPSSODescriptor>
 812     <Organization>
 813       <OrganizationName xml:lang="en">UCIs InCommon Demo Resource</OrganizationName>
 814       <OrganizationDisplayName xml:lang="en">UCIs InCommon Demo Resource</OrganizationDisplayName>
 815       <OrganizationURL xml:lang="en">http://www.uci.edu/</OrganizationURL>
 816     </Organization>
 817     <ContactPerson contactType="technical">
 818       <GivenName>Paul Main</GivenName>
 819       <EmailAddress>pmain@uci.edu</EmailAddress>
 820     </ContactPerson>
 821     <ContactPerson contactType="administrative">
 822       <GivenName>Brian Roode</GivenName>
 823       <EmailAddress>bgroode@uci.edu</EmailAddress>
 824     </ContactPerson>
 825   </EntityDescriptor>
 826
 827   <EntityDescriptor entityID="https://share.internet2.edu/shibboleth">
 828     <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 829       <KeyDescriptor>
 830         <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 831           <ds:KeyName>share.internet2.edu</ds:KeyName>
 832         </ds:KeyInfo>
 833       </KeyDescriptor>
 834       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 835       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://share.internet2.edu/Shibboleth.shire" index="0"/>
 836     </SPSSODescriptor>
 837     <Organization>
 838       <OrganizationName xml:lang="en">Internet2 Wiki</OrganizationName>
 839       <OrganizationDisplayName xml:lang="en">Internet2 Wiki</OrganizationDisplayName>
 840       <OrganizationURL xml:lang="en">http://www.internet2.edu/</OrganizationURL>
 841     </Organization>
 842     <ContactPerson contactType="technical">
 843       <GivenName>IJ Kim</GivenName>
 844       <EmailAddress>ij@internet2.edu</EmailAddress>
 845     </ContactPerson>
 846   </EntityDescriptor>
 847 <EntityDescriptor entityID="https://www.webassign.net/Shibboleth">
 848    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 849       <KeyDescriptor>
 850          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 851             <ds:KeyName>www.webassign.net</ds:KeyName>
 852          </ds:KeyInfo>
 853       </KeyDescriptor>
 854       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 855       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.webassign.net/Shibboleth.sso" index="0"/>
 856    </SPSSODescriptor>
 857    <Organization>
 858       <OrganizationName xml:lang="en">WebAssign</OrganizationName>
 859       <OrganizationDisplayName xml:lang="en">WebAssign</OrganizationDisplayName>
 860       <OrganizationURL xml:lang="en">http://www.webassign.net/</OrganizationURL>
 861    </Organization>
 862    <ContactPerson contactType="technical">
 863       <GivenName>Brian Marks</GivenName>
 864       <EmailAddress>brian@webassign.net</EmailAddress>
 865    </ContactPerson>
 866 </EntityDescriptor>
 867 <EntityDescriptor entityID="urn:mace:incommon:cornell.edu">
 868    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 869       <Extensions>
 870          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cornell.edu</shibmd:Scope>
 871       </Extensions>
 872       <KeyDescriptor use="signing">
 873          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 874             <ds:KeyName>shiborigin.cit.cornell.edu</ds:KeyName>
 875          </ds:KeyInfo>
 876       </KeyDescriptor>
 877       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 878       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shiborigin.cit.cornell.edu/shibboleth/HS"/>
 879    </IDPSSODescriptor>
 880    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 881       <Extensions>
 882          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cornell.edu</shibmd:Scope>
 883       </Extensions>
 884       <KeyDescriptor use="signing">
 885          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 886             <ds:KeyName>shiborigin.cit.cornell.edu</ds:KeyName>
 887          </ds:KeyInfo>
 888       </KeyDescriptor>
 889       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shiborigin.cit.cornell.edu:8443/shibboleth/AA"/>
 890       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 891    </AttributeAuthorityDescriptor>
 892    <Organization>
 893       <OrganizationName xml:lang="en">Cornell University</OrganizationName>
 894       <OrganizationDisplayName xml:lang="en">Cornell University</OrganizationDisplayName>
 895       <OrganizationURL xml:lang="en">http://www.cornell.edu/</OrganizationURL>
 896    </Organization>
 897    <ContactPerson contactType="technical">
 898       <GivenName>Todd Zino</GivenName>
 899       <EmailAddress>tcz3@cornell.edu</EmailAddress>
 900    </ContactPerson>
 901    <ContactPerson contactType="technical">
 902       <GivenName>Pete Bosanko</GivenName>
 903       <EmailAddress>pb10@cornell.edu</EmailAddress>
 904    </ContactPerson>
 905    <ContactPerson contactType="administrative">
 906       <GivenName>Andrea Beesing</GivenName>
 907       <EmailAddress>amb3@cornell.edu</EmailAddress>
 908    </ContactPerson>
 909 </EntityDescriptor>
 910 <EntityDescriptor entityID="urn:mace:incommon:case.edu">
 911    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
 912       <Extensions>
 913          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">case.edu</shibmd:Scope>
 914       </Extensions>
 915       <KeyDescriptor use="signing">
 916          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 917             <ds:KeyName>shibb.case.edu</ds:KeyName>
 918          </ds:KeyInfo>
 919       </KeyDescriptor>
 920       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 921       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shibb.case.edu/shibboleth/HS"/>
 922    </IDPSSODescriptor>
 923    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 924       <Extensions>
 925          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">case.edu</shibmd:Scope>
 926       </Extensions>
 927       <KeyDescriptor use="signing">
 928          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 929             <ds:KeyName>shibb.case.edu</ds:KeyName>
 930          </ds:KeyInfo>
 931       </KeyDescriptor>
 932       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shibb.case.edu:8443/shibboleth/AA"/>
 933       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 934    </AttributeAuthorityDescriptor>
 935    <Organization>
 936       <OrganizationName xml:lang="en">Case Western Reserve University</OrganizationName>
 937       <OrganizationDisplayName xml:lang="en">Case Western Reserve University</OrganizationDisplayName>
 938       <OrganizationURL xml:lang="en">http://www.cwru.edu/</OrganizationURL>
 939    </Organization>
 940    <ContactPerson contactType="technical">
 941       <GivenName>Jeremy Smith</GivenName>
 942       <EmailAddress>jeremy.smith@case.edu</EmailAddress>
 943    </ContactPerson>
 944    <ContactPerson contactType="technical">
 945       <GivenName>David Kovacic</GivenName>
 946       <EmailAddress>david.kovacic@case.edu</EmailAddress>
 947    </ContactPerson>
 948 </EntityDescriptor>
 949 <EntityDescriptor entityID="https://www.e-education.psu.edu/shibboleth">
 950    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 951       <KeyDescriptor>
 952          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 953             <ds:KeyName>www.e-education.psu.edu</ds:KeyName>
 954          </ds:KeyInfo>
 955       </KeyDescriptor>
 956       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 957       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.e-education.psu.edu/Shibboleth.sso/SAML/POST" index="1"/>
 958       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.e-education.psu.edu/Shibboleth.sso/SAML/Artifact" index="2"/>
 959    </SPSSODescriptor>
 960    <Organization>
 961       <OrganizationName xml:lang="en">The Pennsylvania State University</OrganizationName>
 962       <OrganizationDisplayName xml:lang="en">The Pennsylvania State University</OrganizationDisplayName>
 963       <OrganizationURL xml:lang="en">http://www.psu.edu/</OrganizationURL>
 964    </Organization>
 965    <ContactPerson contactType="technical">
 966       <GivenName>Jeff Buechler</GivenName>
 967       <EmailAddress>jdb11@psu.edu</EmailAddress>
 968    </ContactPerson>
 969    <ContactPerson contactType="administrative">
 970       <GivenName>Jeff Wolfe</GivenName>
 971       <EmailAddress>wolfe@ems.psu.edu</EmailAddress>
 972    </ContactPerson>
 973 </EntityDescriptor>
 974 <EntityDescriptor entityID="https://angelshibaccept.ais.psu.edu/Shibboleth">
 975    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
 976       <KeyDescriptor>
 977          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
 978             <ds:KeyName>angelshibaccept.ais.psu.edu</ds:KeyName>
 979          </ds:KeyInfo>
 980       </KeyDescriptor>
 981       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
 982       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://angelshibaccept.ais.psu.edu/Shibboleth/Shibboleth.shire" index="1"/>
 983    </SPSSODescriptor>
 984    <Organization>
 985       <OrganizationName xml:lang="en">The Pennsylvania State University</OrganizationName>
 986       <OrganizationDisplayName xml:lang="en">The Pennsylvania State University</OrganizationDisplayName>
 987       <OrganizationURL xml:lang="en">http://www.psu.edu/</OrganizationURL>
 988    </Organization>
 989    <ContactPerson contactType="technical">
 990       <GivenName>Andy Fisher</GivenName>
 991       <EmailAddress>anf107@psu.edu</EmailAddress>
 992    </ContactPerson>
 993    <ContactPerson contactType="administrative">
 994       <GivenName>Terry O'Heron</GivenName>
 995       <EmailAddress>tno1@psu.edu</EmailAddress>
 996    </ContactPerson>
 997 </EntityDescriptor>
 998 <EntityDescriptor entityID="https://shib.cms.psu.edu/Shibboleth">
 999    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
1000       <KeyDescriptor>
1001          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
1002             <ds:KeyName>shib.cms.psu.edu</ds:KeyName>
1003          </ds:KeyInfo>
1004       </KeyDescriptor>
1005       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
1006       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shib.cms.psu.edu/Shibboleth/Shibboleth.shire" index="1"/>
1007    </SPSSODescriptor>
1008    <Organization>
1009       <OrganizationName xml:lang="en">The Pennsylvania State University</OrganizationName>
1010       <OrganizationDisplayName xml:lang="en">The Pennsylvania State University</OrganizationDisplayName>
1011       <OrganizationURL xml:lang="en">http://www.psu.edu/</OrganizationURL>
1012    </Organization>
1013    <ContactPerson contactType="technical">
1014       <GivenName>Andy Fisher</GivenName>
1015       <EmailAddress>anf107@psu.edu</EmailAddress>
1016    </ContactPerson>
1017    <ContactPerson contactType="administrative">
1018       <GivenName>Terry O'Heron</GivenName>
1019       <EmailAddress>tno1@psu.edu</EmailAddress>
1020    </ContactPerson>
1021 </EntityDescriptor>
1022 <EntityDescriptor entityID="https://shib.nacs.uci.edu/cgi-bin/printenv">
1023    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
1024       <KeyDescriptor>
1025          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
1026             <ds:KeyName>shib.nacs.uci.edu</ds:KeyName>
1027          </ds:KeyInfo>
1028       </KeyDescriptor>
1029       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
1030       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://shib.nacs.uci.edu/Shibboleth.sso/SAML/POST" index="1"/>
1031       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://shib.nacs.uci.edu/Shibboleth.sso/SAML/Artifact" index="2"/>
1032    </SPSSODescriptor>
1033    <Organization>
1034       <OrganizationName xml:lang="en">University of California-Irvine</OrganizationName>
1035       <OrganizationDisplayName xml:lang="en">University of California-Irvine</OrganizationDisplayName>
1036       <OrganizationURL xml:lang="en">http://www.uci.edu/</OrganizationURL>
1037    </Organization>
1038    <ContactPerson contactType="technical">
1039       <GivenName>Paul Main</GivenName>
1040       <EmailAddress>pmain@uci.edu</EmailAddress>
1041    </ContactPerson>
1042    <ContactPerson contactType="administrative">
1043       <GivenName>Brian Roode</GivenName>
1044       <EmailAddress>bgroode@uci.edu</EmailAddress>
1045    </ContactPerson>
1046 </EntityDescriptor>
1047 <EntityDescriptor entityID="https://cms.psu.edu/Shibboleth">
1048    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
1049       <KeyDescriptor>
1050          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
1051             <ds:KeyName>cms.psu.edu</ds:KeyName>
1052          </ds:KeyInfo>
1053       </KeyDescriptor>
1054       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
1055       <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://cms.psu.edu/Shibboleth/Shibboleth.shire" index="1"/>
1056    </SPSSODescriptor>
1057    <Organization>
1058       <OrganizationName xml:lang="en">The Pennsylvania State University</OrganizationName>
1059       <OrganizationDisplayName xml:lang="en">The Pennsylvania State University</OrganizationDisplayName>
1060       <OrganizationURL xml:lang="en">http://www.psu.edu/</OrganizationURL>
1061    </Organization>
1062    <ContactPerson contactType="technical">
1063       <GivenName>Andy Fisher</GivenName>
1064       <EmailAddress>anf107@psu.edu</EmailAddress>
1065    </ContactPerson>
1066    <ContactPerson contactType="administrative">
1067       <GivenName>Terry O'Heron</GivenName>
1068       <EmailAddress>tno1@psu.edu</EmailAddress>
1069    </ContactPerson>
1070 </EntityDescriptor>
1071 <EntityDescriptor entityID="urn:mace:incommon:ucla.edu">
1072    <IDPSSODescriptor errorURL="https://shb.ais.ucla.edu/shibboleth-idp/WAYFerror" protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
1073       <Extensions>
1074          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ucla.edu</shibmd:Scope>
1075       </Extensions>
1076       <KeyDescriptor use="signing">
1077          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
1078             <ds:KeyName>shb.ais.ucla.edu</ds:KeyName>
1079          </ds:KeyInfo>
1080       </KeyDescriptor>
1081       <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shb.ais.ucla.edu/shibboleth-idp/Artifact" index="1"/>
1082       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
1083       <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shb.ais.ucla.edu/shibboleth-idp/SSO"/>
1084    </IDPSSODescriptor>
1085    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
1086       <Extensions>
1087          <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ucla.edu</shibmd:Scope>
1088       </Extensions>
1089       <KeyDescriptor use="signing">
1090          <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
1091             <ds:KeyName>shb.ais.ucla.edu</ds:KeyName>
1092          </ds:KeyInfo>
1093       </KeyDescriptor>
1094       <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shb.ais.ucla.edu/shibboleth-idp/AA"/>
1095       <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
1096    </AttributeAuthorityDescriptor>
1097    <Organization>
1098       <OrganizationName xml:lang="en">University of California-Los Angeles</OrganizationName>
1099       <OrganizationDisplayName xml:lang="en">University of California-Los Angeles</OrganizationDisplayName>
1100       <OrganizationURL xml:lang="en">http://www.ucla.edu/</OrganizationURL>
1101    </Organization>
1102    <ContactPerson contactType="technical">
1103       <GivenName>Datta Mahabalagiri</GivenName>
1104       <EmailAddress>datta@ais.ucla.edu</EmailAddress>
1105    </ContactPerson>
1106    <ContactPerson contactType="administrative">
1107       <GivenName>Albert Wu</GivenName>
1108       <EmailAddress>albertwu@ucla.edu</EmailAddress>
1109    </ContactPerson>
1110 </EntityDescriptor>
1111
1112 </EntitiesDescriptor>