<?xml version="1.0" encoding="UTF-8"?>

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.unibas.it/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
	<shibmd:Scope regexp="false">unibas.it</shibmd:Scope>

            <mdui:UIInfo>
		<mdui:DisplayName xml:lang="en">University of Basilicata</mdui:DisplayName>
		<mdui:DisplayName xml:lang="it">Università degli Studi della Basilicata</mdui:DisplayName>
    		<mdui:Description xml:lang="en">Identity Provider of the University of Basilicata</mdui:Description>
		<mdui:Description xml:lang="it">Identity Provider dell'Università degli Studi della Basilicata</mdui:Description>
		<mdui:InformationURL>http://portale.unibas.it/site/home/link-utili/protezione-dati.html</mdui:InformationURL>
		<mdui:PrivacyStatementURL>http://portale.unibas.it/site/home/link-utili/protezione-dati.html</mdui:PrivacyStatementURL>
		<mdui:Logo height="80" width="80">https://web.unibas.it/logo-unibas-blu.png</mdui:Logo>
	    </mdui:UIInfo>

        </Extensions>
	<!--
	<md:Organization>
                <md:OrganizationName xml:lang="en">University of Basilicata</md:OrganizationName>
                <md:OrganizationDisplayName xml:lang="en">University of Basilicata</md:OrganizationDisplayName>
                <md:OrganizationURL>http://portale.unibas.it</md:OrganizationURL>
        </md:Organization>
	-->
        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

	<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.unibas.it/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"/>

       
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.unibas.it/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.unibas.it/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.unibas.it/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.unibas.it/idp/profile/SAML2/SOAP/SLO"/>
	
	<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    	<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

	<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.unibas.it/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.unibas.it/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.unibas.it/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">unibas.it</shibmd:Scope>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIEHzCCAoegAwIBAgIUMhoGHajKlwIzGoc9EJLKcyScocYwDQYJKoZIhvcNAQEL
BQAwGDEWMBQGA1UEAwwNaWRwLnVuaWJhcy5pdDAeFw0yMTAyMDUxMTQxNDJaFw00
MTAyMDUxMTQxNDJaMBgxFjAUBgNVBAMMDWlkcC51bmliYXMuaXQwggGiMA0GCSqG
SIb3DQEBAQUAA4IBjwAwggGKAoIBgQCgHc9WLfWJ68HkeEOlbQRccipOefjjv17z
0PH/niVuWXwcPLu3z+j2SLyzudD5B/hakyIVBqVTTHM+1Nl94nRZuUT6eerzOLKg
7YnQlD6CzzgkxtR6cBnD7ENwb6Gd4hFdTBnNUeaOTGeIChIS0IhDhxZ2Z8iewca6
4dLtCJT8dMagQr4k2JaDvRcBqH8NJl26d2P9nu/qCQ7qrk3jqs83goWCasacj/jB
Yrqj8qS6RFSSffV77Uz6W9TPnkZIatooo0cVICjrirmUgBKVCXON2nBytx/reyMF
tm1JkQozQCLdvk+yI83/rCbZQZUYgfoo76Q/4JbDlZMubF0M9w1U1jC4L5VhdgO0
mISr2I+bmQMYQen3hJueNy/o4pN3TRk8hLwg31OU/0GOgPRnf6tgkHEOx/hHBeHN
FmDwCNg5N+GJTE9i1R370GQi8pASJ1ch2XtrbUrDpBAtk8SgLH1MIzl/AUnJagdO
r6tUz7T8mb/9tVs+brbyzNt7dA6QR2ECAwEAAaNhMF8wHQYDVR0OBBYEFIcSnIa7
ebQUwSCFTL1eeJrse0QvMD4GA1UdEQQ3MDWCDWlkcC51bmliYXMuaXSGJGh0dHBz
Oi8vaWRwLnVuaWJhcy5pdC9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOC
AYEAHU31q/QC6IWN+d8PvkXdjkW8fcF+QUCE0C8hZvCSIwCpvty+ZgFU0cx3umB+
qanZcoPhldxFZKgXf3yZRGX3ggALrU4cpxGe19z9/uMY7GmXcly1V0itL3aOqqc3
Hn5D39FohA49LMkFLAA/icjrLcJ4pIvH9VINfM9wbG1UwtOzkiVqmfGrbU2L/Ofh
qgmlEA69AEyJvePKi0Z60LYG+FE97WJS09G/XOkTLnAj0idZ2DVCLCGYEKzwIYOV
ybtS9KQwj12Rngd4lPkBDukSXDmNk7VfX/3vT+ktZ9/sZHw3xRnhUlT6SXkyJoi6
iN1rf8C+zwuGVIGQGbXyDgEW2NRQXLFBO4usFn8XkUpCif299Db075zhtFoYK1nD
bHEmxF2Yv68lzLsDfngtFFF+SLgBguTc0kTTXqKyg/K1gUYjA2Bae4J4fboNmB4U
f3IeoKpuNVMuLRkUC8xG/Pgiagnk50xpg2KEXFWSz62MvhDNtKBVnEpkEIDzTzq9
mzfg
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.unibas.it/idp/profile/SAML2/SOAP/AttributeQuery"/> 

    </AttributeAuthorityDescriptor>

</EntityDescriptor>

