<?xml version="1.0" encoding="UTF-8"?>
<!--
 This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
This metadata is not dynamic - it will not change as your configuration changes.
On Demand Metadata Generation available from the metadatagen plugin.
-->
<md:EntityDescriptorentityID="https://idp.hdbw-hochschule.de/idp/shibboleth" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">hdbw-hochschule.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="de">Hochschule der Bayerischen Wirtschaft (HDBW)</mdui:DisplayName>
                <mdui:DisplayName xml:lang="en">Hochschule der Bayerischen Wirtschaft (HDBW)</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of HDBW University of applied sciences</mdui:Description>
                <mdui:Description xml:lang="de">Identity Provider der HDBW Hochschule der Bayerischen Wirtschaft</mdui:Description>
                <mdui:Logo height="16" width="16">https://idp.hdbw-hochschule.de/favicon.ico</mdui:Logo>
                <!--            <mdui:Logo height="80" width="80">https://idp.hdbw-hochschule.de/idp/images/logo.png</mdui:Logo> -->
                <mdui:Logo height="80" width="80">https://idp.hdbw-hochschule.de/logo.png</mdui:Logo>
            </mdui:UIInfo>
	</md:Extensions>

        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIERDCCAqygAwIBAgIVANiArtVKm8/RYXwy8bofsxL4lcQdMA0GCSqGSIb3DQEBCwUAMCExHzAd
BgNVBAMMFmlkcC5oZGJ3LWhvY2hzY2h1bGUuZGUwHhcNMjUwMzEzMTA0ODA2WhcNNDUwMzEzMTA0
ODA2WjAhMR8wHQYDVQQDDBZpZHAuaGRidy1ob2Noc2NodWxlLmRlMIIBojANBgkqhkiG9w0BAQEF
AAOCAY8AMIIBigKCAYEAneA6sBaX5DCl/o33EEcwthNparkn3i57HAfNvFDdvXWtbFpywsjJHRPb
uB3mobCbzIVD4QKXteeflUgSOfY0RD6/L8AJPNTjHGUW7F1ckPC5mKF0pHMgsXeKCm9chptFj30s
9Z1XKpfwdSdcwjmZd3r3TT00MkaT/DfLK7D1X96Yso2Az6oSjgqOzs1aaglR2H34iGPRr4sUSDiM
DKkmI8w36oJ1836R/FUSiGnZOxaFlHLRnOwAOoPQtbYPXfmfm5Sfw1g+DyiTc/vdClzv+3IrP9G5
mdVaiQmkHPWxjTYaguNuAKrNID6MFkdzuHXWyLvYTJyLh21287M3ojV1DHmPSM/efpAhtRTkiIlq
lpaZub/jEZquY6HDnPZtQhsrIxUrOjPB3y7RgokFOY0gdEelQcJftRAhnHfHKCH9LVnqMYotuF7n
STAtXgdj9xv/jEcEX1/4TozgRvO2Oc7JZok+M7y5qvWPCW5Q4qWfddaxSiZATOCyVPBYcDZ1hD97
AgMBAAGjczBxMB0GA1UdDgQWBBTbv6vQwLs/VT8ZvKFsN6fj0+FyfTBQBgNVHREESTBHghZpZHAu
aGRidy1ob2Noc2NodWxlLmRlhi1odHRwczovL2lkcC5oZGJ3LWhvY2hzY2h1bGUuZGUvaWRwL3No
aWJib2xldGgwDQYJKoZIhvcNAQELBQADggGBAHu6/Dq3OhMyd1u+5OKdrVGNXudWweAOSZ9YM3kS
GPD9w/w0pm3HAY//Cdi/10/3BLq87G/ZFQyXeBQyTJoQSKlD+q9EUVPtn9kFWRCQ2w992Hg570YG
eJUR0KIuZefuwE+NWxnzzKG2CMhxW1M4Sm1oEIiF7g2N9x1U3LaBEzJZJlJdhuoJutsZGqrH0pkp
VkRoRyg0koKTHq+2kZC6D5zA1JyuhODq1wT3ptbOxAbw9QIK+xCo9DF4aNGFDqKYP2UR5soAfmst
mrwZ8jX1t6iFHbvpamNWn9IKAfKNYmE1J9twA5Z/GMN2hn7e7ifflhO3o49aJSactKqqM0pzc7Ct
wjqfiAwl6UugCkxWSXOnjf9frjzyTZYESS+e03hn3BY2l7P6l1EwRiIfEum4OZJckCFhg7vJzVHv
oKzx6Sd/9s2tOwFitoaw5i2jNz7KL9kEVSh500kf0xPFMalJPGi4v1j/stEVv/TMjQikL27xvcjb
JUzsNM7RrJ1h7AX52w==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
	<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.hdbw-hochschule.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        <!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.hdbw-hochschule.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
-->
        <!-- vier Single-Logout-Services aktiveren -->

        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/SOAP/ArtifactResolution" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/POST-SimpleSign/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/Redirect/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/POST/SSO" />
	<!--                       -->
	 <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.hdbw-hochschule.de/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>

        <!-- den fehlenden ECP-Endpoint hinzufügen -->
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.hdbw-hochschule.de/idp/profile/SAML2/SOAP/ECP"/>

	</md:IDPSSODescriptor>


<!--    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hdbw-hochschule.de</shibmd:Scope>
        </Extensions>

        -->
         <!-- Protocol-Support für SAML2-Queries im Attribute Authority-Descriptor aktivieren -->
	<AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

	<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.hdbw-hochschule.de:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>

	</AttributeAuthorityDescriptor>

</md:EntityDescriptor>