<EntityDescriptor entityID="https://idp.cnr.it/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">cnr.it</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://idp.cnr.it:8443/idp/profile/SAML1/SOAP/ArtifactResolution" 
                                   index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://idp.cnr.it:8443/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://idp.cnr.it/idp/profile/Shibboleth/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://idp.cnr.it/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://idp.cnr.it/idp/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://idp.cnr.it/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">cnr.it</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIDEzCCAfugAwIBAgIUQn+v41WHgk0kt62N0i1wzsHc0TgwDQYJKoZIhvcNAQEF
BQAwFTETMBEGA1UEAxMKaWRwLmNuci5pdDAeFw0xMDAyMjQwODE1MTBaFw0zMDAy
MjQwODE1MTBaMBUxEzARBgNVBAMTCmlkcC5jbnIuaXQwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDlDQud7JblaNOgr0fuqphs5R2I3dvRfaL1ttm6MlmK
2/GQZ9M+vn3ACHQoWVxmibPiZSm45Q9cdD3ZOE0GOeFbj6mE5zRlUleFI4mI17iB
LtcjV4CsdpG2l7MC3Lreh6UEL1xkkjQk2PSMvY8l2x4ojyRsxOQDIsZksvkdLz0P
L/2YV5+0R7ZSBN6kvWKTfDn38zl3kDuq39GcXphbcaqXlymNSXw7BH7p/Psm+J/C
aOHFxtZ5CU4TyrCMqXWscNDgtdqWajwFVY7yQzNDHSFwccS6ToY23Mr6kGdfC4Z0
Sm87uudoPxUKRi9MrWzSYLKjaEGXUF89KXO0UKdHyH2fAgMBAAGjWzBZMDgGA1Ud
EQQxMC+CCmlkcC5jbnIuaXSGIWh0dHBzOi8vaWRwLmNuci5pdC9pZHAvc2hpYmJv
bGV0aDAdBgNVHQ4EFgQU9zuZcJbHOOpslfMMz71HfiXR1iEwDQYJKoZIhvcNAQEF
BQADggEBAKWK5XLASdpMoZAnAZ0uZfONig7/GQPyEINJpyh4BQj6ioZfbLl9MviB
dNo0K0YdbE5/8eVQ9W9ZiERf0nGY3eSeJRa1mgxmcZbHtEjn9e8GKrUM39XGmWNX
T+R15myyOYa+1d1FX4DIjnFhXozMCwOwpiWUgHQAPuSJhlcLKRCgByfYazBFI8Rq
qYXCWIXhdSsaFnMN6lrjawxHOnFCL81KXoin971tbpEyHp10MeDUjEgVvU6K5FTV
Mmm/TDBCUAo0neP/1zhO1oLqVcG0Of92sCIat4pJ3pz6c+Bu/VvSuY7WIWQ9ceUi
VpIFeEz7cGIaIfECnuZZVeoum3xqc9k=

                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://idp.cnr.it:8443/idp/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://idp.cnr.it:8443/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>

        <Organization>
              <OrganizationName xml:lang="en">CNR</OrganizationName>
	      <OrganizationName xml:lang="it">CNR</OrganizationName>
              <OrganizationDisplayName xml:lang="en">National Research Council</OrganizationDisplayName>
              <OrganizationDisplayName xml:lang="it">Consiglio Nazionale delle Ricerche</OrganizationDisplayName>
              <OrganizationURL xml:lang="en">http://www.cnr.it/en</OrganizationURL>
	      <OrganizationURL xml:lang="it">http://www.cnr.it/it</OrganizationURL>	
        </Organization>
        <ContactPerson contactType="technical">
              <GivenName>Silvio</GivenName>
	      <SurName>Scipioni</SurName>	
              <EmailAddress>silvio.scipioni@cnr.it</EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="technical">
              <GivenName>Stefano</GivenName>
              <SurName>Colagreco</SurName>
              <EmailAddress>stefano.colagreco@cnr.it</EmailAddress>
        </ContactPerson>
	<ContactPerson contactType="support">
	      <GivenName>Authentication Support</GivenName>
              <EmailAddress>supporto.idp@cnr.it</EmailAddress>
        </ContactPerson>
    
</EntityDescriptor>    
