<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2019-02-25T18:41:30.997Z" entityID="https://idp.ipm.cas.cz/idp/shibboleth">

    <Extensions xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
            <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
        </eduidmd:RepublishRequest>
    </Extensions>


    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ipm.cas.cz</shibmd:Scope>
           <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                 <mdui:DisplayName xml:lang="en">Institute of Physics of Materials of the AS CR</mdui:DisplayName>
                 <mdui:DisplayName xml:lang="cs">Ústav fyziky materiálů AV ČR</mdui:DisplayName>
                 <mdui:Description xml:lang="en">Identity Provider IPM AV CR employees.</mdui:Description>
                 <mdui:Description xml:lang="cs">Identity Provider pro zaměstnance ÚFM AV ČR</mdui:Description>
                 <mdui:InformationURL xml:lang="en">http://www.ipm.cz/</mdui:InformationURL>
                 <mdui:InformationURL xml:lang="cs">http://www.ipm.cz/</mdui:InformationURL>
                 <mdui:Logo height="44" width="68">https://idp.ipm.cas.cz/loga/logo-ipm-44.png</mdui:Logo>
                 <mdui:Logo height="129" width="200">https://idp.ipm.cas.cz/loga/logo-ipm-129.png</mdui:Logo>
           </mdui:UIInfo>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ipm.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ipm.cas.cz/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ipm.cas.cz/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ipm.cas.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ipm.cas.cz:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>


        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.ipm.cas.cz/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.ipm.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.ipm.cas.cz/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>
    <Organization>
      <OrganizationName xml:lang="en">Institute of Physics of Materials</OrganizationName>
      <OrganizationName xml:lang="cs">Ústav fyziky materiálů Akademie věd České republiky</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Institute of Physics of Materials of the Academy of Sciences of the Czech Republic, v. v. i.</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="cs">Ústav fyziky materiálů Akademie věd České republiky, v.v.i.</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">http://www.ipm.cz/</OrganizationURL>
      <OrganizationURL xml:lang="cs">http://www.ipm.cz/</OrganizationURL>
    </Organization>

    <ContactPerson contactType="technical">
      <GivenName>Petr</GivenName>
      <SurName>Vaníček</SurName>
      <EmailAddress>mailto:vanicekp@utia.cas.cz</EmailAddress>
    </ContactPerson>

</EntityDescriptor>
