<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor
    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
    xmlns:xml="http://www.w3.org/XML/1998/namespace"
    xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
    xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr"
    validUntil="2043-01-19T13:47:49.754Z"
    entityID="https://idp.univ-orleans.fr/idp/shibboleth">

    <md:IDPSSODescriptor
        protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
        WantAuthnRequestsSigned="false">

        <md:Extensions>
            <shibmd:Scope regexp="false">univ-orleans.fr</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="fr">IdP Université d'Orléans</mdui:DisplayName>
                <mdui:Description xml:lang="fr">Fournisseur d'identité de l'Université d'Orléans</mdui:Description>
            </mdui:UIInfo>
        </md:Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>

        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>

        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
MIIENzCCAp+gAwIBAgIUR7/WOe+btThuTEU8xbmxPuiVkTQwDQYJKoZIhvcNAQEL
BQAwHjEcMBoGA1UEAwwTaWRwLnVuaXYtb3JsZWFucy5mcjAeFw0yMzAxMTkxMzQ2
NTdaFw00MzAxMTkxMzQ2NTdaMB4xHDAaBgNVBAMME2lkcC51bml2LW9ybGVhbnMu
ZnIwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCA5+StBnQvzKFnriZW
YGpWIJppUmhUr6s39aY82YPGonuigocN1RszD7cN4pyl4/CX9fGLxBtIgobknzQF
EnuLfpwT8ksNpUq5hr3qh77NV4KN9LwsM/iCgyhb6cYH+m74iiD2R8bQs3w/T+NP
eU9TmyiWNoMH9AkI1Kmfp3bc91BOnTtKhOdw4Ex1g5JjfR5KxvZLvjq5OKRwz3Tg
ooafWntqfTZqoqK13VqX0BngSHNSiT/hs6tHlcTh33rFdxXji4EktWf+PKmvFCpL
C89zLVTMXjPOGH6HlBejI0qcypUw/3dN2XToulHG8MZr0RbmxmammNi8jrunGWKl
eGeTiIYm9yRN244GBZFDjpfIIzgPDpBgzaEhoibuYY0nMhd2CIlDt44j6btYIQdo
rZ0/OuOrrgy1EWGkJ9FGqb/+H4VxFaVAJcZOOCFr8zFo39LwgEZ0S+d6smPtgAZg
RfQFA7RlJpUuTCze0KXkRLtYWdX5nOGCHEwKxtRZUi0q1GMCAwEAAaNtMGswHQYD
VR0OBBYEFPX8PtV3uj2aVIJDcngcvC3ikHPRMEoGA1UdEQRDMEGCE2lkcC51bml2
LW9ybGVhbnMuZnKGKmh0dHBzOi8vaWRwLnVuaXYtb3JsZWFucy5mci9pZHAvc2hp
YmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAYEAWYdfccUT1wRS7fDA+6mPoZIIx49I
rw0KiNRX5wbGwAU0phVmAa7O2hlVLd78dX5yOCMD7KfYmc95VvZzEZrclOSi9mA7
zqSE5sHZak+ukzjVwoTZvwvp+2PI5poRglMJyxTLsX5DYe997SZd7XLRpW+hGVKQ
rxW8YzcNh4eoES4QktG/1JjjlpyOF2tMXNB55cQl+3RzIcilleb2mSPb9TchJgZ7
aonwozHK7570vbjNCp44r0xEp8spqX8AoTznlzRQHOKEBY0uP+I8BiqEsBDL+vng
YKN5z9JeKLx8PTmAHUBK8hx0l9j97TuWDp7bBXQUvQLYn7wtEnH8a4v9qEkt0ERQ
p/oPR7vgLJUfAhHdg+TYSjuCVYlTQCGfUSa73VbUSGC2imHGZKtQbLWejHpgJJfc
eU1sSXs8Xl5H9jkq33Tzhk0zzJnEZH6vo/f4c2Bnz6TakatMa2RjOOHRB+j7H0R4
jQrRaerLMd0rqlMz2YdEJgEnjkVfFRwqQIvH
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>

        <!-- Formats NameID annoncés (cohérents avec ta conf actuelle) -->
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
        <!-- Endpoints SSO -->
        <md:SingleSignOnService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://idp.univ-orleans.fr/idp/profile/SAML2/Redirect/SSO"/>

        <md:SingleSignOnService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://idp.univ-orleans.fr/idp/profile/SAML2/POST/SSO"/>

        <!-- Endpoint pour le logout -->
        <md:SingleLogoutService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://idp.univ-orleans.fr/idp/profile/SAML2/Redirect/SLO"/>

    </md:IDPSSODescriptor>

</md:EntityDescriptor>