<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2022-10-10T07:39:52.215Z" entityID="https://identites.ensea.fr/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ensea.fr</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">ENSEA Identity Provider</mdui:DisplayName>
                <mdui:Description xml:lang="en">SAML compliant Identity Provider at identites.ensea.fr powered by Shibboleth IdP</mdui:Description>
                <mdui:Logo height="80" width="80">https://identites.ensea.fr/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDDTCCAfWgAwIBAgIJAMAlybULWJxBMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV
BAMMEmlkZW50aXRlcy5lbnNlYS5mcjAeFw0yMjAyMTExNTIyMjBaFw00OTA2Mjkx
NTIyMjBaMB0xGzAZBgNVBAMMEmlkZW50aXRlcy5lbnNlYS5mcjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMIP6g6f6l08YiMnNUBaQsWAzrOGjKvFaDdB
c8yt6apwSsm20mWV/RMcEOmW8V2f/klDyfptcScu7Jmrq8Tc2jwv8ZPDKqIcDj+4
dhTuukN96utoiNCkKhHELjR/3mBE1Xz0Xj5WuhmDWUv5P+Q9MnMoQvX5peOottsT
0hYZcmVwlpsfsUbtWQcxIFXjpq7pXqQw6EpgjenPNFvduZkDUIbQUQTi7iuRRNqD
ShBEuQu0h55Cq+orz0AejUqKVvV5bWDmBckCp5zjmaDcvm7lxKjLvAzq6/ix53lZ
WbGGm0J2f5xtyXUYbzEkNhfA/BukErBoMZgotkBcfgJ/oIPZCpECAwEAAaNQME4w
HQYDVR0OBBYEFDtTElVsYmsqra8WbnmoHr/fXrFRMB8GA1UdIwQYMBaAFDtTElVs
Ymsqra8WbnmoHr/fXrFRMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
AAchHCkm2qHoCetpEzGVFY8u4IWwgUMFvRaB+BCWnbHQhgjmwp9p7ev8D+ZAb1V9
5Uz5IDwlUDXjxXR7QJ1zs75ZH4NpJicjVNysl8LEF6guvLr3aVF6yUJ5GaH58WPN
voIMmn2Stl00wjEWMMPKFqB4jjyCaIZIBdtUtwMBlvbzj4hWz04ovZ1D6KrTu+pj
MGJslK5N4oKaJPq/psXqkFH4g/Bd8HjcghNEpCS55UghZgM300bshURyZrGFcdna
XgjjwWGU6HD4DbrsjPq4yX0uWUXVzY8RkX2NPNe9Ld2CHfBoaGbNMasbvX8DIoOT
t9cHd4R+kNlhKIWAC3gat+4=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://identites.ensea.fr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identites.ensea.fr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://identites.ensea.fr/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://identites.ensea.fr/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identites.ensea.fr:8443/idp/profile/SAML2/SOAP/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://identites.ensea.fr/idp/profile/SAML2/POST/SLO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://identites.ensea.fr/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://identites.ensea.fr/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://identites.ensea.fr/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://identites.ensea.fr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" req-attr:supportsRequestedAttributes="true" Location="https://identites.ensea.fr/idp/profiles/saml2/sso/ecp"/>
    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ensea.fr</shibmd:Scope>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDDTCCAfWgAwIBAgIJAMAlybULWJxBMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV
BAMMEmlkZW50aXRlcy5lbnNlYS5mcjAeFw0yMjAyMTExNTIyMjBaFw00OTA2Mjkx
NTIyMjBaMB0xGzAZBgNVBAMMEmlkZW50aXRlcy5lbnNlYS5mcjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMIP6g6f6l08YiMnNUBaQsWAzrOGjKvFaDdB
c8yt6apwSsm20mWV/RMcEOmW8V2f/klDyfptcScu7Jmrq8Tc2jwv8ZPDKqIcDj+4
dhTuukN96utoiNCkKhHELjR/3mBE1Xz0Xj5WuhmDWUv5P+Q9MnMoQvX5peOottsT
0hYZcmVwlpsfsUbtWQcxIFXjpq7pXqQw6EpgjenPNFvduZkDUIbQUQTi7iuRRNqD
ShBEuQu0h55Cq+orz0AejUqKVvV5bWDmBckCp5zjmaDcvm7lxKjLvAzq6/ix53lZ
WbGGm0J2f5xtyXUYbzEkNhfA/BukErBoMZgotkBcfgJ/oIPZCpECAwEAAaNQME4w
HQYDVR0OBBYEFDtTElVsYmsqra8WbnmoHr/fXrFRMB8GA1UdIwQYMBaAFDtTElVs
Ymsqra8WbnmoHr/fXrFRMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEB
AAchHCkm2qHoCetpEzGVFY8u4IWwgUMFvRaB+BCWnbHQhgjmwp9p7ev8D+ZAb1V9
5Uz5IDwlUDXjxXR7QJ1zs75ZH4NpJicjVNysl8LEF6guvLr3aVF6yUJ5GaH58WPN
voIMmn2Stl00wjEWMMPKFqB4jjyCaIZIBdtUtwMBlvbzj4hWz04ovZ1D6KrTu+pj
MGJslK5N4oKaJPq/psXqkFH4g/Bd8HjcghNEpCS55UghZgM300bshURyZrGFcdna
XgjjwWGU6HD4DbrsjPq4yX0uWUXVzY8RkX2NPNe9Ld2CHfBoaGbNMasbvX8DIoOT
t9cHd4R+kNlhKIWAC3gat+4=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://identites.ensea.fr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identites.ensea.fr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
        
    </AttributeAuthorityDescriptor>
</EntityDescriptor>
