<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
--> 
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr"  entityID="https://login.hfmt-hamburg.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hfmt-hamburg.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Hochschule fuer Musik und Theater Hamburg</mdui:DisplayName>
		<mdui:DisplayName xml:lang="den">Hochschule fuer Musik und Theater Hamburg</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of Hochschule fuer Musik und Theater Hamburg</mdui:Description>
                <mdui:Description xml:lang="de">Identity Provider der Hochschule fuer Musik und Theater Hamburg</mdui:Description>
                <mdui:Logo height="16" width="16">https://login.hfmt-hamburg.de/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://login.hfmt-hamburg.de/idp/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at login.hfmt-hamburg.de</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at login.hfmt-hamburg.de</mdui:Description>
                <mdui:Logo height="80" width="80">https://login.hfmt-hamburg.de/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
--> 
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hfmt-hamburg.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
        <!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.hfmt-hamburg.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
--> 

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hfmt-hamburg.de:8443/idp/profile/SAML2/SOAP/SLO"/>


        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.hfmt-hamburg.de/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/Redirect/SSO"/>
	<!-- den fehlenden ECP-Endpoint hinzufügen -->
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hfmt-hamburg.de/idp/profile/SAML2/SOAP/ECP"/>

	<!-- die fehlenden NameID-Formate hinzufügen -->
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </IDPSSODescriptor>

    <!-- Protocol-Support für SAML2-Queries im Attribute Authority-Descriptor aktivieren -->
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
 
        ...
 
        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="..."/>
        <!-- SAML2-Attribute-Service einkommentieren -->
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="..."/>
 
        <!-- die fehlenden NameID-Formate hinzufügen -->
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
 
    </AttributeAuthorityDescriptor>



<!--    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hfmt-hamburg.de</shibmd:Scope>
        </Extensions>

        --> <!-- First signing certificate is BackChannel, the Second is FrontChannel-->  <!--
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.hfmt-hamburg.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>-->  <!--
        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.hfmt-hamburg.de:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>-->  <!--
        --> <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above-->  <!--

    </AttributeAuthorityDescriptor>--> 

</EntityDescriptor>
