<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.     On Demand Metadata Generation available from the metadatagen plugin.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://aai.hfk-bremen.de/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">hfk-bremen.de</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">University of the Arts Bremen</mdui:DisplayName>
		        <mdui:DisplayName xml:lang="de">Hochschule für Künste Bremen</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of the University of the Arts Bremen</mdui:Description>
		        <mdui:Description xml:lang="de">Identity Provider der Hochschule für Künste Bremen</mdui:Description>
                <mdui:Logo height="16" width="16">https://idp-dev.hochschule-XY.de/favicon.ico</mdui:Logo>
                <mdui:Logo height="80" width="80">https://aai.hfk-bremen.de/idp/images/logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIEMDCCApigAwIBAgIVAJgsEtwIwYjkwn31j6Vj7rYzxDdXMA0GCSqGSIb3DQEB
CwUAMBwxGjAYBgNVBAMMEWFhaS5oZmstYnJlbWVuLmRlMB4XDTIyMTExNjExNDk1
N1oXDTQyMTExNjExNDk1N1owHDEaMBgGA1UEAwwRYWFpLmhmay1icmVtZW4uZGUw
ggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDFJ/h6ICzH4hODIdvQjfNa
In1HgXInfBmNzfXRNfBu6MuiEcd+rwL/nGDAqvq5VuCNGuP5Cz8LazILDDxpPWdY
JXS9BBad2H4dnwQ3DHoSQXPGish2qD9NQta9+xcVaYGVjYv3SctN6UnscvQNNGnn
SZSFnOWdqBw6AkjWRr4Rkr+OODe96pOTXjnIXKaVz/qgS6TbEpY8QenW+MzHval6
YOXJdn2g5QIPfv3Nh2JtEiApylKctwdH2J0hvPtvlNyRRFd7vqFwzWxmtdyRnBFI
ix977rTA4bYoNZ+/Kiru49VzXvyeq7id14c+w8ucuwhr+IYWFtMWWjh8rF06XsXo
XbiyUHvZ2EFhQmrTSljdfxeYIbZLQbqJMczIKEEIex1/RLqZaTj68nxCEHqOF8Bp
MZyYFld8jw/9RxFNVapcUzbdz4fT+pmeQqjdEPt4yB0WZ/mUqaqT1MueIojs4i0h
ydrytyA8xK0pAg6y04vt29AQgYPASqmcIsnaGU9ocHsCAwEAAaNpMGcwHQYDVR0O
BBYEFO3XePbPRKmTOx1yj8LJy9nkcVDLMEYGA1UdEQQ/MD2CEWFhaS5oZmstYnJl
bWVuLmRlhihodHRwczovL2FhaS5oZmstYnJlbWVuLmRlL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBgQBxpinSzTCQsGN3RAt6YZ4w+VmMnUztsNNH4ok/
uWRRTjzYbKWOXGNGHBkwUHWaue4zNo679+uEsTebhpflF8P6BCuAVAHB6OqlzWkc
zNKBcm8CYLWzRxQhjdi1YxTiis6BeRcPt5Kpjny4OP3bVV/hxVp3mYIZXEafd/T4
d4ocH3W7+H1jQcIUmfSAyIzjIWd+lfMRs/RohVGxObjTDwMbrU2hzwj4+bWlfB3T
4QNySHd4TDNloLHR6AJwjPlCEbyef7NmQSMA6u3nQ7hgDFPvH3jjpH/tsuK714/p
faTEf5/uBohDh0CNwG6aVKHBtqvczAhXpq/lYnPBoEx78/MhAf9OMFK1SGaE1+uY
0l9X9Xn+sOWtFPKfSyNMcxiuIpXXxGR8ze2DzF+nK0QcLyqm0c9to6AEtulH24Jf
jOmpy0uV0B/cFnxciGTNebQWDvSzmjlTjUNqpbAhFCnXTQCnJxP/2Max+/Sj/dOR
xfkaSz5aS93OwIG+bPVLMuUuWvY=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai.hfk-bremen.de:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
		<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.hfk-bremen.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>


        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.hfk-bremen.de:8443/idp/profile/SAML2/SOAP/SLO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai.hfk-bremen.de/idp/profile/Shibboleth/SSO"/>
		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.hfk-bremen.de/idp/profile/SAML2/SOAP/ECP"/>

    </IDPSSODescriptor>


        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
		
    <!--<Extensions>
            <shibmd:Scope regexp="false">hfk-bremen.de</shibmd:Scope>
        </Extensions>

        --> <!-- First signing certificate is BackChannel, the Second is FrontChannel-->  <!--
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIELzCCApegAwIBAgIUW6IuP5wHDnF919mlw8dpNfvxT0swDQYJKoZIhvcNAQEL
BQAwHDEaMBgGA1UEAwwRYWFpLmhmay1icmVtZW4uZGUwHhcNMjIxMTE2MTE1MTA0
WhcNNDIxMTE2MTE1MTA0WjAcMRowGAYDVQQDDBFhYWkuaGZrLWJyZW1lbi5kZTCC
AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAMtjR/7sE0y9TlvZZ/Fw9NdY
Ky1ndCuSjV+Oj/jsJl0FTVv1UR23Wo4TVKn3zQnLFZobVCbGtrqqk4+vg8YEuaiz
kkPGa2sl20dyXYnGF62PrMe8KMXvDADOZofBgjFBGrcevLIkF0ljvoC/a0DWo+ny
fk6O0GhhC5pUQpONg0nOs8WLeObSyJ5etheIajMmQaHU97tugBzENVGht/M2wGCR
mMxSxqvrcYiQQK5GGalsPmR4t63s8sWbIR7bw3AzmQnCvJpH+YaHNSZr68QJj01r
6Ufx9GwBamyZziau0uDybV7YOSWAFZ9djgLWNHPdvuE0t2pkIoJ1XSKQ94ePiYj2
8qJ7poj7EiPT7k58ytap6u/eWbuG2H+/qmFffqRzzZFAg0fZFoU1RSwcgJUq/mrt
gls8glt6xC9jn6w8NixIFxigQDKnY32JBe4njPs34iiT4NDRixs2cgOxHIP+GfXi
Er3CnnbS1XbEigMFhfD5vC0TO5n4aGws0Qb72adkWwIDAQABo2kwZzAdBgNVHQ4E
FgQUhaCSmJU4DSJAl71v1nTelX8g8JcwRgYDVR0RBD8wPYIRYWFpLmhmay1icmVt
ZW4uZGWGKGh0dHBzOi8vYWFpLmhmay1icmVtZW4uZGUvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggGBAC8W6r59mgR8DmxTSY+vMOF/fdhfrrAPU+1dW9Eu
Cn3xZP+5y2wuXODAuwUaYpTr4xaB6Schp8n3+j1AW4BNV+s9gwdv5Wo0EeJonnux
TJQIlhGHO9wB1+r61G8Tw6qHLovexfdpl5B/2MkslwjedixlhmwRNVOeTDLrcGY4
pZByajwnB4NGV6tgnTyw+OK/12yKc0cmO+6szzqno3tCBEfNoijN+h5Z1rSPRksI
7+p7O2VQ9gm0+WtPy4nYOQfrToDsIT4sklEIEvdIVv7JcX0iKLpwe0CZJ3/hx4qE
KuJYSXXfza7oAf3ATbEqMJ5d81EAYht0jHsPrf3yLj9mf0KNAjdo48TOOsNoGFPu
ziQXgzSHmnDktGRCgQcKQEbLabqPY17nENxN6i30fPrd7NMGCBrfbgr+TRCl0zL8
sCf6SOVQ1P6qFp+Wm2K2J9AGPWjwzGx81ng8ByhmIM6Pjg8AKoOeUbxRdhjMMHFx
PaL1dJnPHURU2y/pjQEWyeJeAg==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIELzCCApegAwIBAgIUaHJY8QkMvbtQpFTokfIZLhcvxBswDQYJKoZIhvcNAQEL
BQAwHDEaMBgGA1UEAwwRYWFpLmhmay1icmVtZW4uZGUwHhcNMjIxMTE2MTE0OTU3
WhcNNDIxMTE2MTE0OTU3WjAcMRowGAYDVQQDDBFhYWkuaGZrLWJyZW1lbi5kZTCC
AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAJam0AoA33qf77nT345hEdFG
2DUpLhfk8T4Wt4p8wJElRzrsEW6Pnv3GkGaqP5zv1Ab3FqnLbfksYaHgVmxYn/F5
Opypo/Xps4VnyC/1mTCkIbqVeAtXC+rwUa2yW9UNCtO6EZxOLPjIdvweuyP7Jrkh
23uGy9Vif2IUrdfLioQZfMM3bfiL5ZiwX8joQDg5/d+0rPSYawDZoxyZEbM8kP/B
xMgzyUK9siaUMoMUqLqjEAwG+8QdbljCBMBjK54O4il3fgyQ5jRUlYvupR7sv0/d
9J4HVYWQaMunU+XDakBAX1pcSFFJ6cZaewyYnNZMukSt4QQ6XM9ZYHAAjBc/B+3R
Wte0T/H+VUFZ0jFgxfittO72RnFjaUDM5fC7TvBughi4gplTYmnHzYenbvC/x8hU
yXZrhCbpu9zdikfxYlnaYNgRui7L7Dwy2Uxb4Xg5XZh2eRQHb2mVTf7zxyCcO236
1ycd0gp4d/6myN6Gh3hh6yLdErMRTz8ltr3rxCvAKQIDAQABo2kwZzAdBgNVHQ4E
FgQUC6lAcQmP1nq3DoFCCHK1uAMgI0AwRgYDVR0RBD8wPYIRYWFpLmhmay1icmVt
ZW4uZGWGKGh0dHBzOi8vYWFpLmhmay1icmVtZW4uZGUvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggGBABhOB6r19+8yu8Rx6TmqMthe+wGp0iypolghu36Z
iUGnfX3TpHYWxGDf73BWGNfnBDiuD57lQoJ+ZbRHgyNnQqC5PXGN32WkkyO0Lpro
evAby7Pwit82Fn79JpCJg7sOunm3a10VSoQXwsvklf8xuL4eX7v3hcIZPzjzjjT9
liStsvDVRf591dIw5IvssuB2wKpzLEcASpuW45AWpij81G2sKrYgbyEXx3f+deMl
ngsh1RRn6UIpRDabslrbWCaMMHg83Qpai+sdUfCNcKV9zPpDLxVG9tf6AbFjXUwd
az3Ieuae/0n/ow5YZ8QJluHDnrB/zRrG066/fmTIIHOIbOuh0aKh51L0xvUy9W0q
3nlgjD/C/FEi0Cqg24NnVxyg1WPEcTBFt5tkkVY6i1NGeVR4oInuUKFc3fV0PUgb
T2pf0Pot54E3SqCROcHIh677kUS776Q15GbKgmfBO+v8jjJe4OsJ6hxJoKsqKlv6
61snAc6F/0lQ3MMNENzBpGtAzQ==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        -->
	        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above-->
		<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai.hfk-bremen.de:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
		<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.hfk-bremen.de:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
		
		    <!-- die fehlenden NameID-Formate hinzufügen -->
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </AttributeAuthorityDescriptor>

</EntityDescriptor>