<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://sso.gac.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">gac.edu</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at sso.gac.edu</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at sso.gac.edu</mdui:Description>
                <mdui:Logo height="80" width="80">https://sso.gac.edu/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHzCCAgegAwIBAgIUfmuSAmkuYpXCPrG6izt1zruP+e8wDQYJKoZIhvcNAQEL
BQAwGDEWMBQGA1UEAwwNc2hpYjMuZ2FjLmVkdTAeFw0xNjAzMTAxOTU2MDlaFw0z
NjAzMTAxODU2MDlaMBgxFjAUBgNVBAMMDXNoaWIzLmdhYy5lZHUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAg4yTkfQXr1zoeJf0h5S10p7rtxGwlyzh
qzzbMJLQlfIvkV+yOgrtcPoobRNC2gcRSWMJughFVrDGNs72V5b1ga7FevAlzPzB
bU+T2K25SioDsm8DK8P65aXjc6ihRa81L0o1qbYCWx5KukNqj/d1pRYjksAYGZ2L
XepBFauB0CzB5ChL11C5YQrvMDkUn7e3QF/SRaTsPOvHVW1Ke/Pufl+dNIb+uSD5
/SBtU9FarieYEugBhGuiNtcHI5PEjJcbMldFmt/zDUZ/o27o0zDLOkvUy/XHe6zn
C/B6dBYgQht/407WPUlDMGl5JjFEXk7Uv8IbsGeKsVLG37j8KNvVAgMBAAGjYTBf
MB0GA1UdDgQWBBSmXzHAtVVlVPu6OD2KbZnmcymWWDA+BgNVHREENzA1gg1zaGli
My5nYWMuZWR1hiRodHRwczovL3NoaWIzLmdhYy5lZHUvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggEBAFBPlj3uNkyCdRH9i8U4lJF/Fuc+je5Nppxf6z35
ZQtiaVZQgTcmoEC5Seaolnh6+kP3vEWbAsNpOnNyqg4lz8hUM0eo7xUYhABMFCTX
GJLHQpbUs65k1Nh/qcFFEXLcAYwpWk/Qvt6uYj1CjgCBCvB/vPuwE0XnZwZs3xDH
kPw/w3Q0NccTGlHKvO95Db1W7MDvyQOlwqseTeBmppeLi11QjhG47muIu+E+7VA+
CtsXfppTQeXSKBdXWTCnl9uvU16vvkHwgffHI12ILLaT9UK4yJPDYTIzRz/YOGMC
b2iwBMkwUImGW930/93fBL8DJpKhstV/AXpXFG09RjpUHyc=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIDCCAgigAwIBAgIVAL+ric16CaLvEZBhRKBQHXXZ07m7MA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDXNoaWIzLmdhYy5lZHUwHhcNMTYwMzEwMTk1NjA3WhcN
MzYwMzEwMTg1NjA3WjAYMRYwFAYDVQQDDA1zaGliMy5nYWMuZWR1MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6BVIg32PwPUGfj9W4X9q/i6Slngww04
X/NAUvGi1bqzOOP35FSWsYEpKuK+CdAyO3eqIgVydECEUCQUZA8zXOlReYK9BGEp
Cljuya8MfAARigTWOPoKnfATPZQVZQxElCqtHC1p7jbyALNrMMzN13KpuSGZzrNw
eERJYPAQKeqpo/c/WbikXVk5ZyaxGqEBF7DZG4IQRYD+5dwZGjgr03LcIOtED+H9
Z3cTLebUj1X62qckkNIlPxSzFIalB1F+sUsvfAkKQmCXy6C89TQOTCsG0sPdjqzS
5zeuCBwFalSJX/GYh26RBXjJyuXOz3H+CQyun3XPdnHyX4SAjdJ5hQIDAQABo2Ew
XzAdBgNVHQ4EFgQU+y9F2/ca3TeS2lIAtleZZYh1szwwPgYDVR0RBDcwNYINc2hp
YjMuZ2FjLmVkdYYkaHR0cHM6Ly9zaGliMy5nYWMuZWR1L2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBAQA0CqNYWe9NC7gvlYg938rs+lmiZb9NWPdyaeeZ
jjBtC78tzokQLKP2KlqYwTfoQR5yu3NyidgV2LPacHxz7yrTdlTDr6xIXhyEnhLm
k11EHhoimDoc0I8CklzF9JiV/nwi4UBkvbXH8ishpXA8B40PRJtuxncNZTMlvJdB
G34payHdlLaGyTh58zjm3pRnDc80pTUjMVejdFhAW6IW/LME95H3YwTvSPYAiKud
5CiaBHWnk2QerVmHz4glS9N2M51fAPWY1eCWNuWr4pABMrXxsUts0/yiy7xaYx57
M08Fv9Dwo+T2782mggSQ5SOAdWwoABxifZIc8MOvq9XwZw3J
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://sso.gac.edu/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sso.gac.edu/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.gac.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.gac.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sso.gac.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sso.gac.edu/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://sso.gac.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.gac.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sso.gac.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.gac.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">gac.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHzCCAgegAwIBAgIUfmuSAmkuYpXCPrG6izt1zruP+e8wDQYJKoZIhvcNAQEL
BQAwGDEWMBQGA1UEAwwNc2hpYjMuZ2FjLmVkdTAeFw0xNjAzMTAxOTU2MDlaFw0z
NjAzMTAxODU2MDlaMBgxFjAUBgNVBAMMDXNoaWIzLmdhYy5lZHUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAg4yTkfQXr1zoeJf0h5S10p7rtxGwlyzh
qzzbMJLQlfIvkV+yOgrtcPoobRNC2gcRSWMJughFVrDGNs72V5b1ga7FevAlzPzB
bU+T2K25SioDsm8DK8P65aXjc6ihRa81L0o1qbYCWx5KukNqj/d1pRYjksAYGZ2L
XepBFauB0CzB5ChL11C5YQrvMDkUn7e3QF/SRaTsPOvHVW1Ke/Pufl+dNIb+uSD5
/SBtU9FarieYEugBhGuiNtcHI5PEjJcbMldFmt/zDUZ/o27o0zDLOkvUy/XHe6zn
C/B6dBYgQht/407WPUlDMGl5JjFEXk7Uv8IbsGeKsVLG37j8KNvVAgMBAAGjYTBf
MB0GA1UdDgQWBBSmXzHAtVVlVPu6OD2KbZnmcymWWDA+BgNVHREENzA1gg1zaGli
My5nYWMuZWR1hiRodHRwczovL3NoaWIzLmdhYy5lZHUvaWRwL3NoaWJib2xldGgw
DQYJKoZIhvcNAQELBQADggEBAFBPlj3uNkyCdRH9i8U4lJF/Fuc+je5Nppxf6z35
ZQtiaVZQgTcmoEC5Seaolnh6+kP3vEWbAsNpOnNyqg4lz8hUM0eo7xUYhABMFCTX
GJLHQpbUs65k1Nh/qcFFEXLcAYwpWk/Qvt6uYj1CjgCBCvB/vPuwE0XnZwZs3xDH
kPw/w3Q0NccTGlHKvO95Db1W7MDvyQOlwqseTeBmppeLi11QjhG47muIu+E+7VA+
CtsXfppTQeXSKBdXWTCnl9uvU16vvkHwgffHI12ILLaT9UK4yJPDYTIzRz/YOGMC
b2iwBMkwUImGW930/93fBL8DJpKhstV/AXpXFG09RjpUHyc=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://sso.gac.edu/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sso.gac.edu/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
