<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  entityID="https://signin.k-state.edu/idp/shibboleth"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
>
  <IDPSSODescriptor errorURL="https://signin.k-state.edu/idp/error.jsp"
                    protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <Extensions>
      <shibmd:Scope regexp="false">ksu.edu</shibmd:Scope>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">Kansas State
          University
        </mdui:DisplayName>
        <mdui:Description xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">Kansas State University
          Shibboleth Identity Provider
        </mdui:Description>
        <mdui:InformationURL xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">
          http://www.k-state.edu/its/shibboleth
        </mdui:InformationURL>
        <mdui:Logo height="65" width="200" xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">
          http://www.k-state.edu/images/kstate-logo.jpg
        </mdui:Logo>
        <mdui:PrivacyStatementURL xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">
          http://www.k-state.edu/its/policies/
        </mdui:PrivacyStatementURL>

        <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
          <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                          NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
                          Name="urn:oasis:names:tc:SAML:attribute:assurance-certification">
            <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
          </saml:Attribute>
        </mdattr:EntityAttributes>
      </mdui:UIInfo>
    </Extensions>
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIDMzCCAhugAwIBAgIUddkT+9u91blTGSOr4CVwQBZ/FFYwDQYJKoZIhvcNAQEF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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIDMzCCAhugAwIBAgIUddkT+9u91blTGSOr4CVwQBZ/FFYwDQYJKoZIhvcNAQEF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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                               Location="https://signin.k-state.edu/idp/profile/SAML1/SOAP/ArtifactResolution"
                               index="2"/>
    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                               Location="https://signin.k-state.edu/idp/profile/SAML2/SOAP/ArtifactResolution"
                               index="1"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-redirect" Location="https://signin.k-state.edu/idp/profile/Logout" ResponseLocation="https://signin.k-state.edu/idp/profile/Logout"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://signin.k-state.edu/idp/profile/Logout" ResponseLocation="https://signin.k-state.edu/idp/profile/Logout"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://signin.k-state.edu/idp/profile/Logout" ResponseLocation="https://signin.k-state.edu/idp/profile/Logout"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://signin.k-state.edu/idp/profile/Logout" ResponseLocation="https://signin.k-state.edu/idp/profile/Logout"/>

    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                             Location="https://signin.k-state.edu/idp/profile/SAML2/Redirect/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                         Location="https://signin.k-state.edu/idp/profile/SAML2/POST/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
                         Location="https://signin.k-state.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
    <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
                             Location="https://signin.k-state.edu/idp/profile/Shibboleth/SSO"/>
    </IDPSSODescriptor>
  <AttributeAuthorityDescriptor
    protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    <Extensions>
      <shibmd:Scope regexp="false">ksu.edu</shibmd:Scope>
    </Extensions>
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIDMzCCAhugAwIBAgIUddkT+9u91blTGSOr4CVwQBZ/FFYwDQYJKoZIhvcNAQEF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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIDMzCCAhugAwIBAgIUddkT+9u91blTGSOr4CVwQBZ/FFYwDQYJKoZIhvcNAQEF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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                      Location="https://signin.k-state.edu/idp/profile/SAML1/SOAP/AttributeQuery"/>
    <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                      Location="https://signin.k-state.edu/idp/profile/SAML2/SOAP/AttributeQuery"/>
    <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
  </AttributeAuthorityDescriptor>
  <md:Organization xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    <md:OrganizationName xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">Kansas State University
    </md:OrganizationName>
    <md:OrganizationDisplayName xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">Kansas State
      University
    </md:OrganizationDisplayName>
    <md:OrganizationURL xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="en">http://www.k-state.edu/
    </md:OrganizationURL>
  </md:Organization>
  <md:ContactPerson xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
    <md:GivenName>Technical Support Team</md:GivenName>
    <md:EmailAddress>mailto:idm-dev@ksu.edu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
    <md:GivenName>Office of Administrative Support</md:GivenName>
    <md:EmailAddress>mailto:curtain@ksu.edu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" contactType="support">
    <md:GivenName>Service Desk</md:GivenName>
    <md:EmailAddress>mailto:servicedesk@ksu.edu</md:EmailAddress>
  </md:ContactPerson>
  <md:ContactPerson xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" contactType="other"
                    xmlns:icmd="http://id.incommon.org/metadata"
                    icmd:contactType="http://id.incommon.org/metadata/contactType/security"
                    remd:contactType="http://refeds.org/metadata/contactType/security"
                    xmlns:remd="http://refeds.org/metadata">
    <md:GivenName>Office of Information Security and Compliance</md:GivenName>
    <md:EmailAddress>mailto:security@ksu.edu</md:EmailAddress>
  </md:ContactPerson>

</EntityDescriptor>