<?xml version="1.0" encoding="UTF-8"?>

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.somaliren.org.so/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">idp.somaliren.org.so</shibmd:Scope>

        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.somaliren.org.so/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"/>


        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.somaliren.org.so/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.somaliren.org.so/idp/profile/SAML2/SOAP/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.somaliren.org.so/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.somaliren.org.so/idp/profile/SAML2/Redirect/SLO"/>

        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat> 

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.somaliren.org.so/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.somaliren.org.so/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.somaliren.org.so/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>

</EntityDescriptor>
