<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://luidp01.ln.edu.hk/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ln.edu.hk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at luidp01.ln.edu.hk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at luidp01.ln.edu.hk</mdui:Description>
                <mdui:Logo height="80" width="80">https://luidp01.ln.edu.hk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://luidp01.ln.edu.hk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://luidp01.ln.edu.hk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://luidp01.ln.edu.hk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://luidp01.ln.edu.hk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://luidp01.ln.edu.hk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://luidp01.ln.edu.hk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://luidp01.ln.edu.hk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://luidp01.ln.edu.hk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://luidp01.ln.edu.hk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://luidp01.ln.edu.hk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ln.edu.hk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDLzCCAhegAwIBAgIUZ9ZNtwyPxyd6sxUrpvxFfbyIcN8wDQYJKoZIhvcNAQEL
BQAwHDEaMBgGA1UEAwwRbHVpZHAwMS5sbi5lZHUuaGswHhcNMTYxMTA5MTAyMzU0
WhcNMzYxMTA5MTAyMzU0WjAcMRowGAYDVQQDDBFsdWlkcDAxLmxuLmVkdS5oazCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJcDaoeY1NL4YH1Je4uQ7s+b
WU7xZnGDgNAlUWH0q7RAi9VHq9bHZszX7j08H79qT2ptacWu0oo0JuE7AEovK3Bk
rEcBKlvjaTrfGjnNboOx+IviYvX0de4OnrEH+kx/e3ALqc8iqsfEfohY2OtL0NYD
A2wpd6mBS2+3IQbtGYed+bd+u1xHK2UkRGANuiGb8l0kRX3UIpRAiK9ZDMJg/D7K
my7bUn9oiOOb6R/wxpthAvrWmojbclEYlgqJ2mmP/cFNM9TkLLjRx1zD3jgA02C0
DOd2/9udCgT06jqSHfoLlAg4ia/ypmTCkvHFvg+XHd+Go5VpIp8QO70XAAzDg8sC
AwEAAaNpMGcwHQYDVR0OBBYEFKbUPmUBVVVapNdpIL9ad2PouaeqMEYGA1UdEQQ/
MD2CEWx1aWRwMDEubG4uZWR1LmhrhihodHRwczovL2x1aWRwMDEubG4uZWR1Lmhr
L2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQBPgxpK/NX2YVgJWsR1
jumwYcHlcN1KQ8k4eeLm/G4w9fZSppecJ3lnerfbX06YM2WqkEWRaQwburpjicpE
nyd4Sh+RzgY0hQe34+EOzl8ahu5KHOU12zY4wlIfoIe4qNxsC1dLE/JtxYrN+0rS
0eExfbrXBkTzWjYSkVBYxNXqMnPUCIpBFfJ9oftoCogej4m7OrkZFGA3nUt1Tek4
dX6dNUEsUch7wzNK6Joj/M5aRpY0jToSGEqNab0tAwOzP7f3sFiP/EdXGb1Ns8oL
kMtrRRr749mSoBB84VjYZq3Wi9Yt5K2eAtvDFQGKs2oVskffinhTCsll+8JgU4QV
5Gv1
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://luidp01.ln.edu.hk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://luidp01.ln.edu.hk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
