<!--
 This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
This metadata is not dynamic - it will not change as your configuration changes.
On Demand Metadata Generation available from the metadatagen plugin.
-->
<md:EntityDescriptor entityID="https://idp.must.ac.ug/idp/shibboleth" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">must.ac.ug</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Mbarara University of Science and Technology (MUST)</mdui:DisplayName>
                <mdui:Description xml:lang="en">This is the office Identity Provider for Mbarara Univeristy of Science and Technology</mdui:Description>
                <mdui:Logo xml:lang="en" width="80" height="80">https://www.must.ac.ug/wp-content/uploads/2024/03/logo-no-words.webp</mdui:Logo>
            </mdui:UIInfo>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.must.ac.ug/idp/profile/SAML2/SOAP/ArtifactResolution" />
	<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.must.ac.ug/idp/profile/SAML2/Redirect/SLO"/>
	<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.must.ac.ug/idp/profile/SAML2/POST/SLO" />
	<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.must.ac.ug/idp/profile/SAML2/POST-SimpleSign/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.must.ac.ug/idp/profile/SAML2/Redirect/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.must.ac.ug/idp/profile/SAML2/POST/SSO" />
    </md:IDPSSODescriptor>

</md:EntityDescriptor>