<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://login.otis.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">otis.edu</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at login.otis.edu</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at login.otis.edu</mdui:Description>
                <mdui:Logo height="HeightInPixels" width="WidthInPixels">https://login.otis.edu/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVANiNKrX8bnkV7QT+hE3HqQAcb9VoMA0GCSqGSIb3DQEB
CwUAMBkxFzAVBgNVBAMMDmxvZ2luLm90aXMuZWR1MB4XDTE1MDQwNzIxNTAwNFoX
DTM1MDQwNzIxNTAwNFowGTEXMBUGA1UEAwwObG9naW4ub3Rpcy5lZHUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtex/GOVXLSY4buEdHm2212pP56eA
O8suqR2vqUeh4QXGsTrZHrEjPAtJJZkJquUnSgQZrQQPts4cQtlWRfs2olq+C02k
xj8+V4haTSVln5TBTwxNDFT7f8IjgKVWwxGv/ZtT4osLBr6AAtghkGIzO0uI/GHK
JsA8nrP8omIUMjUjl6Vpb0fyZcTVX0BGkojnQH3CfFUYE41psHXdEeoOQwuiTj8S
Vbq3sukGP7HwO4usvl6ty1GVn+csci7gWFma/XBt0QWHuRBST8Bkw9pAIvhUDI0A
9N+hqvwGv1wA37YsGsMp/Y/57NqQkKWQrWMTipLaGzQ9rhskeCcWv2OdAgMBAAGj
YzBhMB0GA1UdDgQWBBTiea6JQGI8LTGMfHx0RrPbN+iE9zBABgNVHREEOTA3gg5s
b2dpbi5vdGlzLmVkdYYlaHR0cHM6Ly9sb2dpbi5vdGlzLmVkdS9pZHAvc2hpYmJv
bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAt2g+OfxjQChMXWWRPmQ0m02ppRAe+peP
ITnlXyQbkWQJ+LhtYn3frgmXjVX8aOApAfHMHIDeNh4D4Lssuga6TePHRcyKlIAq
3fHqP4rHQYEb4RMAEo3CiZuvA+wnHuAX9UQEKdG1BIrPeANPE/4pe+xzpUSoU7XC
3BbkI/gIsID46/ndb1WgJxwpZlxQcYis/ftQp37aNFxN4Yt11q4dChGiv4LPyS8/
0ZtTR9v0xg6YXNr3Sd5qBV1bxK1s7KmI84F3mycT8pQfeJPVkXagPxSMRhkwbxDg
2uoGVGUir8DfEPFPs3yVNE0dyxdTKjg/5A1N7bamBlKMj+ZLN3BisQ==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.otis.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.otis.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.otis.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.otis.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.otis.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.otis.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.otis.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.otis.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.otis.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.otis.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">otis.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVANiNKrX8bnkV7QT+hE3HqQAcb9VoMA0GCSqGSIb3DQEB
CwUAMBkxFzAVBgNVBAMMDmxvZ2luLm90aXMuZWR1MB4XDTE1MDQwNzIxNTAwNFoX
DTM1MDQwNzIxNTAwNFowGTEXMBUGA1UEAwwObG9naW4ub3Rpcy5lZHUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtex/GOVXLSY4buEdHm2212pP56eA
O8suqR2vqUeh4QXGsTrZHrEjPAtJJZkJquUnSgQZrQQPts4cQtlWRfs2olq+C02k
xj8+V4haTSVln5TBTwxNDFT7f8IjgKVWwxGv/ZtT4osLBr6AAtghkGIzO0uI/GHK
JsA8nrP8omIUMjUjl6Vpb0fyZcTVX0BGkojnQH3CfFUYE41psHXdEeoOQwuiTj8S
Vbq3sukGP7HwO4usvl6ty1GVn+csci7gWFma/XBt0QWHuRBST8Bkw9pAIvhUDI0A
9N+hqvwGv1wA37YsGsMp/Y/57NqQkKWQrWMTipLaGzQ9rhskeCcWv2OdAgMBAAGj
YzBhMB0GA1UdDgQWBBTiea6JQGI8LTGMfHx0RrPbN+iE9zBABgNVHREEOTA3gg5s
b2dpbi5vdGlzLmVkdYYlaHR0cHM6Ly9sb2dpbi5vdGlzLmVkdS9pZHAvc2hpYmJv
bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAt2g+OfxjQChMXWWRPmQ0m02ppRAe+peP
ITnlXyQbkWQJ+LhtYn3frgmXjVX8aOApAfHMHIDeNh4D4Lssuga6TePHRcyKlIAq
3fHqP4rHQYEb4RMAEo3CiZuvA+wnHuAX9UQEKdG1BIrPeANPE/4pe+xzpUSoU7XC
3BbkI/gIsID46/ndb1WgJxwpZlxQcYis/ftQp37aNFxN4Yt11q4dChGiv4LPyS8/
0ZtTR9v0xg6YXNr3Sd5qBV1bxK1s7KmI84F3mycT8pQfeJPVkXagPxSMRhkwbxDg
2uoGVGUir8DfEPFPs3yVNE0dyxdTKjg/5A1N7bamBlKMj+ZLN3BisQ==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDJDCCAgygAwIBAgIVAPx/GwPdGpzi3tzDYZn0wehR0a99MA0GCSqGSIb3DQEB
CwUAMBkxFzAVBgNVBAMMDmxvZ2luLm90aXMuZWR1MB4XDTE1MDQwNzIxNTAwM1oX
DTM1MDQwNzIxNTAwM1owGTEXMBUGA1UEAwwObG9naW4ub3Rpcy5lZHUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzysdmCOLJpx06/sgu/GjKV98Wlph7
z7F4V1uVkfHxy5rj9bzTtwazU/4HggAY41PQZMGk3nMTyq3opW0Et9ZrLE6wfva4
DjXcbnP65yYkQtO2KwxkxfABKv1KMzTq4gOnbHerTlCZFP23SEeF6vsU4ig15foT
7xeUZun9G8U/ftskh+jZ8oU4GovYOwysCOXwznq9KmfbcPMJ+L/k08DuEESoqwII
lTS57waLD5XfeFNVyyTMoebp+mFyUbB1phOtalI5qyjj94bvEFMw/MEv8CHCFq/9
PZuWxcWJB3yCOFZ8ijb/u21jJQYsPTeKWjrF65c4M5y1qsOxBZ0chh9RAgMBAAGj
YzBhMB0GA1UdDgQWBBSjJnsCS81z3IkLZMfVedcDmEvYvTBABgNVHREEOTA3gg5s
b2dpbi5vdGlzLmVkdYYlaHR0cHM6Ly9sb2dpbi5vdGlzLmVkdS9pZHAvc2hpYmJv
bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAK+0DidkuwYNeJvn5b3H9rzXcdx19629I
Yo5vaIlGj1PajHYy/JQRlxVJxXDURxBzVjpb5FGfvGgcuZ5GN+ktUQ3A6NChm7fl
wstowSgcutVyUGCRnHX8L/mzIZ9bMjKp5XFRkYPY02eQruC7C4BVfGqwBM5aOsYl
pVkoNd1rWDwaQVjHNWSItzMetWqb6+oq7zwybFhy6kytd2HbFmPnIrojI+q7ZdWK
6QLk9njew+nDKTsHcOdD0PtaB1U27bYASmzgW4+9SGkjWV9ZLHqVwRDweu98WQV7
fpQq2opBvBKA3dl+MGv1enGeNq2W3uTGrPc7vkhUhQp57SZVi29kOA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.otis.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.otis.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
