<EntityDescriptor entityID="https://shib2idp.ntu.ac.uk/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ntu.ac.uk</shibmd:Scope>
        </Extensions>

        <!-- old certificate  -->
        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                        MIIHvzCCBaegAwIBAgIUWsxORZ8lPV6qSMCJiA3+bx289nkwDQYJKoZIhvcNAQEL
                        BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
                        BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIwMDUyMjEzMDcw
                        N1oXDTIyMDUyMjEzMTcwMFowfzELMAkGA1UEBhMCR0IxGDAWBgNVBAgMD05vdHRp
                        bmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEkMCIGA1UECgwbTm90dGlu
                        Z2hhbSBUcmVudCBVbml2ZXJzaXR5MRswGQYDVQQDDBJzaGliMmlkcC5udHUuYWMu
                        dWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC00Kbz6SYn7IIIr2HN
                        Oa2wJxUGPZdRmHq8L3l3UskSxIDbOR0sswmO2UkEgrEdo9aEQQBzW2iew9fzyoat
                        Wx34Fywh+PypTTdR6dFVQJohjVWGmMgJMbre+vWyYAXGtjZkMMHW0gpBoYJBCeg1
                        zmVP4z2CF9tn/cR62QgnB87t/3E9jsoPOCu567Alq1iM2NH52AycDNwDeULpCJqr
                        UHiFyggY+YOao/D0r17EF9jU8Aonc//9I/HYfvLiH84dZ0AYVo17U4AMAqyDmhiF
                        fJX13wNmsU16VgTBy3Jk7lkTkei7ZokEUPaYB4beNJe9/H1U3ELzcg+/G38N0Pv8
                        cplZAgMBAAGjggNjMIIDXzAJBgNVHRMEAjAAMB8GA1UdIwQYMBaAFLMSibWpSzW8
                        FQDwgOnYeIfxE3x2MHMGCCsGAQUFBwEBBGcwZTA3BggrBgEFBQcwAoYraHR0cDov
                        L3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNydDAqBggrBgEFBQcw
                        AYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMF8GA1UdEQRYMFaCEnNo
                        aWIyaWRwLm50dS5hYy51a4IUc2hpYjJpZHAtMS5udHUuYWMudWuCFHNoaWIyaWRw
                        LTIubnR1LmFjLnVrghRzaGliMmlkcC0zLm50dS5hYy51azBRBgNVHSAESjBIMEYG
                        DCsGAQQBvlgAAmQBATA2MDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnF1b3ZhZGlz
                        Z2xvYmFsLmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF
                        BQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFs
                        LmNvbS9xdnNzbGczLmNybDAdBgNVHQ4EFgQUW2CYy0EV8zm75r5Tq3yDvuiS9L4w
                        DgYDVR0PAQH/BAQDAgWgMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQBWFAaa
                        L9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAXI8h9QSAAAEAwBGMEQCIEi1
                        e/3xFwtStBLA6c1nIOz80C2OJ9CL6oMlVjfJfltDAiARcED73OK4M8T8ZAJ5DnBl
                        Aw6EhjHM5VzA1KLKvsbZDgB1AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBE
                        XCpzAAABcjyH1EUAAAQDAEYwRAIgCc2jMf3HTCn20Bs9JoeCY8/mD303dVrYJ3IJ
                        uz9d2U4CIERu+1U1n//Pf52nqOZXCf7g3i2OB3e/DLm6YcdgbSm2AHYARqVV63X6
                        kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAFyPIfUGwAABAMARzBFAiEA6vdK
                        0WBREuE09DshkP1uoU2YYtpTTRYfp34dg7KdU2YCIEhq8tI6bgekLh1jjVyYxnvu
                        gAy7xk/KOTuLJtEalx7eMA0GCSqGSIb3DQEBCwUAA4ICAQBWs46F47CMRd3GNcWd
                        PID6a/ektlE+5PwDRPwXgLrr+S9XaCvsbMbqb1hM1EyzJYNeBAR6q3dYMjkVICOy
                        4YxnLkvgdQ200SGIuCHC1GEHHL3KRn6B6Jt2o0B2lMjWFlgsrSCYFLx9LTTvrsuz
                        HfQSCDgEeJRUycPsIKZZsF2hYa0nDUeRF40R+C5XaFIwpXElXtVt2eKg1X5LhWIJ
                        YM1nSbx7FYiBPuOVn2OSVOpkNFPsieVMMHBMubX+EMcvCwQZO4Ko17glswYNPJKv
                        23yN7OeIaijsWCYrLuhOZHHDACcIZGAy8hsqg3BjGCT0TqDdoqe84bGLBQf1mxQU
                        stqzkygQe+GXTq80zN4YmQmyKOmf17wwctgaX68B9PqWVxCJ09QN8FE53DA8K/KF
                        cNrlih690YA2wC9wyfQDEFqcJMY0N6E8aEyyYxrwlR2NZhoZW+q+gFj2rRjhVdBk
                        FbqQciX/tCK+vuUbtAVWlodngVV0WY4uvNp+DJrert7d2A808khfAl3Pg8x+3KpS
                        9jnntE6D00rtFBg+x+hfWP0uPhffYCDByIG7f1Ex9M4Npt/7wZy2G8rE7EZVmvf1
                        teM3NYjbgZDWxmUoMuAb+Y1zh7UJuTTgLSCJ45MYcm6oJBSQ/466iT2OkU0CmjmC
                        /ueSdI0QQG720kiX07IapwGi2w==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <!-- new certificate -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                        MIIEMzCCApugAwIBAgIUSUkBFNpwo+inEQ9b/wraYN87/9kwDQYJKoZIhvcNAQEL
                        BQAwHTEbMBkGA1UEAwwSc2hpYjJpZHAubnR1LmFjLnVrMB4XDTIxMTEyMjEwMjgz
                        OFoXDTQxMTEyMjEwMjgzOFowHTEbMBkGA1UEAwwSc2hpYjJpZHAubnR1LmFjLnVr
                        MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAk9gxNlnLlFoFw8VDkX5v
                        KS/ANChJ/FAvdbrLIoS+q3vrWBNNVW7PzZINcKAwex8NIjdTleenNjueL06aomum
                        T/rKwxVYP5NMzsxpdm/GSXsYDf05knnXKDEF6sBz9KOjMdHoHOGmxHKgXQS+u4t5
                        PuIDJyixNMbDgJYiiMPwwVooaZea9geE3lDOehHodASkmCvDr1FQOxVhOmPYRYIc
                        +FLMsHWKYT7PMsa7mnuzOI+OZebeVGfah/ANYqtq8PHk3sOQCb376ivBkr7VtP3I
                        DpXNBOCi4nhgXo3E27bqeicI1MU58b64xvJ1TdtsiTKn6zLfhuOjF7qck3Eumuqk
                        /qhjIGc1bE5oWaohst37ZLD6cwk41ilqAQsGyN/rqbP7bW4Gwo5jviXh+2ByVEy1
                        z+VfQ5Gfwkg80STy8FxIf4APXoV2080vi4v5NTbcCwctMeFtfkywSE/SJDxgUW7X
                        Xz1or84Gly1FXpqEycakPTkaLMYM8/6FJX3BgULcgFotAgMBAAGjazBpMB0GA1Ud
                        DgQWBBS/hvkkatio700kPZDaz0KO+LEAOjBIBgNVHREEQTA/ghJzaGliMmlkcC5u
                        dHUuYWMudWuGKWh0dHBzOi8vc2hpYjJpZHAubnR1LmFjLnVrL2lkcC9zaGliYm9s
                        ZXRoMA0GCSqGSIb3DQEBCwUAA4IBgQCDJVfpHqX04sSIqD2/RTHnJlOmA3irowHa
                        n3eyWrq4cKKSev/v6I6pSvuix/cKH5GNwcrcNsE57p1mjRiP4+8hFydOJn20MJAz
                        orVOirAzSlMVsdzwXk+DIpgYD4472eqptsGjBa7SMtAR32V8TsVVwOpOJXk3viK4
                        75ztmsS5Nof7w4bajEzodc4pyiGXVo5ILv3fD1Ity0WMc6/3F1XtDguycHpw8QtE
                        r1ll7evoD0PqRGCzYvh/axnCef7j0awCpNGhNxsDrEOHa8QFb/zS3NfU+EteUFYv
                        Kx7GtuIajOgrxDLzN1KpTrWJb1LLyDvUhSu19NMPQ66nPA095imwe86Chy27HzDn
                        CSGhe0fMa7d+iU4ldKhC1utmnFNSXHvKcYfj2+QeOoXgpaoiUPGY2HWF7vhtIPJi
                        28CD/7ddN6iBh8kwRirYoREm+ORctjvUxtrQSqWdlJ1L+qIstQrs6M/tmsCI4wET
                        drQXpYR6jV3jxbc6IXoO2qLas4Qr+2Q=
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
         </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                                   Location="https://shib2idp.ntu.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" 
                                   index="1"/>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://shib2idp.ntu.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" 
                             Location="https://shib2idp.ntu.ac.uk/idp/profile/Shibboleth/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://shib2idp.ntu.ac.uk/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://shib2idp.ntu.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://shib2idp.ntu.ac.uk/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ntu.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" 
                          Location="https://shib2idp.ntu.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery" />
        
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://shib2idp.ntu.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery" />
        
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        
    </AttributeAuthorityDescriptor>
    
</EntityDescriptor>    

