<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.kmkg-mrah.be/idp/shibboleth">
    <Extensions>
        <mdrpi:RegistrationInfo registrationAuthority="http://federation.belnet.be/" registrationInstant="2012-03-27T12:00:00Z">
            <mdrpi:RegistrationPolicy xml:lang="en">http://federation.belnet.be/files/Belnet-metadata-registration-practice-statement.txt</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
    </Extensions>

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">kmkg-mrah.be</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Royal Museums of Art and History, Brussels</mdui:DisplayName>
                <mdui:DisplayName xml:lang="fr">Musées royaux d'Art et d'Histoire, Bruxelles</mdui:DisplayName>
                <mdui:DisplayName xml:lang="nl">Koninklijke Musea voor Kunst en Geschiedenis, Brussel</mdui:DisplayName>
                <mdui:Description xml:lang="en">Art &amp; History Museum, Museums of the Far East, Halle Gate, Musical Instruments Museum</mdui:Description>
                <mdui:Description xml:lang="fr">Musée Art &amp; Histoire, Musées d'Extrême Orient, Porte de Hal, Musée des Instruments de Musique</mdui:Description>
                <mdui:Description xml:lang="nl">Museum Kunst &amp; Geschiedenis, Musea van het Verre Oosten, Hallepoort, Muziekinstrumentenmuseum</mdui:Description>
		<mdui:InformationURL xml:lang="en">http://www.kmkg-mrah.be</mdui:InformationURL>
		<mdui:InformationURL xml:lang="fr">http://www.kmkg-mrah.be</mdui:InformationURL>
		<mdui:InformationURL xml:lang="nl">http://www.kmkg-mrah.be</mdui:InformationURL>
                <mdui:Logo height="16" width="16">https://idp.kmkg-mrah.be/idp/images/logo-16px.png</mdui:Logo>
                <mdui:Logo height="95" width="350">https://idp.kmkg-mrah.be/idp/images/logo2-small.png</mdui:Logo>
                <mdui:Logo height="853" width="3128">https://idp.kmkg-mrah.be/idp/images/logo2-300dpi.png</mdui:Logo>
                <mdui:Logo height="1706" width="6255">https://idp.kmkg-mrah.be/idp/images/logo2-600dpi.png</mdui:Logo>
            </mdui:UIInfo>
	    <mdui:DiscoHints>
                <mdui:DomainHint>kmkg-mrah.be</mdui:DomainHint>
		<mdui:IPHint>193.190.222.254/32</mdui:IPHint>
		<mdui:GeolocationHint>geo:50.839314,4.392390</mdui:GeolocationHint>
	    </mdui:DiscoHints>
       </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.kmkg-mrah.be:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.kmkg-mrah.be:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.kmkg-mrah.be/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.kmkg-mrah.be/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.kmkg-mrah.be/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.kmkg-mrah.be:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.kmkg-mrah.be/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.kmkg-mrah.be/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.kmkg-mrah.be/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.kmkg-mrah.be/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">kmkg-mrah.be</shibmd:Scope>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.kmkg-mrah.be:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.kmkg-mrah.be:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>


    <Organization>
      <OrganizationName xml:lang="en">Royal Museums of Art and History</OrganizationName>
      <OrganizationName xml:lang="fr">Musées royaux d'Art et d'Histoire</OrganizationName>
      <OrganizationName xml:lang="nl">Koninklijke Musea voor Kunst en Geschiedenis</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Royal Museums of Art and History</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="fr">Musées royaux d'Art et d'Histoire</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="nl">Koninklijke Musea voor Kunst en Geschiedenis</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">http://www.kmkg-mrah.be</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
      <GivenName>ICT Helpdesk</GivenName>
      <SurName>KMKG-MRAH</SurName>
      <EmailAddress>mailto:spoc+shibboleth@kmkg-mrah.be</EmailAddress>
    </ContactPerson>
</EntityDescriptor>
