<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:saml1md="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://dkfzshib.inet.dkfz-heidelberg.de/idp/shibboleth" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:remd="http://refeds.org/metadata" >

    <Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://www.aai.dfn.de" registrationInstant="2017-12-01T13:06:39Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://www.aai.dfn.de/en/join/</mdrpi:RegistrationPolicy>
        <mdrpi:RegistrationPolicy xml:lang="de">https://www.aai.dfn.de/teilnahme/</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <mdattr:EntityAttributes>
        <saml:Attribute Name="http://aai.dfn.de/loa/degree-of-reliance" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>n/a</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
    </Extensions>
    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <Extensions>
        <saml1md:Scope regexp="false">dkfz-heidelberg.de</saml1md:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="de">Deutsches Krebsforschungszentrum DKFZ</mdui:DisplayName>
          <mdui:DisplayName xml:lang="en">German Cancer Research Center DKFZ</mdui:DisplayName>
          <mdui:Description xml:lang="de">Identity Provider des deutschen Krebsforschungszentrums Heidelberg</mdui:Description>
          <mdui:Description xml:lang="en">Identity Provider German Cancer Research Center Heidelberg</mdui:Description>
          <mdui:Logo height="64" width="80">https://dkfzshib.inet.dkfz-heidelberg.de/idp/images/logo.png</mdui:Logo>
          <mdui:InformationURL xml:lang="de">http://www.dkfz.de</mdui:InformationURL>
          <mdui:InformationURL xml:lang="en">http://www.dkfz.de</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="de">https://www.dkfz.de/de/datenschutzerklaerung.html</mdui:PrivacyStatementURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://www.dkfz.de/en/data-privacy-protection.html</mdui:PrivacyStatementURL>
        </mdui:UIInfo>
      </Extensions>
      <KeyDescriptor>
        <ds:KeyInfo>
          <ds:KeyName>dkfzshib.inet.dkfz-heidelberg.de</ds:KeyName>
          <ds:X509Data>
            <ds:X509SubjectName>CN=dkfzshib.inet.dkfz-heidelberg.de</ds:X509SubjectName>
            <ds:X509Certificate>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    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dkfzshib.inet.dkfz-heidelberg.de/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dkfzshib.inet.dkfz-heidelberg.de/idp/profile/SAML2/POST/SSO"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dkfzshib.inet.dkfz-heidelberg.de/idp/profile/SAML2/Redirect/SSO"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dkfzshib.inet.dkfz-heidelberg.de/idp/profile/SAML2/SOAP/ECP"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://dkfzshib.inet.dkfz-heidelberg.de/idp/profile/SAML2/POST-SimpleSign/SSO"/>
    </IDPSSODescriptor>
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <Extensions>
        <saml1md:Scope regexp="false">dkfz-heidelberg.de</saml1md:Scope>
      </Extensions>
      <KeyDescriptor>
        <ds:KeyInfo>
          <ds:KeyName>dkfzshib.inet.dkfz-heidelberg.de</ds:KeyName>
          <ds:X509Data>
            <ds:X509SubjectName>CN=dkfzshib.inet.dkfz-heidelberg.de</ds:X509SubjectName>
            <ds:X509Certificate>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    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>

      <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://dkfzshib.inet.dkfz-heidelberg.de/idp/profile/SAML2/SOAP/AttributeQuery"/>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    </AttributeAuthorityDescriptor>
    <Organization>
      <OrganizationName xml:lang="de">e286</OrganizationName>
      <OrganizationName xml:lang="en">e286</OrganizationName>
      <OrganizationDisplayName xml:lang="de">Deutsches Krebsforschungszentrum - Stiftung des öffentlichen Rechts</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="en">Deutsches Krebsforschungszentrum - Stiftung des öffentlichen Rechts</OrganizationDisplayName>
      <OrganizationURL xml:lang="de">http://www.dkfz.de</OrganizationURL>
      <OrganizationURL xml:lang="en">http://www.dkfz.de</OrganizationURL>
    </Organization>
    <ContactPerson contactType="administrative">
        <GivenName>Marco</GivenName>
        <SurName>Kuper</SurName>
        <EmailAddress>mailto:m.kuper@dkfz-heidelberg.de</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="administrative">
        <GivenName>Ulrich</GivenName>
        <SurName>Trefzer</SurName>
        <EmailAddress>mailto:u.trefzer@dkfz-heidelberg.de</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
        <GivenName>Jan</GivenName>
        <SurName>Toelken</SurName>
        <EmailAddress>mailto:cert@dkfz.de</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="support">
        <GivenName>Maik</GivenName>
        <SurName>Walter</SurName>
        <EmailAddress>mailto:m.walter@dkfz-heidelberg.de</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="technical">
        <GivenName>Ulrich</GivenName>
        <SurName>Trefzer</SurName>
        <EmailAddress>mailto:u.trefzer@dkfz-heidelberg.de</EmailAddress>
    </ContactPerson>
  </EntityDescriptor>
