<EntityDescriptor entityID="https://idp.lmc.ac.uk/idp/shibboleth"
                  xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

    <!-- Traditional IdP metadata -->
    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">lmc.ac.uk</shibmd:Scope>
        </Extensions>

        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                    MIIEmzCCA4OgAwIBAgIRAMvFnz+4pFumoXNvjoCdpf0wDQYJKoZIhvcNAQEFBQAw
                    NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
                    IFNTTCBDQTAeFw0xMDAyMDIwMDAwMDBaFw0xMzAyMDEyMzU5NTlaMHgxCzAJBgNV
                    BAYTAkdCMRMwEQYDVQQIEwpMYW5jYXNoaXJlMRIwEAYDVQQHEwlMYW5jYXN0ZXIx
                    KDAmBgNVBAoTH0xhbmNhc3RlciBhbmQgTW9yZWNhbWJlIENvbGxlZ2UxFjAUBgNV
                    BAMTDWlkcC5sbWMuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
                    AQCluLZDgGWwGcgMVxaUrk6Sndi0cTm0e6pEfPMA4I+87qOhWIW8AXGwqqvR3e4g
                    +mq+iG5xSPfuUfY5/ydrfoHXJGkLPp6ahhvOeIzbnMUfCT4UDdjFkjwcFkBuO5rR
                    ggG09cK1XrIRK3RlYM/r2yyp/c8PjJvM6aIslqYCuuQkh5257IOfU8DUg4u9nUxJ
                    2PrPoMStJNDF6Z35wYbSAwpk8NkqkeYYcJFM/bSg034q3bv4f7wN+x3MTmw0i0dP
                    Aee4NWlEpj4O3bZHud3cl/pgStgYjcwk3LHGDlVFx6dRJXAhNHOtQR8i8nsmAwA7
                    h9xEepy066ZcXFeKPxdHCSxDAgMBAAGjggFgMIIBXDAfBgNVHSMEGDAWgBQMvZNo
                    DPPeq6NJays3V0fqkOO57TAdBgNVHQ4EFgQU1Ehkp2hbUZ/Lk8faPtBptPizvcUw
                    DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
                    AwEGCCsGAQUFBwMCMBgGA1UdIAQRMA8wDQYLKwYBBAGyMQECAh0wOgYDVR0fBDMw
                    MTAvoC2gK4YpaHR0cDovL2NybC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5j
                    cmwwbQYIKwYBBQUHAQEEYTBfMDUGCCsGAQUFBzAChilodHRwOi8vY3J0LnRjcy50
                    ZXJlbmEub3JnL1RFUkVOQVNTTENBLmNydDAmBggrBgEFBQcwAYYaaHR0cDovL29j
                    c3AudGNzLnRlcmVuYS5vcmcwGAYDVR0RBBEwD4INaWRwLmxtYy5hYy51azANBgkq
                    hkiG9w0BAQUFAAOCAQEAJSn+A2A+lmcrxSXAUVdQJuJipz+bMly/llFLwI/KjuHV
                    mVGnKMzSykPXdsBRJqh04krwnOnbyFQAN0QgFjzkKRjDp6V5UNcL+WaBxPDYToXl
                    dIvxqm5Rf0Hq3Ha4FbJoaCfZ6f7EhIbk1XDjV/36AiwT+txNSJBON9zYVzM0SWqV
                    J18eoYqXpolZjtCboYbuWau3cqEpPpWmtPstLu0iG0cUVxLTSRlO7nfv4nWyInti
                    8wkCxfmueqNd+SFE2DiB/FcVNP2lKkBv7d7XmYOJZ+Y05+zDlN5HBYWfp0XggxUQ
                    cEEM0JGe8ve/XT9n24trv4Q1WPb1Bg6oDOLxj+fzCw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                                   Location="https://idp.lmc.ac.uk/idp/profile/SAML2/SOAP/ArtifactResolution" 
                                   index="2"/>
                                   
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                             Location="https://idp.lmc.ac.uk/idp/profile/SAML2/POST/SSO" />

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" 
                             Location="https://idp.lmc.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO" />
        
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" 
                             Location="https://idp.lmc.ac.uk/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>

    <!-- Metadata for IdP-as-SP proxying -->
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                    MIIEmzCCA4OgAwIBAgIRAMvFnz+4pFumoXNvjoCdpf0wDQYJKoZIhvcNAQEFBQAw
                    NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
                    IFNTTCBDQTAeFw0xMDAyMDIwMDAwMDBaFw0xMzAyMDEyMzU5NTlaMHgxCzAJBgNV
                    BAYTAkdCMRMwEQYDVQQIEwpMYW5jYXNoaXJlMRIwEAYDVQQHEwlMYW5jYXN0ZXIx
                    KDAmBgNVBAoTH0xhbmNhc3RlciBhbmQgTW9yZWNhbWJlIENvbGxlZ2UxFjAUBgNV
                    BAMTDWlkcC5sbWMuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
                    AQCluLZDgGWwGcgMVxaUrk6Sndi0cTm0e6pEfPMA4I+87qOhWIW8AXGwqqvR3e4g
                    +mq+iG5xSPfuUfY5/ydrfoHXJGkLPp6ahhvOeIzbnMUfCT4UDdjFkjwcFkBuO5rR
                    ggG09cK1XrIRK3RlYM/r2yyp/c8PjJvM6aIslqYCuuQkh5257IOfU8DUg4u9nUxJ
                    2PrPoMStJNDF6Z35wYbSAwpk8NkqkeYYcJFM/bSg034q3bv4f7wN+x3MTmw0i0dP
                    Aee4NWlEpj4O3bZHud3cl/pgStgYjcwk3LHGDlVFx6dRJXAhNHOtQR8i8nsmAwA7
                    h9xEepy066ZcXFeKPxdHCSxDAgMBAAGjggFgMIIBXDAfBgNVHSMEGDAWgBQMvZNo
                    DPPeq6NJays3V0fqkOO57TAdBgNVHQ4EFgQU1Ehkp2hbUZ/Lk8faPtBptPizvcUw
                    DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
                    AwEGCCsGAQUFBwMCMBgGA1UdIAQRMA8wDQYLKwYBBAGyMQECAh0wOgYDVR0fBDMw
                    MTAvoC2gK4YpaHR0cDovL2NybC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5j
                    cmwwbQYIKwYBBQUHAQEEYTBfMDUGCCsGAQUFBzAChilodHRwOi8vY3J0LnRjcy50
                    ZXJlbmEub3JnL1RFUkVOQVNTTENBLmNydDAmBggrBgEFBQcwAYYaaHR0cDovL29j
                    c3AudGNzLnRlcmVuYS5vcmcwGAYDVR0RBBEwD4INaWRwLmxtYy5hYy51azANBgkq
                    hkiG9w0BAQUFAAOCAQEAJSn+A2A+lmcrxSXAUVdQJuJipz+bMly/llFLwI/KjuHV
                    mVGnKMzSykPXdsBRJqh04krwnOnbyFQAN0QgFjzkKRjDp6V5UNcL+WaBxPDYToXl
                    dIvxqm5Rf0Hq3Ha4FbJoaCfZ6f7EhIbk1XDjV/36AiwT+txNSJBON9zYVzM0SWqV
                    J18eoYqXpolZjtCboYbuWau3cqEpPpWmtPstLu0iG0cUVxLTSRlO7nfv4nWyInti
                    8wkCxfmueqNd+SFE2DiB/FcVNP2lKkBv7d7XmYOJZ+Y05+zDlN5HBYWfp0XggxUQ
                    cEEM0JGe8ve/XT9n24trv4Q1WPb1Bg6oDOLxj+fzCw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                    MIIEmzCCA4OgAwIBAgIRAMvFnz+4pFumoXNvjoCdpf0wDQYJKoZIhvcNAQEFBQAw
                    NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
                    IFNTTCBDQTAeFw0xMDAyMDIwMDAwMDBaFw0xMzAyMDEyMzU5NTlaMHgxCzAJBgNV
                    BAYTAkdCMRMwEQYDVQQIEwpMYW5jYXNoaXJlMRIwEAYDVQQHEwlMYW5jYXN0ZXIx
                    KDAmBgNVBAoTH0xhbmNhc3RlciBhbmQgTW9yZWNhbWJlIENvbGxlZ2UxFjAUBgNV
                    BAMTDWlkcC5sbWMuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
                    AQCluLZDgGWwGcgMVxaUrk6Sndi0cTm0e6pEfPMA4I+87qOhWIW8AXGwqqvR3e4g
                    +mq+iG5xSPfuUfY5/ydrfoHXJGkLPp6ahhvOeIzbnMUfCT4UDdjFkjwcFkBuO5rR
                    ggG09cK1XrIRK3RlYM/r2yyp/c8PjJvM6aIslqYCuuQkh5257IOfU8DUg4u9nUxJ
                    2PrPoMStJNDF6Z35wYbSAwpk8NkqkeYYcJFM/bSg034q3bv4f7wN+x3MTmw0i0dP
                    Aee4NWlEpj4O3bZHud3cl/pgStgYjcwk3LHGDlVFx6dRJXAhNHOtQR8i8nsmAwA7
                    h9xEepy066ZcXFeKPxdHCSxDAgMBAAGjggFgMIIBXDAfBgNVHSMEGDAWgBQMvZNo
                    DPPeq6NJays3V0fqkOO57TAdBgNVHQ4EFgQU1Ehkp2hbUZ/Lk8faPtBptPizvcUw
                    DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
                    AwEGCCsGAQUFBwMCMBgGA1UdIAQRMA8wDQYLKwYBBAGyMQECAh0wOgYDVR0fBDMw
                    MTAvoC2gK4YpaHR0cDovL2NybC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5j
                    cmwwbQYIKwYBBQUHAQEEYTBfMDUGCCsGAQUFBzAChilodHRwOi8vY3J0LnRjcy50
                    ZXJlbmEub3JnL1RFUkVOQVNTTENBLmNydDAmBggrBgEFBQcwAYYaaHR0cDovL29j
                    c3AudGNzLnRlcmVuYS5vcmcwGAYDVR0RBBEwD4INaWRwLmxtYy5hYy51azANBgkq
                    hkiG9w0BAQUFAAOCAQEAJSn+A2A+lmcrxSXAUVdQJuJipz+bMly/llFLwI/KjuHV
                    mVGnKMzSykPXdsBRJqh04krwnOnbyFQAN0QgFjzkKRjDp6V5UNcL+WaBxPDYToXl
                    dIvxqm5Rf0Hq3Ha4FbJoaCfZ6f7EhIbk1XDjV/36AiwT+txNSJBON9zYVzM0SWqV
                    J18eoYqXpolZjtCboYbuWau3cqEpPpWmtPstLu0iG0cUVxLTSRlO7nfv4nWyInti
                    8wkCxfmueqNd+SFE2DiB/FcVNP2lKkBv7d7XmYOJZ+Y05+zDlN5HBYWfp0XggxUQ
                    cEEM0JGe8ve/XT9n24trv4Q1WPb1Bg6oDOLxj+fzCw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
 
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.lmc.ac.uk/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
    
</EntityDescriptor>