<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" entityID="https://idp.ujep.cz/idp/shibboleth">
    <md:Extensions>
      <mdattr:EntityAttributes>
        <saml:Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category-support" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
      <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
         <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
      </eduidmd:RepublishRequest>
    </md:Extensions>

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
        <Extensions>
            <shibmd:Scope regexp="false">ujep.cz</shibmd:Scope>
            <mdui:UIInfo>
	          <mdui:DisplayName xml:lang="en">Jan Evangelista Purkyne University in Usti nad Labem</mdui:DisplayName>
	          <mdui:DisplayName xml:lang="cs">Univerzita Jana Evangelisty Purkyně v Ústí nad Labem</mdui:DisplayName>
	          <mdui:Description xml:lang="en">Identity Provider for UJEP in Usti nad Labem</mdui:Description>
	          <mdui:Description xml:lang="cs">Identity Provider pro UJEP v Ústí nad Labem</mdui:Description>
	          <mdui:InformationURL xml:lang="en">https://www.ujep.cz/en/</mdui:InformationURL>
	          <mdui:InformationURL xml:lang="cs">https://www.ujep.cz</mdui:InformationURL>
	          <mdui:Logo height="40" width="102">https://james.ujep.cz/logo_ujep40.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHTCCAgWgAwIBAgIURnqmAJqtdL1M8jQE255U8iChmp0wDQYJKoZIhvcNAQEL
BQAwGDEWMBQGA1UEAwwNaWRwczMudWplcC5jejAeFw0xNTEyMDUyMTQwNDVaFw0z
NTEyMDUyMTQwNDVaMBgxFjAUBgNVBAMMDWlkcHMzLnVqZXAuY3owggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9RSuNj6jIc6CFr6MNzjrXW45su06/uv2
X5E/9iDvbAuo4iJmyDkyOVMMN47vbu3MwjF6ZFGYlh+HGefLjEm5ft4ou/YF1I7y
CVOkAV1kX8zjdUaupoaUnLiOlrRywEQSFpZJLapTnDKQhOgmCysw5s2AuGtn+F3G
N6aMUCu/mjpblbbaQljIR2zSqpE488G2nuG9q4gCoL/BLmGreJpt90NV3IjsIgp0
cvM5/zbnR58cPeABrFkcpc+lVGRC8y0nrpEroZdCeaSZDOafTdXgAcrd2keoaoAP
jJzP4u8mhaZ4yCpXFz8ZFVGI6l+2Vw1AhBRzoiGFU1wbzH8DQddFAgMBAAGjXzBd
MB0GA1UdDgQWBBSMJAqNQJcNhppfaKs8kREiRph6gjA8BgNVHREENTAzgg1pZHBz
My51amVwLmN6hiJodHRwczovL2lkcC51amVwLmN6L2lkcC9zaGliYm9sZXRoMA0G
CSqGSIb3DQEBCwUAA4IBAQCCvz/XouGuSsuZ15pyKMjBnyvqSmUBtUT/qs18XVBV
58KOmt8bK31It9Thsn9f0+dakqJ74+rIvS3VSsHddRXnOM2VTdo/w87THpmpPcnx
VstwS/VMSaDwl530aJc4aiGdjKlFtHRnd87PjyEQpYVAH4R7rO75HQWWixRMGgr2
naCMNcTQlZem8rSd4bsisvxXy5osyFfkhCCXHswi8WdDmqykWRjoFtfckJBStpVJ
38vIBetNRUXdUAgDCbGvb6qyxRU39+B9GZRAzqQpWoTBcDFmReIkXeUZX2VR6DDT
JSusGYs0TrctbW3VyIJJA7hM77uBWGRfDNRsxvrTVpEY
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHjCCAgagAwIBAgIVAOtj85Z7Iaqj4yN3qkuq4zMFA1zuMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDWlkcHMzLnVqZXAuY3owHhcNMTUxMjA1MjE0MDQ1WhcN
MzUxMjA1MjE0MDQ1WjAYMRYwFAYDVQQDDA1pZHBzMy51amVwLmN6MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ1TMWViKhGRTnaY40cImzmRc82xgVXA
MPW3msod2Y+/fgFf5a+/ClQWGmdSd8qBVsG+O0AXJ6rlVAUCMUpBtTK9M6L1sdtX
PME6GjjErXKRmntcJ7FKhKgr1i0aQRGiQT9XwRHtMuG2y4AQpJ/nJeNKdCblfqaK
/FTZFk0V46BeksS6JtA+KclOMKmx4pl+LQ7g1YnM8rVAaezyZsJb13ZCQ+Xmu6Sp
oaTUP+Pb5kEhaQQwPUccwrDbBJIb5XqnhPQ+IFoza4rirzt3a0ZEh96eoI201Q42
M7PIwvQAoz+aYfklZvvSxi1SXTyWNMs3g8zv891UBBNcJoQWmoLpmQIDAQABo18w
XTAdBgNVHQ4EFgQUuA4mPScEj+8K16EvYMZR+58t4xowPAYDVR0RBDUwM4INaWRw
czMudWplcC5jeoYiaHR0cHM6Ly9pZHAudWplcC5jei9pZHAvc2hpYmJvbGV0aDAN
BgkqhkiG9w0BAQsFAAOCAQEAA6TeSdeTYZO6T4hWwqN5tF0zv28BZp5E+r4RpILe
SRbsdwqe+3JwEWcFhQVz+CPCyH2CxOKJZ2HNO5Zx+9276xaYmDSMSwpR0qRNGYdj
SE1fO2czOD5jvnlgJUWchjEoxAbiUGoRKz+BzL9U8thZgLj4ItbhfJHi04He1CZ2
WtWaXKDnrBb0tTunG0m+sIowrh+A5Vr8F0Nh4U0gLhQQzIon+d9Va2biMtTdD+Em
O9ac50/5ZOYsRZuLWbMgM+0Cmb/hELfwl1kJdVcSlc/XtPXHYEqjnyh0DF0ew9PW
SbZ12F+snMAFc+5AsDrCqg/IufGla3/9M6UqC/C4AO4K2A==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ujep.cz:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ujep.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ujep.cz/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ujep.cz/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ujep.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ujep.cz:8443/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.ujep.cz/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ujep.cz/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ujep.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ujep.cz/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ujep.cz</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDHjCCAgagAwIBAgIVAPYZgY/EnyK2ur6BjEwHE5DmcA9aMA0GCSqGSIb3DQEB
CwUAMBgxFjAUBgNVBAMMDWlkcHMzLnVqZXAuY3owHhcNMTUxMjA1MjE0MDQ1WhcN
MzUxMjA1MjE0MDQ1WjAYMRYwFAYDVQQDDA1pZHBzMy51amVwLmN6MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWvkEHZ6YZf83AwNWqc8CNaTjgVsdkRU
DTrfB4rmgGy0vF0oM8sUnPvvqk6pbBHy6D0bD0C4iz8K1F6LLp4bO/A0xwVmNkiK
P/7V3Q6BxEIFOeys3VypUwSkbljAoGJS9UT5NSiSP/GefCUlcYzbwMTChz58TOFK
MtaL0Dtcr9pPaJDQe7qkX3cS4kUCjqrHD+s/KQqDzntm0ptHKf4R8jOfo4OOWYwX
hRZmdd82XsRW/1ogvnnBgDT5FKY6k1oGWviQ/daMvcr5lyWVJzJCY7HIADTuAWSp
jv8x01xvyuCKlGG1+1w2taBts7yMRvDMjnlVkRAsORbRNHrg3ILUyQIDAQABo18w
XTAdBgNVHQ4EFgQUttS1sr+jHTtLfZL4ajNCUXCV160wPAYDVR0RBDUwM4INaWRw
czMudWplcC5jeoYiaHR0cHM6Ly9pZHAudWplcC5jei9pZHAvc2hpYmJvbGV0aDAN
BgkqhkiG9w0BAQsFAAOCAQEAc2+L/VEEUzlUuRRXdYOBbS5+hUkHmAdDoij60Ub6
P4ql/W5Cm5wnwVQJma29lAs5b7HmAdB/2F2Q2oWs2Ligh8F7qZmHNSdvNLP8FuJK
iHCwGTq4bDA/NL4fdkm4d7i517fKzi4Imb22UN5I67c0POlCdSxQc7h5YZaR5VRI
VQrxggOvg4KihrkEjs0fMtq8DPZMv7VhXq8rKRwZAeKlhuwaVR9xhuSL1fN9YW55
43z5teCbhSILTr5UWMKbx6Nm15kFhKHLP2urpRIRSvYscc6xsiFzmumBoW/flh+h
SBSTkBzY/6c0Gg3YuNInC/H2ajZ0PJpowK0NP9HHVheI2w==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.ujep.cz:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ujep.cz:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> 
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    </AttributeAuthorityDescriptor>
    <Organization>
      <OrganizationName xml:lang="en">Jan Evangelista Purkyne University in Usti nad Labem</OrganizationName>
      <OrganizationName xml:lang="cs">Univerzita Jana Evangelisty Purkyně v Ústí nad Labem</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Jan Evangelista Purkyne University in Usti nad Labem</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="cs">Univerzita Jana Evangelisty Purkyně v Ústí nad Labem</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">http://www.ujep.cz/en/</OrganizationURL>
      <OrganizationURL xml:lang="cs">http://www.ujep.cz/</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
      <GivenName>Pavel</GivenName>
      <SurName>Polacek</SurName>
      <EmailAddress>mailto:pavel.polacek@ujep.cz</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="technical">
      <GivenName>Petr</GivenName>
      <SurName>Voboril</SurName>
      <EmailAddress>mailto:petr.voboril@ujep.cz</EmailAddress>
    </ContactPerson>



</EntityDescriptor>
