<?xml version='1.0' encoding='UTF-8'?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_8798deb1ecbe5527be0c8b832720b0d46257c02c" entityID="https://mpass-proxy.csc.fi/shibboleth">

  <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
  </md:Extensions>

  <md:SPSSODescriptor AuthnRequestsSigned="1" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://mpass-proxy.csc.fi/Shibboleth.sso/Login"/>
      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://mpass-proxy.csc.fi/Shibboleth.sso/Login" index="1"/>
    </md:Extensions>
    <md:KeyDescriptor>
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:KeyName>mpass-proxy.csc.fi</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>O=CSC - Tieteen tietotekniikan keskus Oy,CN=mpass-proxy.csc.fi,L=Espoo,ST=Uusimaa,C=FI</ds:X509SubjectName>
          <ds:X509Certificate>MIIF2zCCA8OgAwIBAgIUWMD33H980RViYjwYMdXgApF/6dkwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:KeyName>mpass-proxy.csc.fi</ds:KeyName>
        <ds:X509Data>
          <ds:X509SubjectName>O=CSC - Tieteen tietotekniikan keskus Oy,CN=mpass-proxy.csc.fi,L=Espoo,ST=Uusimaa,C=FI</ds:X509SubjectName>
          <ds:X509Certificate>MIIF2zCCA8OgAwIBAgIUWMD33H980RViYjwYMdXgApF/6dkwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://mpass-proxy.csc.fi/Shibboleth.sso/SLO/Redirect"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mpass-proxy.csc.fi/Shibboleth.sso/SLO/POST"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://mpass-proxy.csc.fi/Shibboleth.sso/SAML2/POST" index="1"/>
  </md:SPSSODescriptor>

</md:EntityDescriptor>
