<?xml version="1.0" encoding="UTF-8"?>
<!--
     This is example metadata only. Do *NOT* supply it as is without review,
     and do *NOT* provide it in real time to your partners.

     This metadata is not dynamic - it will not change as your configuration changes.
-->
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.shef.ac.uk/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">sheffield.ac.uk</shibmd:Scope>
<!--
    Fill in the details for your IdP here 

            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">A Name for the IdP at idp.shef.ac.uk</mdui:DisplayName>
                <mdui:Description xml:lang="en">Enter a description of your IdP at idp.shef.ac.uk</mdui:Description>
                <mdui:Logo height="80" width="80">https://idp.shef.ac.uk/Path/To/Logo.png</mdui:Logo>
            </mdui:UIInfo>
-->
        </Extensions>


        <!-- v2 cert -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
                            MIIFCjCCA/KgAwIBAgIUTWCw0LmBsiIH8aCwZ/lqP++FKzYwDQYJKoZIhvcNAQEL
                            BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
                            BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTE2MDQxNDA4MzEy
                            NFoXDTE5MDQxNDA4MzEyMlowgYUxCzAJBgNVBAYTAkdCMRgwFgYDVQQIEw9Tb3V0
                            aCBZb3Jrc2hpcmUxEjAQBgNVBAcTCVNIRUZGSUVMRDEgMB4GA1UEChMXVW5pdmVy
                            c2l0eSBvZiBTaGVmZmllbGQxDTALBgNVBAsTBENpQ1MxFzAVBgNVBAMTDmlkcC5z
                            aGVmLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb100Czt
                            pefaZRBV3yPwnnKabjTX1lkhDuDxG73wDxl9LHjOKVFNGClbS77D/dd9jMfIpp64
                            Z0JPMSo8VZnwXD8kBwWUwpR/ldR968oGGJw0AAht+f1lrIb636bg0njnsuDFvV6r
                            /9QAhz2RIRbGcJ2lv2Q6LT3pzs2PfzdFEXUq/4aBSAf5pgqhP+qWbvqS1o3kUUFO
                            bK6Nlxz0GPhmqBVd4KhmxkdQdZzlnLa6sZhjxJ9jgH+P0d28JAzJUDQJ+73fA/Ai
                            JPc/3jbaHa2pvu1xYZwDxTMNBDmJN7p/kI3azZHvVWBgC94KjfLkXT6SpdRPOJ/o
                            74mQiXPFLt+KHQIDAQABo4IBpzCCAaMwcwYIKwYBBQUHAQEEZzBlMCoGCCsGAQUF
                            BzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wNwYIKwYBBQUHMAKG
                            K2h0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZzc2xnMi5jcnQwLgYD
                            VR0RBCcwJYIOaWRwLnNoZWYuYWMudWuCE2lkcC5zaGVmZmllbGQuYWMudWswUQYD
                            VR0gBEowSDBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3
                            dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAw
                            HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFJEZYq1b
                            F6cw+/DeOSWxvYy5uFEnMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVv
                            dmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3JsMB0GA1UdDgQWBBQWQhILCU6xgRJx
                            V+C6Ej80mSR2STANBgkqhkiG9w0BAQsFAAOCAQEAXz/l6yuM+orHsuaNuJ2cu+0h
                            j909Os3fEOxi2F+eTghyEXl7bOYAnPg/b+WQRyfh2OqHqA5SN2esTyrarzcIFMbC
                            7EUhloTvgEV6uk1FmyNIdsf3TLOAwOaPoboJEa+Inpbqmohunaz/J16fDpmU25ow
                            BDe59GBNR4k6fDSBOqzVOq92ykTmzqEKbkvrdYAfZUzzjslhQ9d+gOn4UZSDIRlr
                            p0Uv8uSz9S1+hpGnKzutBJ4d5h8AbjoKjYsUFQed5nI0KQ3ea6v34JvyrZVaTMxm
                            ULmwAyJq1ECXaA9gz5jfeNcUUec5SHel2G9VpFacSQVv8RrNh/yeUpeIye+3Fg==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <!-- v3 certs -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
                            MIIDJDCCAgygAwIBAgIVAIdPLvsqnwOgltlYxJUTpuS+iEkmMA0GCSqGSIb3DQEB
                            CwUAMBkxFzAVBgNVBAMMDmlkcC5zaGVmLmFjLnVrMB4XDTE3MDExNjExMzg1MFoX
                            DTM3MDExNjExMzg1MFowGTEXMBUGA1UEAwwOaWRwLnNoZWYuYWMudWswggEiMA0G
                            CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaW1bVZgHiu6vwRFFCPpttDmdCw+A
                            o6krWPk14vkC/3NK6/AW63OVXsFX43eq+muz5wm9L1kDo50skX90+sAre0xo6ocQ
                            U7VFPMGk5hIPECJ+81mX6Q3PYHgAIRT/Gv+2DAXa+ugo1mZnmExswORyg4D2d2AU
                            BH5N3bfD77WjlQLseR1OXPstACBhH+EtQARWI85Mpy1XnBWmqeWH9IP5y8kiC0TK
                            6QzrhiplcszM+weqNOHtLKXEwoJeeK9SEcuryWmXFb/16uQ+/ojtucFc4MNifP+4
                            zAAi7KBoSalUj/H0FrSI/QgPKw901a/mOcOzOxvPJSX16n9MyoB8j+RrAgMBAAGj
                            YzBhMB0GA1UdDgQWBBShiyMzNJt1k/zaxAktbSkRCDohCzBABgNVHREEOTA3gg5p
                            ZHAuc2hlZi5hYy51a4YlaHR0cHM6Ly9pZHAuc2hlZi5hYy51ay9pZHAvc2hpYmJv
                            bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAJvrSkFYU+53DGmv98gzoQzEW+DrVHte0
                            DWTgScke1/EIM6hy4aJKLAeEAjjVUdMC7PjkR98AeFg80MRHHH06JVHEmpIzA4Dn
                            a/nT3pcvbGlqsyIvxf7RWkm4hybm+9dN29TmGCmDh9UYFziNt/UqYwzh/n3q+fzL
                            4ccFudcoPkmgpoyyBFUZWPOHvIKGKB6gvrxPnKD/6RleiFPS/R28kuIQ7rh5fpLg
                            0fKQd+SKAUcsq3V9HrYSaxGMjo1Xs3wdVaiQyRi0cHnTzx6rKPk1cv59w4aUjP7I
                            GpBlOImtjvC1jYZJTPJl3pUEuW82KMKNWfXVF0qnADIvbQdW+DX8Fw==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
         <KeyDescriptor use="signing"><!-- actually the back channel cert -->
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
                            MIIDJDCCAgygAwIBAgIVANCWO16fV4JbzR9/xESQadETVdS0MA0GCSqGSIb3DQEB
                            CwUAMBkxFzAVBgNVBAMMDmlkcC5zaGVmLmFjLnVrMB4XDTE3MDExNjExMzg1MVoX
                            DTM3MDExNjExMzg1MVowGTEXMBUGA1UEAwwOaWRwLnNoZWYuYWMudWswggEiMA0G
                            CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdU8eOyPuZf5ERh52r4sfWyUhNZ13G
                            zz5KaF8JlrxqjA1z2RFpbF/L7k9eeepcyWrEkfvPdhrFLsleHxUW9Z8Nj/64VIY9
                            yMnTbp/01yOWOLVLrvpNRk3qqV/wuu5RNURFOcEqnYuaDlqrXPnxKOsvrdiUK4dT
                            I3g8daW6oDhk8u7AruzmY68f5HDhzMIKZ362D6bt5Lq34vsX1gKG8g8V6+NZDW+/
                            bsjlevnOu05UYprJejONkZecPND7GHxiYcLUoeGduxAuzMobpjo1urnD+93oaBkh
                            1pGEEAQxtFr4vUWJqjq71vtRiuNhTWpNd0OUhhxhAUawrOlWPM2yFJCxAgMBAAGj
                            YzBhMB0GA1UdDgQWBBRyq7dzMnbh5XHGHg/wCYqniBOxNjBABgNVHREEOTA3gg5p
                            ZHAuc2hlZi5hYy51a4YlaHR0cHM6Ly9pZHAuc2hlZi5hYy51ay9pZHAvc2hpYmJv
                            bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEADSKN2kn3vUI5bJjzpI0qu5rF3IsyOClI
                            O2+EqC/4QzgpI4kCcXNCZs6egb2HV6xpYLyCr4BL0tikiLyrnfTk9P8ToGOftWox
                            A20joFyXzq9ZDp2RYXq6mlAG0NOcIH60Y2mcIeKQOVV0sAo03ojBFq3gPioSh0gB
                            psro/NUI8UDmVNxURxpoNENB1NVEUWe7iVmZfSrugSnt7C/MJEs8pk3W8uUB20r7
                            ecKIqXdvgWv3g39IiPPXkZgd4rPrt9nAuE4QPlwzeovmQlsurynnSoKtrHhwGZiJ
                            iJOSC0L02cECwVLZu+0Qze/Tc0WNkMs3HF2smwRQrN7gm2AFbX4UOg==
                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
            </KeyDescriptor>
            <KeyDescriptor use="encryption">
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
                            MIIDJDCCAgygAwIBAgIVAP4UDBS9iNuAhDwm/mhTi175FK5YMA0GCSqGSIb3DQEB
                            CwUAMBkxFzAVBgNVBAMMDmlkcC5zaGVmLmFjLnVrMB4XDTE3MDExNjExMzg1MFoX
                            DTM3MDExNjExMzg1MFowGTEXMBUGA1UEAwwOaWRwLnNoZWYuYWMudWswggEiMA0G
                            CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB//XE9HBtu0LhQ3U/U82pUOpnNQuT
                            KyNl2SiJGlYgehkxylj47V/qNi5OGQPN9AuLpyHb7C9WgNHu8ioZuOjXIZRqimv/
                            Gxw1CAdPW+1AMJU131Ds3CBpXLSIk7Ac0s6UPBdiaiCL/2EKaDq9F9z5MLZu71cA
                            Ol/dGPcCrdgNixWh7Dgh69iUYGnjkQzJKoRd0YWN+yGf8cFbnjlWeTMLqqwOnqKJ
                            L/dY7PXIv0RURf9S0wXjCyt4n7P1qSZj3MuC2RPJoN7HxYNY8Ue4rn5GNi2KNVdS
                            gVGaFintxa955mjrcc/CUly3VQPetrS9KaZh28HaDgxYIF2sKX+rUXYBAgMBAAGj
                            YzBhMB0GA1UdDgQWBBRAKpcJgnJ5v45/XSo+pK2a8PKD9TBABgNVHREEOTA3gg5p
                            ZHAuc2hlZi5hYy51a4YlaHR0cHM6Ly9pZHAuc2hlZi5hYy51ay9pZHAvc2hpYmJv
                            bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEADCuZb67wTIpOsZxedsaafgCo1Da0QqoM
                            ervcYC7IPZK/oFkKGB3W63lg0dYuCqqassUSFMiWKtX+6MD6jpCiS8j5UHGinx+f
                            mUgAlFRI7NNzZmcu22Txq0DuGaB8alysDuxTKUwEemVMzNnZbk7Z0Bm1huD9PnUN
                            +YmANg5KkHiEs3jJ3tUfIferaXturrbvplGtqjOXzlZ2L/9d27rIEOh7AeMNLNu+
                            v3a+Esy0HtogcHTAoNm5hCOVXvapm84bvV4SaEawsNVN9IQZ0IIGPZDQB41SAX2c
                            197KuQuuVuZkEGH5VJxLXI4UYaU1ldHNOLUoXHRhZjOEd/YlzEHdUw==
                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
            </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.shef.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.shef.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.shef.ac.uk/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.shef.ac.uk/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.shef.ac.uk/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.shef.ac.uk:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.shef.ac.uk/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.shef.ac.uk/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.shef.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.shef.ac.uk/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">sheffield.ac.uk</shibmd:Scope>
        </Extensions>

        <!-- v2 cert -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                        MIIFCjCCA/KgAwIBAgIUTWCw0LmBsiIH8aCwZ/lqP++FKzYwDQYJKoZIhvcNAQEL
                        BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
                        BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTE2MDQxNDA4MzEy
                        NFoXDTE5MDQxNDA4MzEyMlowgYUxCzAJBgNVBAYTAkdCMRgwFgYDVQQIEw9Tb3V0
                        aCBZb3Jrc2hpcmUxEjAQBgNVBAcTCVNIRUZGSUVMRDEgMB4GA1UEChMXVW5pdmVy
                        c2l0eSBvZiBTaGVmZmllbGQxDTALBgNVBAsTBENpQ1MxFzAVBgNVBAMTDmlkcC5z
                        aGVmLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb100Czt
                        pefaZRBV3yPwnnKabjTX1lkhDuDxG73wDxl9LHjOKVFNGClbS77D/dd9jMfIpp64
                        Z0JPMSo8VZnwXD8kBwWUwpR/ldR968oGGJw0AAht+f1lrIb636bg0njnsuDFvV6r
                        /9QAhz2RIRbGcJ2lv2Q6LT3pzs2PfzdFEXUq/4aBSAf5pgqhP+qWbvqS1o3kUUFO
                        bK6Nlxz0GPhmqBVd4KhmxkdQdZzlnLa6sZhjxJ9jgH+P0d28JAzJUDQJ+73fA/Ai
                        JPc/3jbaHa2pvu1xYZwDxTMNBDmJN7p/kI3azZHvVWBgC94KjfLkXT6SpdRPOJ/o
                        74mQiXPFLt+KHQIDAQABo4IBpzCCAaMwcwYIKwYBBQUHAQEEZzBlMCoGCCsGAQUF
                        BzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wNwYIKwYBBQUHMAKG
                        K2h0dHA6Ly90cnVzdC5xdW92YWRpc2dsb2JhbC5jb20vcXZzc2xnMi5jcnQwLgYD
                        VR0RBCcwJYIOaWRwLnNoZWYuYWMudWuCE2lkcC5zaGVmZmllbGQuYWMudWswUQYD
                        VR0gBEowSDBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3
                        dy5xdW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAw
                        HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFJEZYq1b
                        F6cw+/DeOSWxvYy5uFEnMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVv
                        dmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3JsMB0GA1UdDgQWBBQWQhILCU6xgRJx
                        V+C6Ej80mSR2STANBgkqhkiG9w0BAQsFAAOCAQEAXz/l6yuM+orHsuaNuJ2cu+0h
                        j909Os3fEOxi2F+eTghyEXl7bOYAnPg/b+WQRyfh2OqHqA5SN2esTyrarzcIFMbC
                        7EUhloTvgEV6uk1FmyNIdsf3TLOAwOaPoboJEa+Inpbqmohunaz/J16fDpmU25ow
                        BDe59GBNR4k6fDSBOqzVOq92ykTmzqEKbkvrdYAfZUzzjslhQ9d+gOn4UZSDIRlr
                        p0Uv8uSz9S1+hpGnKzutBJ4d5h8AbjoKjYsUFQed5nI0KQ3ea6v34JvyrZVaTMxm
                        ULmwAyJq1ECXaA9gz5jfeNcUUec5SHel2G9VpFacSQVv8RrNh/yeUpeIye+3Fg==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <!-- v3 certs -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                        MIIDJDCCAgygAwIBAgIVAIdPLvsqnwOgltlYxJUTpuS+iEkmMA0GCSqGSIb3DQEB
                        CwUAMBkxFzAVBgNVBAMMDmlkcC5zaGVmLmFjLnVrMB4XDTE3MDExNjExMzg1MFoX
                        DTM3MDExNjExMzg1MFowGTEXMBUGA1UEAwwOaWRwLnNoZWYuYWMudWswggEiMA0G
                        CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgaW1bVZgHiu6vwRFFCPpttDmdCw+A
                        o6krWPk14vkC/3NK6/AW63OVXsFX43eq+muz5wm9L1kDo50skX90+sAre0xo6ocQ
                        U7VFPMGk5hIPECJ+81mX6Q3PYHgAIRT/Gv+2DAXa+ugo1mZnmExswORyg4D2d2AU
                        BH5N3bfD77WjlQLseR1OXPstACBhH+EtQARWI85Mpy1XnBWmqeWH9IP5y8kiC0TK
                        6QzrhiplcszM+weqNOHtLKXEwoJeeK9SEcuryWmXFb/16uQ+/ojtucFc4MNifP+4
                        zAAi7KBoSalUj/H0FrSI/QgPKw901a/mOcOzOxvPJSX16n9MyoB8j+RrAgMBAAGj
                        YzBhMB0GA1UdDgQWBBShiyMzNJt1k/zaxAktbSkRCDohCzBABgNVHREEOTA3gg5p
                        ZHAuc2hlZi5hYy51a4YlaHR0cHM6Ly9pZHAuc2hlZi5hYy51ay9pZHAvc2hpYmJv
                        bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAJvrSkFYU+53DGmv98gzoQzEW+DrVHte0
                        DWTgScke1/EIM6hy4aJKLAeEAjjVUdMC7PjkR98AeFg80MRHHH06JVHEmpIzA4Dn
                        a/nT3pcvbGlqsyIvxf7RWkm4hybm+9dN29TmGCmDh9UYFziNt/UqYwzh/n3q+fzL
                        4ccFudcoPkmgpoyyBFUZWPOHvIKGKB6gvrxPnKD/6RleiFPS/R28kuIQ7rh5fpLg
                        0fKQd+SKAUcsq3V9HrYSaxGMjo1Xs3wdVaiQyRi0cHnTzx6rKPk1cv59w4aUjP7I
                        GpBlOImtjvC1jYZJTPJl3pUEuW82KMKNWfXVF0qnADIvbQdW+DX8Fw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="signing"><!-- actually the back channel cert -->
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                        MIIDJDCCAgygAwIBAgIVANCWO16fV4JbzR9/xESQadETVdS0MA0GCSqGSIb3DQEB
                        CwUAMBkxFzAVBgNVBAMMDmlkcC5zaGVmLmFjLnVrMB4XDTE3MDExNjExMzg1MVoX
                        DTM3MDExNjExMzg1MVowGTEXMBUGA1UEAwwOaWRwLnNoZWYuYWMudWswggEiMA0G
                        CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdU8eOyPuZf5ERh52r4sfWyUhNZ13G
                        zz5KaF8JlrxqjA1z2RFpbF/L7k9eeepcyWrEkfvPdhrFLsleHxUW9Z8Nj/64VIY9
                        yMnTbp/01yOWOLVLrvpNRk3qqV/wuu5RNURFOcEqnYuaDlqrXPnxKOsvrdiUK4dT
                        I3g8daW6oDhk8u7AruzmY68f5HDhzMIKZ362D6bt5Lq34vsX1gKG8g8V6+NZDW+/
                        bsjlevnOu05UYprJejONkZecPND7GHxiYcLUoeGduxAuzMobpjo1urnD+93oaBkh
                        1pGEEAQxtFr4vUWJqjq71vtRiuNhTWpNd0OUhhxhAUawrOlWPM2yFJCxAgMBAAGj
                        YzBhMB0GA1UdDgQWBBRyq7dzMnbh5XHGHg/wCYqniBOxNjBABgNVHREEOTA3gg5p
                        ZHAuc2hlZi5hYy51a4YlaHR0cHM6Ly9pZHAuc2hlZi5hYy51ay9pZHAvc2hpYmJv
                        bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEADSKN2kn3vUI5bJjzpI0qu5rF3IsyOClI
                        O2+EqC/4QzgpI4kCcXNCZs6egb2HV6xpYLyCr4BL0tikiLyrnfTk9P8ToGOftWox
                        A20joFyXzq9ZDp2RYXq6mlAG0NOcIH60Y2mcIeKQOVV0sAo03ojBFq3gPioSh0gB
                        psro/NUI8UDmVNxURxpoNENB1NVEUWe7iVmZfSrugSnt7C/MJEs8pk3W8uUB20r7
                        ecKIqXdvgWv3g39IiPPXkZgd4rPrt9nAuE4QPlwzeovmQlsurynnSoKtrHhwGZiJ
                        iJOSC0L02cECwVLZu+0Qze/Tc0WNkMs3HF2smwRQrN7gm2AFbX4UOg==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                        MIIDJDCCAgygAwIBAgIVAP4UDBS9iNuAhDwm/mhTi175FK5YMA0GCSqGSIb3DQEB
                        CwUAMBkxFzAVBgNVBAMMDmlkcC5zaGVmLmFjLnVrMB4XDTE3MDExNjExMzg1MFoX
                        DTM3MDExNjExMzg1MFowGTEXMBUGA1UEAwwOaWRwLnNoZWYuYWMudWswggEiMA0G
                        CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB//XE9HBtu0LhQ3U/U82pUOpnNQuT
                        KyNl2SiJGlYgehkxylj47V/qNi5OGQPN9AuLpyHb7C9WgNHu8ioZuOjXIZRqimv/
                        Gxw1CAdPW+1AMJU131Ds3CBpXLSIk7Ac0s6UPBdiaiCL/2EKaDq9F9z5MLZu71cA
                        Ol/dGPcCrdgNixWh7Dgh69iUYGnjkQzJKoRd0YWN+yGf8cFbnjlWeTMLqqwOnqKJ
                        L/dY7PXIv0RURf9S0wXjCyt4n7P1qSZj3MuC2RPJoN7HxYNY8Ue4rn5GNi2KNVdS
                        gVGaFintxa955mjrcc/CUly3VQPetrS9KaZh28HaDgxYIF2sKX+rUXYBAgMBAAGj
                        YzBhMB0GA1UdDgQWBBRAKpcJgnJ5v45/XSo+pK2a8PKD9TBABgNVHREEOTA3gg5p
                        ZHAuc2hlZi5hYy51a4YlaHR0cHM6Ly9pZHAuc2hlZi5hYy51ay9pZHAvc2hpYmJv
                        bGV0aDANBgkqhkiG9w0BAQsFAAOCAQEADCuZb67wTIpOsZxedsaafgCo1Da0QqoM
                        ervcYC7IPZK/oFkKGB3W63lg0dYuCqqassUSFMiWKtX+6MD6jpCiS8j5UHGinx+f
                        mUgAlFRI7NNzZmcu22Txq0DuGaB8alysDuxTKUwEemVMzNnZbk7Z0Bm1huD9PnUN
                        +YmANg5KkHiEs3jJ3tUfIferaXturrbvplGtqjOXzlZ2L/9d27rIEOh7AeMNLNu+
                        v3a+Esy0HtogcHTAoNm5hCOVXvapm84bvV4SaEawsNVN9IQZ0IIGPZDQB41SAX2c
                        197KuQuuVuZkEGH5VJxLXI4UYaU1ldHNOLUoXHRhZjOEd/YlzEHdUw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.shef.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.shef.ac.uk:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
