<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor 
  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
  xmlns:ds="http://www.w3.org/2000/09/xmldsig#" 
  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
  xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
  xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" 
  entityID="https://shibidp.bates.edu/idp/shibboleth">

  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

    <Extensions>

      <shibmd:Scope regexp="false">bates.edu</shibmd:Scope>

      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="en">Bates College IDP</mdui:DisplayName>
        <mdui:Description xml:lang="en">Bates College Identify Provider</mdui:Description>
        <mdui:InformationURL xml:lang="en">http://www.bates.edu/ils/login-service</mdui:InformationURL>
        <mdui:PrivacyStatementURL xml:lang="en">http://www.bates.edu/ils/policies</mdui:PrivacyStatementURL>
        <mdui:Logo xml:lang="en" width="515" height="150">https://abacus.bates.edu/1855/wordmarks/bates-wordmark-201-515x150.jpg</mdui:Logo>
      </mdui:UIInfo>

    </Extensions>

    <!-- First signing certificate is BackChannel, the Second is FrontChannel-->
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
  MIIDMDCCAhigAwIBAgIVAKGAXxu38L+eKSKWrrH33axOPKdYMA0GCSqGSIb3DQEB
  CwUAMBwxGjAYBgNVBAMMEXNoaWJpZHAuYmF0ZXMuZWR1MB4XDTE2MDExMjE2MDQw
  MVoXDTM2MDExMjE2MDQwMVowHDEaMBgGA1UEAwwRc2hpYmlkcC5iYXRlcy5lZHUw
  ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaXdd56IrQllpc4KO3WvQA
  pwezqZCN4NOwjGNtTkLn1APkpO61Ndx7Txo5qtwDCPezTtA6SSaseIaTABXjotx3
  0s0L6KIc6ymzoZqiwRMrXOOJA+KAG0mMI+rJh+h9qbLfwCNR+f2hwas8U3UjP0Fc
  6B2GlpyRuVzsHtNYCXIg6vvYF+qRURvi7ql48oMwD3xI4fsU2Q2lkYR8IoxkYt9c
  paUC9Ipe5xD43Za8C8BK8GsLlYu4XMA1ozvEof4TXyWT75gzjfpeX3BaZuFSrJ2T
  wdjhA1bADGMEGaD6PQRHuNbl93lwX+LzZkz593Eio5VealVEjxixlYbCLo8JVqRH
  AgMBAAGjaTBnMB0GA1UdDgQWBBS5nd7tdfc7eX+XOAu86LzmBbqzCjBGBgNVHREE
  PzA9ghFzaGliaWRwLmJhdGVzLmVkdYYoaHR0cHM6Ly9zaGliaWRwLmJhdGVzLmVk
  dS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAKzb+PGvMIbouHW8K
  eJ1FggcXjaR+3SZHzGvFF1cZovSXIxzUERL3er4wod4JMJ6EJS/nroJnjfXKPVD4
  v5gRmoy38hLaljC06onIsIlp1THvniB9D3XO+LPtEQ98n1tD417vpbdxQa/e5TzN
  Fxr0SjgsJmP/UEEch+adCVgH8VuXzHd5fm7pd9EejHduZOjLJRFK7PuEXXO8pNY0
  SR9DTVrJS73o4TB1o7FcmAqMOMJZ7U7kjOavT6FwuNHFhYe1vPvmWIT1FuzBg7VH
  bkXyoT+iEpYkQMfNnXofrTRH3L/5N1FnKvFvbKiazptlZefEYwnUEutXYylsaE1W
  iLlCNA==
        </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>

    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
  MIIDLzCCAhegAwIBAgIUL/x4yeKXw8Qo1fj6nOo++CaAWnEwDQYJKoZIhvcNAQEF
  BQAwHDEaMBgGA1UEAxMRc2hpYmlkcC5iYXRlcy5lZHUwHhcNMTMwODMwMTQwOTMx
  WhcNMzMwODMwMTQwOTMxWjAcMRowGAYDVQQDExFzaGliaWRwLmJhdGVzLmVkdTCC
  ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL8gHC7Wjjzyp5xNqVGvh+YZ
  /Yc0j4Srp/vh6iNoDKgyxm8ttcUoBWmtauchw0EXs6uCihZpTlms+kVp+C8sVZC+
  6CBrfnwXb3cL251AIhsOex3eA94+1ugxs0ot8g9jSjFXpLu3FUcAyiIxYlODaVcy
  3wdfsMPVr0tx9eGN9jwuvJHE3wFn2IfmJb6cb7m4QlpDO+9jpjYJyya3a8NKrQwQ
  75EBq07muPbHPIJWDF+STOnQWdyxj5ly4XIg+S11P77saEz9vQbVB/Z5FX/lD7/J
  ihxbKld7OurrXF/NjBwLXWkOnC3Np0lzAvYtU4JUqgxLpOpLyCwmbuMJRJNlzaMC
  AwEAAaNpMGcwRgYDVR0RBD8wPYIRc2hpYmlkcC5iYXRlcy5lZHWGKGh0dHBzOi8v
  c2hpYmlkcC5iYXRlcy5lZHUvaWRwL3NoaWJib2xldGgwHQYDVR0OBBYEFF6udEhN
  MEepB0wrvrtfT8Nkm4ytMA0GCSqGSIb3DQEBBQUAA4IBAQA2KfxSHhsyuzK62mna
  qnG7ctE70OZRBQiia9QE2aadgolB+CEr43dZb2YC4+EpbfBCODW5QNixLod3dYlx
  sG3R9y7ilVz+0dKFje+O31JHP+HKTbVhurvb/A+ksuUTyngczT/TxkwEz3WLXUK6
  wNtnuj7nHea0zQFF4RWcJ2UrN0I+RT6czQwSoTnrDlpGUPhYbd7fDUgj4XTC85Tk
  NMGcNLnWPXMs/8cJh+BhVcMR+ATeUYIT6ZZR5XVsjxtSVj/dYlugatENLwu4Zxye
  P9qcR8MfjVr4G5DgNUhpRXkHN5Oj8WhYwa2rgzTR+QqGnIKHZNVyna7BTHVIDsgV
  Iq67
          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>

    <KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
  MIIDLzCCAhegAwIBAgIUbOvjcyPAsPDzbw1lhZu2COjGhPswDQYJKoZIhvcNAQEL
  BQAwHDEaMBgGA1UEAwwRc2hpYmlkcC5iYXRlcy5lZHUwHhcNMTYwMTEyMTYwNDAx
  WhcNMzYwMTEyMTYwNDAxWjAcMRowGAYDVQQDDBFzaGliaWRwLmJhdGVzLmVkdTCC
  ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJlV8ULJc9mTqWULteEEHMK5
  FDvOB3detAmFgpUUvwUzCjLrGTylamv+JgGTg1gTjIVu4RemcIX8Pjj4sMxaKiHm
  cn5G9HyMLYpt0Y7sYiUF1JTEtE8cWug0r87sGuMZqmP6klZzE8hiO3um8YHCk98c
  QIly0OBhw5ZoGKpeiaDP1DdzXUwrBp1XFAlIujYITcW3q3fws7r+pXsS8SQqH78m
  UDrdPujrLC3fHz5hbUwoIkPyWYrea32P/vKp1FHvnO9+d4dGyvEF7rQFQO4LWiGv
  y9/VeJc5aN7bx//z2TsqxBZXe+ZIwUS84rxFY6CbZVDGZF1bQzPu0hvGCbON+jsC
  AwEAAaNpMGcwHQYDVR0OBBYEFNkXBPGyk1661bhvkpMQl5g+Dec3MEYGA1UdEQQ/
  MD2CEXNoaWJpZHAuYmF0ZXMuZWR1hihodHRwczovL3NoaWJpZHAuYmF0ZXMuZWR1
  L2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQB4yDXWNw3/+J3pyA3I
  emKaXU5UxpEPBcn8tgTvTzXKnG7yTfMiyTcObDQoSe4TY1mKWbVMysdgQdLAjqOY
  k/ZRh+gBg3C3M6XNl/c/5S78Rn65VHbe5DbyjUzvKLyvIIuOeRftyWaUr6/71pTo
  tynqBQnhn3580vK/nSP0PKIvto71hpGAJjk5DZxAiBWAcvwAg/KKYY7OuoVWXihN
  0juzYxdAcFXEJFilHTshhyQXSC5FmN0JkZFPqZOhUqN8mfPjCUk/R8tL4fEs43Jm
  yz9b1G2cmK8NsdNSv5B25urkdJhMtEem+iuEh6wvo2BsALm4rNfk6dMQN2DadKRL
  /E3b
            </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>

    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibidp.bates.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shibidp.bates.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shibidp.bates.edu/idp/profile/SAML2/Redirect/SLO"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shibidp.bates.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shibidp.bates.edu/idp/profile/SAML2/POST/SLO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://shibidp.bates.edu/idp/profile/SAML2/POST/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://shibidp.bates.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://shibidp.bates.edu/idp/profile/SAML2/Redirect/SSO"/>

  </IDPSSODescriptor>
</EntityDescriptor>
