<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://shib.ucmerced.edu/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">ucmerced.edu</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">University of California, Merced</mdui:DisplayName>
                <mdui:Logo height="66" width="231" xml:lang="en">https://publicrelations.ucmerced.edu/sites/communications.ucmerced.edu/files/images/branding-guidelines/170824_merced_logo_originalfont.jpg</mdui:Logo>
                <!--<mdui:Description xml:lang="en">Enter a description of your IdP</mdui:Description>-->
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDMDCCAhigAwIBAgIVAOHvnfP0Iuprb3u0445f9FmS61JjMA0GCSqGSIb3DQEB
CwUAMBwxGjAYBgNVBAMMEXNoaWIudWNtZXJjZWQuZWR1MB4XDTE2MDcyNjIzMTEz
NVoXDTM2MDcyNjIzMTEzNVowHDEaMBgGA1UEAwwRc2hpYi51Y21lcmNlZC5lZHUw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtNxasG3PKBCp+JTIgdP6a
hjmwz/vCMToH3HJcrdeHaeqdHacxX/qllb/sYN2DaI2UD7GO4CMNbSZKv+qrZgll
wOWiNXfJ+MKmf1iFv+uV7eTTP9PrPf7xGCRKyCgZd7IB5yPKfzD96Mp3t9zqJm37
s+wWmZ4CFpOgez7zxXGAlBBXoz9xTD5aS3QV03Jw8elxfpyYl+A9JUhXnKd28Mk/
LirxjHmRobudNsALixVkZVH41CsTEMkvOTJPt+wGX2EIF4uESYwa7ArPPOMg4dA2
ntXjy+gWLgIejq+i03/pU8wcSPIBS44siNAAlAGlJDpASmFCK9xlBDqL4T/mTjeD
AgMBAAGjaTBnMB0GA1UdDgQWBBQxqhz7D1uoOQLuDcrvFoT4TKIVlzBGBgNVHREE
PzA9ghFzaGliLnVjbWVyY2VkLmVkdYYoaHR0cHM6Ly9zaGliLnVjbWVyY2VkLmVk
dS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEAR8rez4sWXHXZb2cE
3r3L6b9coMO+35WEUk3NiaLjJd1JvNVGUaLGg3G/IJ9gBEgA9QrmHCeb2tgkI1Uf
3l7FjlafUZKFQMc4eJcUPqO9iAZGMmJum1pv93i4FBZwfny9p7HzFf0X8zIGxb1D
xH3UuFH0GyHi9qezyON6TnpcH+TEVKd++3xMNOQSq6kqEc0MIe6YlDKWlo85KixW
xWCnRRyMSxDJHmqrZSIYbkSdq6tLcQBE/MDIpr4R+i4tk8XRKQmzngYTst9fE2P2
eNCxm0Dr7t+B4sCseAYbUgIhNTl/UAPSO85ozcrixN7QTnOUYM249BkX0WvcaVMd
9+dFKg==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIEjDCCA3SgAwIBAgIJAOupCdJ2sSXbMA0GCSqGSIb3DQEBBQUAMIGKMQswCQYD
VQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEpMCcGA1UEChMgVW5pdmVyc2l0
eSBvZiBDYWxpZm9ybmlhLCBNZXJjZWQxHzAdBgNVBAsTFkluZm9ybWF0aW9uIFRl
Y2hub2xvZ3kxGjAYBgNVBAMTEXNoaWIudWNtZXJjZWQuZWR1MB4XDTEwMDgyMDIx
NTY1MVoXDTM4MDEwNDIxNTY1MVowgYoxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpD
YWxpZm9ybmlhMSkwJwYDVQQKEyBVbml2ZXJzaXR5IG9mIENhbGlmb3JuaWEsIE1l
cmNlZDEfMB0GA1UECxMWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEaMBgGA1UEAxMR
c2hpYi51Y21lcmNlZC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfJkuFl7d2fl92r5hV56rYFJW5bHJGGXjmossXjEfaBVYaxnBC5HpWf2LxKhbm
ihJt5taV0icxGH8I1Pzc/5vHbWRmAWQPGjv+Zqs3/AbgdG9hwfgDrbFFHfZE7l2n
dXhmWrjBu+M9CygbVkzTTMeLQ8HmlGeLJQRAixa85SL4j5ZGNGVK5Gi/NFjyuGL2
TDLBVvmPlwLUM1T66QsCz0ceEm4OT1n1V8y+JQ8YR/bJa6CljdNKKCprFnBkVFhk
Euybjb2/Mf2D+f0cY5TZntVA5cjWwZPy+3D9MKas/s41B5hZjqFv2mEf1jLYYM6k
mv4oKL9kSBgGh9+JH+eES3uJAgMBAAGjgfIwge8wHQYDVR0OBBYEFL0bO2LYqE2L
YMpAErrAY6uTagRFMIG/BgNVHSMEgbcwgbSAFL0bO2LYqE2LYMpAErrAY6uTagRF
oYGQpIGNMIGKMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEpMCcG
A1UEChMgVW5pdmVyc2l0eSBvZiBDYWxpZm9ybmlhLCBNZXJjZWQxHzAdBgNVBAsT
FkluZm9ybWF0aW9uIFRlY2hub2xvZ3kxGjAYBgNVBAMTEXNoaWIudWNtZXJjZWQu
ZWR1ggkA66kJ0naxJdswDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEA
lX6J5Df1EUiDuCwlFyRbmgch54ywFsIvKW/q2VfwH8DQePoQqetsm8frHtnKyBjN
EKPwE63XV79n3mTei6kMFdB/e10SPa5vdOc/kzVvy4a2gBEfH+YPerbAiiAllKfW
V9lkQ7BGzb8d9guY7ZZvy8BJyNqrcfdcqAETBWYLrJx65UYo4hJZyG/X1JUX3WZ8
ff2dPd5C7gboKQO4y76D1uEgwR+XEexamlmpLvREfaZMyN3dbpXCjYmvSayBGUgM
I/HsbnejDezNN+Za/qaXjv+9wsXOGgmF3QQlQsbKXcLHb0eHYqaB604kQ6I+6y5X
kFhAPTrlZdh9/KLkKhq9QA==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.ucmerced.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.ucmerced.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib.ucmerced.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib.ucmerced.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib.ucmerced.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.ucmerced.edu:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://shib.ucmerced.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib.ucmerced.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib.ucmerced.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib.ucmerced.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ucmerced.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDMDCCAhigAwIBAgIVAJKsrdQKS/k0JcTwbpENzZP3fDOWMA0GCSqGSIb3DQEB
CwUAMBwxGjAYBgNVBAMMEXNoaWIudWNtZXJjZWQuZWR1MB4XDTE2MDcyNjIzMTEz
NVoXDTM2MDcyNjIzMTEzNVowHDEaMBgGA1UEAwwRc2hpYi51Y21lcmNlZC5lZHUw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Q0IcsiVSIKUbSAPoT2rB
nQpSbA2eds7aiw8IQz8uZ4KckkGtW7H7Xfr0QdQpv5X7EMDIV7uV4CFO/xD2BmhV
w7c74Vz2is5+aEqWmKUqLkDRs04mT03OIqHnuw9KFnSHhYoKzb9mX5gWvENNqq5v
+v9Kv36Bmo4/Pk1vnct5iRWAmQ0ejJ+3D6RisxtoL8R/h84AQJdYzSNeD9euTGzr
52xX1n3EDh9YKt8z5w+U2gqz6zJfxKkMpvTEBZMUm2IVvPwQV6OoF2x1b117GBwH
i3loU0TSN86XbyOe9S92lZM5ig0MkVJZj2JcREt90gA3YMQxo9J6Wfr5UqSGbmgv
AgMBAAGjaTBnMB0GA1UdDgQWBBRPcGiTaMqmjtN0TBhne0iomp8LYTBGBgNVHREE
PzA9ghFzaGliLnVjbWVyY2VkLmVkdYYoaHR0cHM6Ly9zaGliLnVjbWVyY2VkLmVk
dS9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAQEABVcnpcXSXfu4Qf8O
PoxYCkPsYtYv0YvOK15Gyp5rQUO2Do5bx5tyMVm+8kMsm4MPmmaFKX3KOTqe5Mbo
O40CG3OOt28HMuCs3lzS/hoQF/EE4ySiJIB6xNT1C52UmL6Riyba1pdwV13qy2TU
sZeZ57ifBULWu4pk6u/Hvpb6GeIGdxrUfZKOeI0C58FNkvmhxi9Nh1ZmBl6uAyir
zM615q8vhgvx/SSmyLB9kulUO9B6k3MMIf+lWQcNT3Yj3gKUED3L97hm1EPLSOhC
zYGKXk2jovN47xEBFMMuw/CCCIWz9wUw51h5ay/tzID6Fc/BC1afZkfT0eKWgscY
r/ZSww==
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://shib.ucmerced.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
        <!-- <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.ucmerced.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery"/> -->
        <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above -->

    </AttributeAuthorityDescriptor>

</EntityDescriptor>
