<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
                  xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                  xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
                  xmlns:xml="http://www.w3.org/XML/1998/namespace"
                  entityID="https://idp.maine.edu/idp/shibboleth">

    <IDPSSODescriptor errorURL="https://idp.maine.edu/identity/feedback.htm" protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
		<shibmd:Scope regexp="false">maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">um.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">uma.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">umf.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">umfk.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">umm.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">umpi.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">usm.maine.edu</shibmd:Scope>
      		<shibmd:Scope regexp="false">ums.maine.edu</shibmd:Scope>
	</Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <ArtifactResolutionService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.maine.edu/idp/profile/SAML2/SOAP/ArtifactResolution"/>
	      <ArtifactResolutionService index="2" Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.maine.edu:9443/idp/profile/SAML1/SOAP/ArtifactResolution"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.maine.edu/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.maine.edu/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.maine.edu/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.maine.edu/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.maine.edu/idp/profile/Shibboleth/SSO"/>
	      <SingleSignOnService Binding="urn:mace:shibboleth:2.0:profiles:AuthnRequest" Location="https://idp.maine.edu/idp/profile/SAML2/Unsolicited/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.maine.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.maine.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.maine.edu/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor>
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
                    
MIIDAzCCAeugAwIBAgIJAJAfuOLAnT3yMA0GCSqGSIb3DQEBCwUAMBgxFjAUBgNV
BAMMDWlkcC5tYWluZS5lZHUwHhcNMTkwNjI3MjAwODEzWhcNMjkwNjI0MjAwODEz
WjAYMRYwFAYDVQQDDA1pZHAubWFpbmUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4P6UNvYsgPe6b7z1ovwvB7nEPKQmQaJI+VcmUaX0KG3xcQ9N
g9/7PPP3vdY0BmB3CbO/JY6OmTIotZDFA2OCb7Bdx2wJIjITP0HiFCWJpA/yv8QX
zzq1ku3oJCkuAiwVSJ6UWGv1KkNuYopl6+8eYCyu+iW0rmYM9WCCnoMZ3VsGnxgf
HmYJhqZdOuZoNkb+PLRipQhIX9TqrVr/IJ4V4az41hEmoYpMEHJxqxNeZ2wEZ8yR
S5nyscrUIZ4fog0LBlViEj0WH1qb/sscvo8FZJvBOC36IU4sB4zTqJOhjASfeRCM
TkRmfMm4BoBkc9283+ecG9m2aNDac7oULCnP6QIDAQABo1AwTjAdBgNVHQ4EFgQU
7Lw+HpnQCwImDzJjdZ6Tp8fxpwIwHwYDVR0jBBgwFoAU7Lw+HpnQCwImDzJjdZ6T
p8fxpwIwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAgvRAs3Wy4a+9
Hs4sjd5+oSuD7rbXYG4Egr2B+EiVDFAVAOry5XykSBf18J6YqKXEuoh/63g5sQw5
hjjTggb97q6I+RW4H83YpFzWelalASA8xOYO7oUDaU2+aZBX4byr28+u+RoXHtF6
l6rFVtgqpghp6+iecZQbrH7iJzkIfPEzLaWQP7W+2GOvgIU/1/dXilETSxQpT4BC
QhlCKOw17XNVK5ayQKk+dty3Jp2PL4RgHR3E0MSnq4SP8X/KZuWYb4wQvtIrC47B
6Ixk5B6kbaySMtiHUQVN9S1k8ECdyPBXi1Jupczd4rLKolwKE3OdHMsGRwOpgcXT
nZ1x9SpDKg==

                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.maine.edu/idp/profile/Authn/SAML2/POST/SSO"></AssertionConsumerService>
    </SPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
             	<shibmd:Scope regexp="false">maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">um.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">uma.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">umf.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">umfk.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">umm.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">umpi.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">usm.maine.edu</shibmd:Scope>
                <shibmd:Scope regexp="false">ums.maine.edu</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>

MIIDAzCCAeugAwIBAgIJAJAfuOLAnT3yMA0GCSqGSIb3DQEBCwUAMBgxFjAUBgNV
BAMMDWlkcC5tYWluZS5lZHUwHhcNMTkwNjI3MjAwODEzWhcNMjkwNjI0MjAwODEz
WjAYMRYwFAYDVQQDDA1pZHAubWFpbmUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4P6UNvYsgPe6b7z1ovwvB7nEPKQmQaJI+VcmUaX0KG3xcQ9N
g9/7PPP3vdY0BmB3CbO/JY6OmTIotZDFA2OCb7Bdx2wJIjITP0HiFCWJpA/yv8QX
zzq1ku3oJCkuAiwVSJ6UWGv1KkNuYopl6+8eYCyu+iW0rmYM9WCCnoMZ3VsGnxgf
HmYJhqZdOuZoNkb+PLRipQhIX9TqrVr/IJ4V4az41hEmoYpMEHJxqxNeZ2wEZ8yR
S5nyscrUIZ4fog0LBlViEj0WH1qb/sscvo8FZJvBOC36IU4sB4zTqJOhjASfeRCM
TkRmfMm4BoBkc9283+ecG9m2aNDac7oULCnP6QIDAQABo1AwTjAdBgNVHQ4EFgQU
7Lw+HpnQCwImDzJjdZ6Tp8fxpwIwHwYDVR0jBBgwFoAU7Lw+HpnQCwImDzJjdZ6T
p8fxpwIwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAgvRAs3Wy4a+9
Hs4sjd5+oSuD7rbXYG4Egr2B+EiVDFAVAOry5XykSBf18J6YqKXEuoh/63g5sQw5
hjjTggb97q6I+RW4H83YpFzWelalASA8xOYO7oUDaU2+aZBX4byr28+u+RoXHtF6
l6rFVtgqpghp6+iecZQbrH7iJzkIfPEzLaWQP7W+2GOvgIU/1/dXilETSxQpT4BC
QhlCKOw17XNVK5ayQKk+dty3Jp2PL4RgHR3E0MSnq4SP8X/KZuWYb4wQvtIrC47B
6Ixk5B6kbaySMtiHUQVN9S1k8ECdyPBXi1Jupczd4rLKolwKE3OdHMsGRwOpgcXT
nZ1x9SpDKg==



                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>

MIIDAzCCAeugAwIBAgIJAJAfuOLAnT3yMA0GCSqGSIb3DQEBCwUAMBgxFjAUBgNV
BAMMDWlkcC5tYWluZS5lZHUwHhcNMTkwNjI3MjAwODEzWhcNMjkwNjI0MjAwODEz
WjAYMRYwFAYDVQQDDA1pZHAubWFpbmUuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4P6UNvYsgPe6b7z1ovwvB7nEPKQmQaJI+VcmUaX0KG3xcQ9N
g9/7PPP3vdY0BmB3CbO/JY6OmTIotZDFA2OCb7Bdx2wJIjITP0HiFCWJpA/yv8QX
zzq1ku3oJCkuAiwVSJ6UWGv1KkNuYopl6+8eYCyu+iW0rmYM9WCCnoMZ3VsGnxgf
HmYJhqZdOuZoNkb+PLRipQhIX9TqrVr/IJ4V4az41hEmoYpMEHJxqxNeZ2wEZ8yR
S5nyscrUIZ4fog0LBlViEj0WH1qb/sscvo8FZJvBOC36IU4sB4zTqJOhjASfeRCM
TkRmfMm4BoBkc9283+ecG9m2aNDac7oULCnP6QIDAQABo1AwTjAdBgNVHQ4EFgQU
7Lw+HpnQCwImDzJjdZ6Tp8fxpwIwHwYDVR0jBBgwFoAU7Lw+HpnQCwImDzJjdZ6T
p8fxpwIwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAgvRAs3Wy4a+9
Hs4sjd5+oSuD7rbXYG4Egr2B+EiVDFAVAOry5XykSBf18J6YqKXEuoh/63g5sQw5
hjjTggb97q6I+RW4H83YpFzWelalASA8xOYO7oUDaU2+aZBX4byr28+u+RoXHtF6
l6rFVtgqpghp6+iecZQbrH7iJzkIfPEzLaWQP7W+2GOvgIU/1/dXilETSxQpT4BC
QhlCKOw17XNVK5ayQKk+dty3Jp2PL4RgHR3E0MSnq4SP8X/KZuWYb4wQvtIrC47B
6Ixk5B6kbaySMtiHUQVN9S1k8ECdyPBXi1Jupczd4rLKolwKE3OdHMsGRwOpgcXT
nZ1x9SpDKg==



                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding"
                          Location="https://idp.maine.edu/idp/profile/SAML1/SOAP/AttributeQuery"/>

        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                          Location="https://idp.maine.edu/idp/profile/SAML2/SOAP/AttributeQuery"/>

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

    </AttributeAuthorityDescriptor>

    <Organization>
        <OrganizationName xml:lang="en">University of Maine System</OrganizationName>
        <OrganizationDisplayName xml:lang="en">University of Maine System</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">https://idp.maine.edu</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
      <GivenName>UMS SSO Support</GivenName>
      <EmailAddress>sso-support@maine.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="administrative">
      <GivenName>UMS SSO Support</GivenName>
      <EmailAddress>sso-support@maine.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson contactType="support">
      <GivenName>UMS IT Support</GivenName>
      <EmailAddress>help@maine.edu</EmailAddress>
    </ContactPerson>
    <ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <GivenName>Information Security Office</GivenName>
      <EmailAddress>infosecurity@maine.edu</EmailAddress>
    </ContactPerson>
</EntityDescriptor>
