<?xml version="1.0" encoding="utf-8"?>
<md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="eduIDLU20261005T070056Z" validUntil="2026-11-01T07:00:56Z">
  <ds:Signature>
    <ds:SignedInfo>
      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
      <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <ds:Reference URI="#eduIDLU20261005T070056Z">
        <ds:Transforms>
          <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
          <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        </ds:Transforms>
        <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
        <ds:DigestValue>c6nBGqFp7JAFRm3o0hw1MF58SbFA7awY6chU2yTuRa4=</ds:DigestValue>
      </ds:Reference>
    </ds:SignedInfo>
    <ds:SignatureValue>FrvaFnefKv3PWu6hx99K7NfXBayH5AZnnJpgwUP79NasNJdgUItjkpwHp7wUko0U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</ds:SignatureValue>
    <ds:KeyInfo>
      <ds:X509Data>
<ds:X509Certificate>MIIG1DCCBLygAwIBAgIJAKV+h+fky5+lMA0GCSqGSIb3DQEBDQUAMIGQMQswCQYD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</ds:X509Certificate>
</ds:X509Data>
    </ds:KeyInfo>
  </ds:Signature>
  <md:Extensions>
    <mdrpi:PublicationInfo publisher="http://registry.eduid.lu/" creationInstant="2026-10-05T07:00:56Z"/>
  </md:Extensions>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://clueless.restena.lu/simplesaml_dev/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-06-25T00:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">restena.lu</shibmd:Scope>
      <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
        <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification">
          <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
        </saml:Attribute>
        <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://clueless.restena.lu/simplesaml_dev/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA Staff (TEST Environment)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">RESTENA Employees (TEST Environment)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">RESTENA Mitarbeiter (TEST Environment)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">RESTENA Matärbeschter (TEST Environment)</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for members of staff of RESTENA Foundation (TEST Environment)</mdui:Description>
          <mdui:Description xml:lang="fr">Fournisseur d'Identité pour employés de la Fondation RESTENA (TEST Environment)</mdui:Description>
          <mdui:Description xml:lang="de">Identitätsprovider für Mitarbeiter der Stiftung RESTENA (TEST Environment)</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA staff login</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://clueless.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:IPHint>158.64.0.0/16</mdui:IPHint>
          <mdui:IPHint>2001:a18::0/32</mdui:IPHint>
          <mdui:DomainHint>restena.lu</mdui:DomainHint>
          <mdui:DomainHint>lu</mdui:DomainHint>
          <mdui:GeolocationHint>geo:49.50,6.00</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            MIIG8jCCBNqgAwIBAgIJAPFgloKDS/2VMA0GCSqGSIb3DQEBDQUAMIGSMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MTAwLgYDVQQDDCdSRVNURU5BIFNBTUwgRW50aXR5IGNsdWVsZXNzLnJlc3RlbmEubHUwIBcNMTUwNjI2MDY0MTM3WhgPMjA1NjA3MjAwNjQxMzdaMIGSMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MTAwLgYDVQQDDCdSRVNURU5BIFNBTUwgRW50aXR5IGNsdWVsZXNzLnJlc3RlbmEubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCn6iqz2ws7axLU+lkTO6YFaTEvtfGmS6HnfacGSgLWN1CKXnu/POeX3UO6bHR4XgdyuKVEju4cTVpEMFoxsgQthiwBQnaBgv1HM/tcMmm+6iPCyt2T36STHeCRlr+ym5qXbPcFI9JFCmSgQpBad9ESH5laM0XRckFBFfCFfYFhShrbDqg8cc53A6767X7hqWPlj5wyfrncoauXeAYbhCwRJnb7Dd5JhB317jmGSy6hxuZ6/W70cToJ+eC7YRo/Oj4ykQfg/bo6UQ9eKAVc7cfujIbjVqeYIc+v34byRzkMn9bhnkDQzG6wm6HyIWinisbvKERO7GJSyWl1Qfa8UNfY/+v0DB3taBOMLfL+Ohf6bFFKJCqpNVJRsJuDg/7LV3oZ/prqFmqeXFNUOuGJQoPGhYpdWZOeMUQ9txQPOQFW0QTprcu0XIFAzNyX+hft2jjq02H/+OmUPZllK+AQSjcr7Jiz9o8bJw73GLj8oqSuyC4y1CBVVs0kBKcBmPH8uItMCnvKAURmUPjD1zeOWM5z8zHjGPodWjrMgjBNfYUJGNjaxX4IbObC59PmqDuJQeXaELHsbM/Kn1juCHKS1fFUdP6ZWqtz+oRas4qc7rLDCqIzksMEOLaHt5WirNJW019ftQE8BteGwkliWdUUSo5gX8Bv96uAjf1FIdH62G+NGQIDAQABo4IBRTCCAUEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFIduwaoYDe0IeuXZddYV5xloddgnMIHHBgNVHSMEgb8wgbyAFIduwaoYDe0IeuXZddYV5xloddgnoYGYpIGVMIGSMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MTAwLgYDVQQDDCdSRVNURU5BIFNBTUwgRW50aXR5IGNsdWVsZXNzLnJlc3RlbmEubHWCCQDxYJaCg0v9lTAJBgNVHRMEAjAAMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cucmVzdGVuYS5sdS9jYS9jbHVlbGVzcy5jcmwwDQYJKoZIhvcNAQENBQADggIBAD0tteBntR0kinB4xMZRmj33+E/YkyfkgTCJrENVgL8K6whIv5zPWmnmC7ntdo4F/T9V6BnhLJUZ7w5hWfMAfU9PkibJOrB4ppGENJmwxK7phj0Gkik86CNucU+vKkHseT6wGietVHnqtCnlAd3K5Ez+3Hu+bJAgnq8dMkZ741sgmj9d9nVEoKm/YHLFRgcZ6VahOyDSalujyxtkrjY1f5YrZSYclUDGjZsRvShndNulxHnjmSGYoCoKkPPC/LkfZEMiuq/lCRLP4cVFAw/1XkQk/yT3JZTikt5vNhn8dPKRh2L6GdGtmJTVJ0M1TSWCjlpHwBcPQdr4/IoEy8QyP66YScGEVPNV96fXCciNdKG7KsGYtdwnBL32NKWcYUcZeNv6gvCEWxFWQHv21nE3d7/IeDUFFaFIiBYNVmrtJUYhpTHnALOwde/4V6ndYEGLN+1D2VdSeLbQSBOVgjUwt7EBmlDzI7XRUVoeQIXG71I6uhc4IqABkpJWdlawTUypy7veS9526/CvaQfPyA8nDTwt+ZoDAH9YwX+EDafQIu94MqGS4VAgub/CcbEHOe2hd1rhvFJ5iCU9Iy1arEdoTMX992/oR5VUIwwg2kVpVJcbIj0rKrcgxdma9wzV6PYIArZkPj92Dz6q2KBaBBxyeLeWQtoMPZsSxgWig6cuU+NI</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://clueless.restena.lu/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://clueless.restena.lu/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation (TEST Environment)</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA (TEST Environment)</md:OrganizationName>
      <md:OrganizationName xml:lang="de">Stiftung RESTENA (TEST Environment)</md:OrganizationName>
      <md:OrganizationName xml:lang="lb">Fondatioun RESTENA (TEST Environment)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="de">Stiftung</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="lb">Fondatioun RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:Company>RESTENA Foundation</md:Company>
      <md:GivenName>RESTENA</md:GivenName>
      <md:SurName>CSIRT</md:SurName>
      <md:EmailAddress>mailto:csirt@restena.lu</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://clueless.restena.lu/simplesamlphp/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-06-25T00:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">restena.lu</shibmd:Scope>
      <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
        <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification">
          <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA Staff</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">RESTENA Employees</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">RESTENA Mitarbeiter</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">RESTENA Matärbeschter</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for members of staff of RESTENA Foundation</mdui:Description>
          <mdui:Description xml:lang="fr">Fournisseur d'Identité pour employés de la Fondation RESTENA</mdui:Description>
          <mdui:Description xml:lang="de">Identitätsprovider für Mitarbeiter der Stiftung RESTENA</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA staff login</mdui:Keywords>
          <mdui:Logo width="78" height="100" xml:lang="en">https://clueless.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:IPHint>158.64.0.0/16</mdui:IPHint>
          <mdui:IPHint>2001:a18::0/32</mdui:IPHint>
          <mdui:DomainHint>restena.lu</mdui:DomainHint>
          <mdui:DomainHint>lu</mdui:DomainHint>
          <mdui:GeolocationHint>geo:49.50,6.00</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            MIIG8jCCBNqgAwIBAgIJAPFgloKDS/2VMA0GCSqGSIb3DQEBDQUAMIGSMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MTAwLgYDVQQDDCdSRVNURU5BIFNBTUwgRW50aXR5IGNsdWVsZXNzLnJlc3RlbmEubHUwIBcNMTUwNjI2MDY0MTM3WhgPMjA1NjA3MjAwNjQxMzdaMIGSMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MTAwLgYDVQQDDCdSRVNURU5BIFNBTUwgRW50aXR5IGNsdWVsZXNzLnJlc3RlbmEubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCn6iqz2ws7axLU+lkTO6YFaTEvtfGmS6HnfacGSgLWN1CKXnu/POeX3UO6bHR4XgdyuKVEju4cTVpEMFoxsgQthiwBQnaBgv1HM/tcMmm+6iPCyt2T36STHeCRlr+ym5qXbPcFI9JFCmSgQpBad9ESH5laM0XRckFBFfCFfYFhShrbDqg8cc53A6767X7hqWPlj5wyfrncoauXeAYbhCwRJnb7Dd5JhB317jmGSy6hxuZ6/W70cToJ+eC7YRo/Oj4ykQfg/bo6UQ9eKAVc7cfujIbjVqeYIc+v34byRzkMn9bhnkDQzG6wm6HyIWinisbvKERO7GJSyWl1Qfa8UNfY/+v0DB3taBOMLfL+Ohf6bFFKJCqpNVJRsJuDg/7LV3oZ/prqFmqeXFNUOuGJQoPGhYpdWZOeMUQ9txQPOQFW0QTprcu0XIFAzNyX+hft2jjq02H/+OmUPZllK+AQSjcr7Jiz9o8bJw73GLj8oqSuyC4y1CBVVs0kBKcBmPH8uItMCnvKAURmUPjD1zeOWM5z8zHjGPodWjrMgjBNfYUJGNjaxX4IbObC59PmqDuJQeXaELHsbM/Kn1juCHKS1fFUdP6ZWqtz+oRas4qc7rLDCqIzksMEOLaHt5WirNJW019ftQE8BteGwkliWdUUSo5gX8Bv96uAjf1FIdH62G+NGQIDAQABo4IBRTCCAUEwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFIduwaoYDe0IeuXZddYV5xloddgnMIHHBgNVHSMEgb8wgbyAFIduwaoYDe0IeuXZddYV5xloddgnoYGYpIGVMIGSMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MTAwLgYDVQQDDCdSRVNURU5BIFNBTUwgRW50aXR5IGNsdWVsZXNzLnJlc3RlbmEubHWCCQDxYJaCg0v9lTAJBgNVHRMEAjAAMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cucmVzdGVuYS5sdS9jYS9jbHVlbGVzcy5jcmwwDQYJKoZIhvcNAQENBQADggIBAD0tteBntR0kinB4xMZRmj33+E/YkyfkgTCJrENVgL8K6whIv5zPWmnmC7ntdo4F/T9V6BnhLJUZ7w5hWfMAfU9PkibJOrB4ppGENJmwxK7phj0Gkik86CNucU+vKkHseT6wGietVHnqtCnlAd3K5Ez+3Hu+bJAgnq8dMkZ741sgmj9d9nVEoKm/YHLFRgcZ6VahOyDSalujyxtkrjY1f5YrZSYclUDGjZsRvShndNulxHnjmSGYoCoKkPPC/LkfZEMiuq/lCRLP4cVFAw/1XkQk/yT3JZTikt5vNhn8dPKRh2L6GdGtmJTVJ0M1TSWCjlpHwBcPQdr4/IoEy8QyP66YScGEVPNV96fXCciNdKG7KsGYtdwnBL32NKWcYUcZeNv6gvCEWxFWQHv21nE3d7/IeDUFFaFIiBYNVmrtJUYhpTHnALOwde/4V6ndYEGLN+1D2VdSeLbQSBOVgjUwt7EBmlDzI7XRUVoeQIXG71I6uhc4IqABkpJWdlawTUypy7veS9526/CvaQfPyA8nDTwt+ZoDAH9YwX+EDafQIu94MqGS4VAgub/CcbEHOe2hd1rhvFJ5iCU9Iy1arEdoTMX992/oR5VUIwwg2kVpVJcbIj0rKrcgxdma9wzV6PYIArZkPj92Dz6q2KBaBBxyeLeWQtoMPZsSxgWig6cuU+NI</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://clueless.restena.lu/simplesamlphp/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://clueless.restena.lu/simplesamlphp/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA</md:OrganizationName>
      <md:OrganizationName xml:lang="de">Stiftung</md:OrganizationName>
      <md:OrganizationName xml:lang="lb">Fondatioun RESTENA</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="de">Stiftung</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="lb">Fondatioun RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:Company>RESTENA Foundation</md:Company>
      <md:GivenName>RESTENA</md:GivenName>
      <md:SurName>CSIRT</md:SurName>
      <md:EmailAddress>mailto:csirt@restena.lu</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://eduid-test.uni.lu/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2019-01-10T15:30:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-10.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">uni.lu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">student.uni.lu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ext.uni.lu</shibmd:Scope>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://eduid-test.uni.lu/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">University of Luxembourg - Test (do not use)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">Universite du Luxembourg - Test (ne pas utiliser)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">Universitaet Luxemburg - Test (nicht benutzen)</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity provider for members of the University of Luxembourg - TEST</mdui:Description>
          <mdui:Description xml:lang="de">Fournisseur d Identite pour les membre de l Universite du Luxembourg - TEST</mdui:Description>
          <mdui:Description xml:lang="fr">Identitaetsprovider fuer die Mitglieder der Universitaet Luxemburg - Test</mdui:Description>
          <mdui:Keywords xml:lang="en">UNI.LU staff students Test</mdui:Keywords>
          <mdui:Logo width="73" height="78" xml:lang="en">https://eduid.uni.lu/uni.lu.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:IPHint>158.64.76.0/24</mdui:IPHint>
          <mdui:IPHint>158.64.77.0/24</mdui:IPHint>
          <mdui:IPHint>158.64.79.0/24</mdui:IPHint>
          <mdui:IPHint>2001:a18:a::/48</mdui:IPHint>
          <mdui:DomainHint>uni.lu</mdui:DomainHint>
          <mdui:DomainHint>www.uni.lu</mdui:DomainHint>
          <mdui:GeolocationHint>geo:49.507027, 5.997479</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduid-test.uni.lu/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduid-test.uni.lu/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">University of Luxembourg</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Universite du Luxembourg</md:OrganizationName>
      <md:OrganizationName xml:lang="de">Universitaet Luxemburg</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">University of Luxembourg (Uni.lu) TEST</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.uni.lu/en/</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">https://www.uni.lu/fr/</md:OrganizationURL>
      <md:OrganizationURL xml:lang="de">https://www.uni.lu/de/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:Company>University of Luxembourg</md:Company>
      <md:GivenName>IA Department</md:GivenName>
      <md:SurName>SIU</md:SurName>
      <md:EmailAddress>mailto:siu.sns@uni.lu</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>IT department UNI-LU</md:GivenName>
      <md:EmailAddress>mailto:siu.sns@uni.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://eduID.uni.lu/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2018-12-19T07:30:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-10.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">uni.lu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">student.uni.lu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ext.uni.lu</shibmd:Scope>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">University of Luxembourg - Production</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity provider for members of the University of Luxembourg - Production</mdui:Description>
          <mdui:Keywords xml:lang="en">Uni.lu+-+Production+login</mdui:Keywords>
          <mdui:Logo width="73" height="78" xml:lang="en">https://eduid.uni.lu/uni.lu.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:IPHint>158.64.76.0/24</mdui:IPHint>
          <mdui:IPHint>158.64.77.0/24</mdui:IPHint>
          <mdui:IPHint>158.64.79.0/24</mdui:IPHint>
          <mdui:IPHint>2001:a18:a::/48</mdui:IPHint>
          <mdui:DomainHint>uni.lu</mdui:DomainHint>
          <mdui:DomainHint>www.uni.lu</mdui:DomainHint>
          <mdui:GeolocationHint>geo:49.507027, 5.997479</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduID.uni.lu/simplesaml/saml2/idp/SingleLogoutService.php"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduID.uni.lu/simplesaml/saml2/idp/SSOService.php"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">University of Luxembourg</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Universite du Luxembourg</md:OrganizationName>
      <md:OrganizationName xml:lang="de">Universitaet Luxemburg</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">University of Luxembourg (Uni.lu) Production</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.uni.lu</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.uni.lu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Service</md:GivenName>
      <md:SurName>IT</md:SurName>
      <md:EmailAddress>mailto:eduid@uni.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_0492b074-5020-43b6-951e-a279f83e89d6" entityID="https://sts.windows.net/487175ce-c313-4417-91bc-dc3b6721b8ee/">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2023-04-27T00:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">liser.lu</shibmd:Scope>
    </md:Extensions>
    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">LISER</mdui:DisplayName>
          <mdui:Description xml:lang="en">Luxembourg Institute of Socio-Economic Research</mdui:Description>
          <mdui:Logo width="78" height="100" xml:lang="en">https://www.liser.lu/image/layout/logo.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <KeyDescriptor use="signing">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/487175ce-c313-4417-91bc-dc3b6721b8ee/saml2"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/487175ce-c313-4417-91bc-dc3b6721b8ee/saml2"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/487175ce-c313-4417-91bc-dc3b6721b8ee/saml2"/>
    </IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Luxembourg Institute of Socio-Economic Research</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">LISER</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.liser.lu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Rodolphe</md:GivenName>
      <md:SurName>Marck</md:SurName>
      <md:EmailAddress>mailto:rodolphe.marck@liser.lu</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Thierry</md:GivenName>
      <md:SurName>Kruten</md:SurName>
      <md:EmailAddress>mailto:thierry.kruten@liser.lu</md:EmailAddress>
    </md:ContactPerson>
  </EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://login.restena.lu/simplesaml_dev/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2023-10-04T16:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">education.lu</shibmd:Scope>
      <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
        <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://login.restena.lu/simplesaml_dev/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA Users (TEST Environment)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">RESTENA Utilisateurs (TEST Environment)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">RESTENA Benutzer (TEST Environment)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">RESTENA Benotzeren (TEST Environment)</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for end users with an account at RESTENA Foundation (TEST Environment)</mdui:Description>
          <mdui:Description xml:lang="fr">Fournisseur d'Identité pour utilisateurs avec un compte de la Fondation RESTENA (TEST Environment)</mdui:Description>
          <mdui:Description xml:lang="de">Identitätsprovider für Nutzer mit einem Benutzerkonto bei der Stiftung RESTENA (TEST Environment)</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA user users login education</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://login.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:IPHint>158.64.0.0/16</mdui:IPHint>
          <mdui:IPHint>2001:a18::0/32</mdui:IPHint>
          <mdui:DomainHint>education.lu</mdui:DomainHint>
          <mdui:DomainHint>lu</mdui:DomainHint>
          <mdui:GeolocationHint>geo:49.50,6.00</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.restena.lu/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.restena.lu/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation (TEST Environment)</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA (TEST Environment)</md:OrganizationName>
      <md:OrganizationName xml:lang="de">Stiftung RESTENA (TEST Environment)</md:OrganizationName>
      <md:OrganizationName xml:lang="lb">Fondatioun RESTENA (TEST Environment)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="de">Stiftung RESTENA</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="lb">Fondatioun RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:Company>RESTENA Foundation</md:Company>
      <md:GivenName>RESTENA</md:GivenName>
      <md:SurName>CSIRT</md:SurName>
      <md:EmailAddress>mailto:csirt@restena.lu</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://login.restena.lu/simplesamlphp/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-07-07T08:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">education.lu</shibmd:Scope>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA Users</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">RESTENA Utilisateurs</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">RESTENA Benutzer</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">RESTENA Benotzeren</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for end users with an account at RESTENA Foundation</mdui:Description>
          <mdui:Description xml:lang="fr">Fournisseur d'Identité pour utilisateurs avec un compte de la Fondation RESTENA</mdui:Description>
          <mdui:Description xml:lang="de">Identitätsprovider für Nutzer mit einem Benutzerkonto bei der Stiftung RESTENA</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA user users login education</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://login.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:IPHint>158.64.0.0/16</mdui:IPHint>
          <mdui:IPHint>2001:a18::0/32</mdui:IPHint>
          <mdui:DomainHint>education.lu</mdui:DomainHint>
          <mdui:DomainHint>lu</mdui:DomainHint>
          <mdui:GeolocationHint>geo:49.50,6.00</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            MIIG8TCCBNmgAwIBAgIJALmfaVOnBptMMA0GCSqGSIb3DQEBDQUAMIGPMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MS0wKwYDVQQDDCRSRVNURU5BIFNBTUwgRW50aXR5IGxvZ2luLnJlc3RlbmEubHUwIBcNMTUwNzA2MDcyMDM1WhgPMjA1NjA3MzAwNzIwMzVaMIGPMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MS0wKwYDVQQDDCRSRVNURU5BIFNBTUwgRW50aXR5IGxvZ2luLnJlc3RlbmEubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAvzTExPqK7hRWD3/KyRJilXTCD/obJd4XGZjwhjbnMVcyO48ll4fl7tPhNxnqNwDq/KrFbumoUCEROdwbvu2sdJQ27sG0I+2if0jesN2KD/yX+3Wsg9msTI1tPicxueBjd/mx/nYQGY24s9w+eLboxGr4WPCIV87PHKo447jV1oPkw3QL+2yD9XawrYVlxwf9ociTiz1VEgtdNonmq+a1giFSahrelKzkE/FsIEp1olWxDvIAc/LUcPfc0w3c8BX+OMHX3puyONeoShbJBMb34Rksd20mrmm0HiAINNFImwmvnav+hqX4M+2D1rxRmfQnKyKvIJ+RBh44ltpEqEN4YNgelGAcWjdyn6SpbXXcAqIHo4uFDVtDYosVl73HUpy6sme9MxgwLPvTymjMz5qzJOPRDVCGv6m8BmQzDRwZwnCnaxBjjNFzddV0WK/qgq2/UMnNYoVkDLWZJ3mOSWUborbDKaOnlRG5wtdQBL8lld4Ny57hZZyAmYo9NgsSkuUt6k5+2ckV+uzjw9nZx/WLUpxeO9cl46zxoVSRBTD2KJT/HLrwSgPGn9Ua34eZ7us0lHCYef/alosShx4/HDsZR5uUpYuCVtRgJaXJPQdusrkomXlVBYA9hHTBrcbFengzuZAvH1/SbcpdtAiyh3LrQI46zBU/rgMcL6dVB5nv3QIDAQABo4IBSjCCAUYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFDSwQy/FZJsLCbdeJGzYLZ5cW+Y/MIHEBgNVHSMEgbwwgbmAFDSwQy/FZJsLCbdeJGzYLZ5cW+Y/oYGVpIGSMIGPMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MS0wKwYDVQQDDCRSRVNURU5BIFNBTUwgRW50aXR5IGxvZ2luLnJlc3RlbmEubHWCCQC5n2lTpwabTDAJBgNVHRMEAjAAMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly93d3cucmVzdGVuYS5sdS9jYS9sb2dpbi5yZXN0ZW5hLmx1LmNybDANBgkqhkiG9w0BAQ0FAAOCAgEAPi115CKvlp8TaP0AnD7q3PLvIFrTdw5AL7K02k3m2AY9WfoBL+LfyNfPJw/EItrzcgZhy4lEr1oKSX3q+ECFwAHDE06lgQytHkNnE9tUbnOHl3RsimF+J+pndyHVN3gh3pbUUvlvP2XJRnYoBZtikwK1El61CXt3ZioxvNMZnecDyOZFRRcIzgAHbLKCHJosrGDYoDJA9ZQZGgISC11aEJHzhQsLenBF+NZvHgge3+aML4Xw1ICgV22OshNxt6NlB3S9EkGqJZeLXQA6TWyzOE/4siFUyYMykJz01V/RcHVwYs0gzu88nnVucmLEBDtsMYBP317dJFZ6YHvkBZ1/hVRqDy7RT9iNSWfVSM5ULsl4uZyrOeeIOZTvPp66KcA38JjqST4eIwa5861XaS0KDcVE9CZduhfR0SfEy0VJPabfhYkPDfuPSD2v4ZFaeN1onCD4Xk9z8gkXM0S3+YPd6slFjb7rxvLfXQTwemLzFFGAhb1Y/EAoyOtGDknBufPXuwhgtkfN+BLOqJ4+R3nKkwd5jYBJeHqETTWC2KRovhLgJHaRSg2DGGQvOfoZaWz3JE70eee8aMmYdFKuO8pXEg0n/ORFGhvNIeoxLBw7Ohw3ZHJ5pTYXYslvFwbOlc+z/muxyTHORBDj/QVilT1AhoBg7gEACTZcJP7pXVEGtCU=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            MIIG8TCCBNmgAwIBAgIJALmfaVOnBptMMA0GCSqGSIb3DQEBDQUAMIGPMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MS0wKwYDVQQDDCRSRVNURU5BIFNBTUwgRW50aXR5IGxvZ2luLnJlc3RlbmEubHUwIBcNMTUwNzA2MDcyMDM1WhgPMjA1NjA3MzAwNzIwMzVaMIGPMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MS0wKwYDVQQDDCRSRVNURU5BIFNBTUwgRW50aXR5IGxvZ2luLnJlc3RlbmEubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAvzTExPqK7hRWD3/KyRJilXTCD/obJd4XGZjwhjbnMVcyO48ll4fl7tPhNxnqNwDq/KrFbumoUCEROdwbvu2sdJQ27sG0I+2if0jesN2KD/yX+3Wsg9msTI1tPicxueBjd/mx/nYQGY24s9w+eLboxGr4WPCIV87PHKo447jV1oPkw3QL+2yD9XawrYVlxwf9ociTiz1VEgtdNonmq+a1giFSahrelKzkE/FsIEp1olWxDvIAc/LUcPfc0w3c8BX+OMHX3puyONeoShbJBMb34Rksd20mrmm0HiAINNFImwmvnav+hqX4M+2D1rxRmfQnKyKvIJ+RBh44ltpEqEN4YNgelGAcWjdyn6SpbXXcAqIHo4uFDVtDYosVl73HUpy6sme9MxgwLPvTymjMz5qzJOPRDVCGv6m8BmQzDRwZwnCnaxBjjNFzddV0WK/qgq2/UMnNYoVkDLWZJ3mOSWUborbDKaOnlRG5wtdQBL8lld4Ny57hZZyAmYo9NgsSkuUt6k5+2ckV+uzjw9nZx/WLUpxeO9cl46zxoVSRBTD2KJT/HLrwSgPGn9Ua34eZ7us0lHCYef/alosShx4/HDsZR5uUpYuCVtRgJaXJPQdusrkomXlVBYA9hHTBrcbFengzuZAvH1/SbcpdtAiyh3LrQI46zBU/rgMcL6dVB5nv3QIDAQABo4IBSjCCAUYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFDSwQy/FZJsLCbdeJGzYLZ5cW+Y/MIHEBgNVHSMEgbwwgbmAFDSwQy/FZJsLCbdeJGzYLZ5cW+Y/oYGVpIGSMIGPMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MS0wKwYDVQQDDCRSRVNURU5BIFNBTUwgRW50aXR5IGxvZ2luLnJlc3RlbmEubHWCCQC5n2lTpwabTDAJBgNVHRMEAjAAMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly93d3cucmVzdGVuYS5sdS9jYS9sb2dpbi5yZXN0ZW5hLmx1LmNybDANBgkqhkiG9w0BAQ0FAAOCAgEAPi115CKvlp8TaP0AnD7q3PLvIFrTdw5AL7K02k3m2AY9WfoBL+LfyNfPJw/EItrzcgZhy4lEr1oKSX3q+ECFwAHDE06lgQytHkNnE9tUbnOHl3RsimF+J+pndyHVN3gh3pbUUvlvP2XJRnYoBZtikwK1El61CXt3ZioxvNMZnecDyOZFRRcIzgAHbLKCHJosrGDYoDJA9ZQZGgISC11aEJHzhQsLenBF+NZvHgge3+aML4Xw1ICgV22OshNxt6NlB3S9EkGqJZeLXQA6TWyzOE/4siFUyYMykJz01V/RcHVwYs0gzu88nnVucmLEBDtsMYBP317dJFZ6YHvkBZ1/hVRqDy7RT9iNSWfVSM5ULsl4uZyrOeeIOZTvPp66KcA38JjqST4eIwa5861XaS0KDcVE9CZduhfR0SfEy0VJPabfhYkPDfuPSD2v4ZFaeN1onCD4Xk9z8gkXM0S3+YPd6slFjb7rxvLfXQTwemLzFFGAhb1Y/EAoyOtGDknBufPXuwhgtkfN+BLOqJ4+R3nKkwd5jYBJeHqETTWC2KRovhLgJHaRSg2DGGQvOfoZaWz3JE70eee8aMmYdFKuO8pXEg0n/ORFGhvNIeoxLBw7Ohw3ZHJ5pTYXYslvFwbOlc+z/muxyTHORBDj/QVilT1AhoBg7gEACTZcJP7pXVEGtCU=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.restena.lu/simplesamlphp/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.restena.lu/simplesamlphp/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA</md:OrganizationName>
      <md:OrganizationName xml:lang="de">Stiftung</md:OrganizationName>
      <md:OrganizationName xml:lang="lb">Fondatioun RESTENA</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="de">Stiftung RESTENA</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="lb">Fondatioun RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:Company>RESTENA Foundation</md:Company>
      <md:GivenName>RESTENA</md:GivenName>
      <md:SurName>CSIRT</md:SurName>
      <md:EmailAddress>mailto:csirt@restena.lu</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://accounts.google.com/o/saml2?idpid=C02ws9ruj" validUntil="2025-06-04T15:09:59.000Z">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2021-06-25T07:30:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-10.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">luxsb.lu</shibmd:Scope>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">Luxembourg School of Business</mdui:DisplayName>
          <mdui:Logo width="200" height="80" xml:lang="en">https://luxsb.lu/sw-content/themes/sw/img/logo.svg</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DomainHint>luxsb.lu</mdui:DomainHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>MIIDdDCCAlygAwIBAgIGAXKFCCbaMA0GCSqGSIb3DQEBCwUAMHsxFDASBgNVBAoTC0dvb2dsZSBJ bmMuMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MQ8wDQYDVQQDEwZHb29nbGUxGDAWBgNVBAsTD0dv b2dsZSBGb3IgV29yazELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWEwHhcNMjAwNjA1 MTUwOTU5WhcNMjUwNjA0MTUwOTU5WjB7MRQwEgYDVQQKEwtHb29nbGUgSW5jLjEWMBQGA1UEBxMN TW91bnRhaW4gVmlldzEPMA0GA1UEAxMGR29vZ2xlMRgwFgYDVQQLEw9Hb29nbGUgRm9yIFdvcmsx CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA+SbB70X3TeNKGuLH7726Rr24JOOJPP9CIuj7eEIKdAKVg+bMaiFzlbxdeJPCuxsS S6xDGv1+CmUmFNbywAa+8pyqReQ3jFNqS2LFq1ulY1iJgZfLt06zNhj62dKUQx0/63uYbaNqkqHd bped74qBddAdZEc0590rUieRKF676F4i5HxtUWrb6PnyX2tjMGBZpD2YGymgBsy3vzEf/LhC7nek prU8fJf5Pq3owCFbDfz3UcneNbzckv2NZBu5/FJ07dgbhC8hj3SaIbe6yLLmLKzlN038XwcSwX25 sZlU/nX5YoF1bqwtg5X1cj042S/WmYADVse16oCJMFoUaKyHSwIDAQABMA0GCSqGSIb3DQEBCwUA A4IBAQDgpyBfv5xpj87To41zWov7g9Uqd3ZV+9u1nBHA3bkXCuFhdVmWPD4JNJGfmKeOTVM1azC5 tnY7EpFd8X9DkIYNGiWYQt1BPuO0zcJfA24MCCGd4veTugTiePSFN+gcoZb8Ii48POd3vB/NinAN /1u3UGx96NSM6PdijpxKQ3isoY5XjTsdLXEQvIddhHVFQOKHSUZhf1XEBtbn4yAeRBNZBiMsummD 23fcCraR76y5X3dIWR6VBgcqeQQ7bHrDpbKMejvSvmsu+fHAb8E0PtRSnDmvTYa+YySZ9jserbqO qQQwIf0BTn8AHBk9Xf5kuuRpEP+5kysoWodwVePiUs57</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://accounts.google.com/o/saml2/idp?idpid=C02ws9ruj"/>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://accounts.google.com/o/saml2/idp?idpid=C02ws9ruj"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Luxembourg School of Business</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Luxembourg School of Business</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.luxsb.lu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>LSB</md:GivenName>
      <md:SurName>Role-Account</md:SurName>
      <md:EmailAddress>mailto:info@luxsb.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" ID="_fef8d2b1-87f5-4c0c-8a39-932b493c2640" entityID="http://adfs.lih.lu/adfs/services/trust">
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_fef8d2b1-87f5-4c0c-8a39-932b493c2640">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>fqfUodC+YLeKN3YuzSQ89a/TB/K5ww1Xeg9CexA+v84=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>N7oprpHbcjVy/L85rIQMh4iaj6V5N9CH42ccGsH0YAFahysag+A6rZn16ROcudml1Sf5p4E+b9xBCfUhcBLNmkswj8Maj8m+ZOWU8ePoldzUvwJH2wd9PjZOGMUbPOLIbP+Z/Jmr/8gWF6Yt0/b15oEJj1SY04EC+pX38SdbTTpkq9eZV63p9dYTEXwenERxXe6bIy4R8v6Co9+ZZgxmu44S2PKy5+/N/4iLGQ7Ryqy6QZoR6YixKwozAm14d4Nrt/6Ui/BFm1RqBxRxo7hex2Bs/8qfg1XAONM4O2qv0StUPGkHQoYsJHuwEUZPCPwqioKY5pJK1bGiYXyfDrw7Yw==</ds:SignatureValue>
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data>
          <X509Certificate>MIIC0jCCAbqgAwIBAgIQUydGaRBpcIxEjucUNH6PMDANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDExpBREZTIFNpZ25pbmcgLSBhZGZzLmxpaC5sdTAeFw0yNDA0MTEyMDQ1MDdaFw0yNzA0MTEyMDQ1MDdaMCUxIzAhBgNVBAMTGkFERlMgU2lnbmluZyAtIGFkZnMubGloLmx1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma0mW4kHTfL2TD4+bH+ccSWQqGJnVc1EP/3Qwebc7G2bHcrMZ+QVe+xFG8sNlCEzm4fSNuGk0oxxtqTF13VX46rxIpAR3s/7CKw+PaAGsZFZuHGsEK0f7uf8YPrlH9TVVeoXqGj0/Z3/Pk6ZthT3PMG7ab5RHFUnVNi/8ieSCJf8379NPx2DAVa8oZljIvty7y9k0lXZj4+V53czOvWscb+hpLah0D/imSlF0UoE7w95zhjSyPJoUmTM7h9KUv3dBA44BSo2u1Th0Lf6BYFjPGT5qoNGz6BWVuHk48OxCf54nxm8LlFVklnak/4GYtN7Kay7tMgYXy/ndIQmas4yawIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQAUIyg02mtZY6ZoUgSum4Aobx1OfogrnfQ3T6bg2dFYZe3rWAK5VG1/cjB5+mLp3luYZHUvVFljFSJK5KwQSbQdQEhDNxFEXF+loXMwDgvieZQNuspvEevtc7clITdM5lWy3DikgE8XgH2je6h6KlKJyU1e4r8HSFwPKNcQsdBV6VXOTQ3HvIU0/Z4dPGWrgdvq6bPEMmbh5Kce73qVbpbycA5AsgrxctE+A78cakgJWE2XJqMed3bMvAi+CSJxC6JjP69vd6HPtps83T5d8TkNaRJsexObktXOFbUpuAgqheCBK1AtymoHln7xn9/Gt8XIdwmwtyswfljzVoWznXIw</X509Certificate>
        </X509Data>
      </KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2024-09-24T07:30:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-10.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">lih.lu</shibmd:Scope>
    </md:Extensions>
    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">Luxembourg Institute of Health</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for end users with an account at the Luxembourg Institute of Health</mdui:Description>
          <mdui:Keywords xml:lang="en">Luxembourg Health LIH</mdui:Keywords>
          <mdui:Logo width="180" height="105" xml:lang="en">https://www.lih.lu/wp-content/themes/iawp-child/assets/img/logo.svg</mdui:Logo>
        </mdui:UIInfo>
      </Extensions>
      <KeyDescriptor use="encryption">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <KeyDescriptor use="signing">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://adfs.lih.lu/adfs/ls/"/>
      <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://adfs.lih.lu/adfs/ls/"/>
      <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://adfs.lih.lu/adfs/ls/"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://adfs.lih.lu/adfs/ls/"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="E-Mail Address"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Given Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="UPN"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/CommonName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Common Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/EmailAddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="AD FS 1.x E-Mail Address"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Group"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/UPN" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="AD FS 1.x UPN"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Role"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Surname"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="PPID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Name ID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication time stamp"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication method"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only group SID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only primary SID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarygroupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only primary group SID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Group SID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarygroupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Primary group SID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Primary SID"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Windows account name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/isregistereduser" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Is Registered User"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Identifier"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/registrationid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Registration Identifier"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/displayname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Registration DisplayName"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/ostype" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device OS type"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/osversion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device OS Version"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/ismanaged" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Is Managed Device"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Forwarded Client IP"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-application" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client Application"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-user-agent" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client User Agent"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-ip" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client IP"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-endpoint-absolute-path" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Endpoint Path"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-proxy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Proxy"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Application Identifier"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/applicationpolicy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Application policies"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/authoritykeyidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authority Key Identifier"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/basicconstraints" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Basic Constraint"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/eku" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Enhanced Key Usage"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Issuer"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuername" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Issuer Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/keyusage" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Key Usage"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/notafter" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Not After"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/notbefore" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Not Before"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatepolicy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Certificate Policies"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/rsa" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Public Key"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/rawdata" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Certificate Raw Data"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/san" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Alternative Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/serialnumber" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Serial Number"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/signaturealgorithm" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Signature Algorithm"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/subject" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/subjectkeyidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Key Identifier"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/subjectname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplateinformation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="V2 Template Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplatename" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="V1 Template Name"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/thumbprint" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Thumbprint"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/x509version" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="X.509 Version"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Inside Corporate Network"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Password Expiration Time"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/passwordexpirationdays" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Password Expiration Days"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/passwordchangeurl" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Update Password URL"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/claims/authnmethodsreferences" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication Methods References"/>
      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/client-request-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client Request ID"/>
    </IDPSSODescriptor>
    <RoleDescriptor xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/ws-sx/ws-trust/200512 http://schemas.xmlsoap.org/ws/2005/02/trust http://docs.oasis-open.org/wsfed/federation/200706" ServiceDisplayName="Luxembourg Institute of Health">
      <KeyDescriptor use="encryption">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <fed:ClaimTypesRequested>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" Optional="true">
          <auth:DisplayName>E-Mail Address</auth:DisplayName>
          <auth:Description>The e-mail address of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" Optional="true">
          <auth:DisplayName>Given Name</auth:DisplayName>
          <auth:Description>The given name of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" Optional="true">
          <auth:DisplayName>Name</auth:DisplayName>
          <auth:Description>The unique name of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" Optional="true">
          <auth:DisplayName>UPN</auth:DisplayName>
          <auth:Description>The user principal name (UPN) of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/CommonName" Optional="true">
          <auth:DisplayName>Common Name</auth:DisplayName>
          <auth:Description>The common name of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/EmailAddress" Optional="true">
          <auth:DisplayName>AD FS 1.x E-Mail Address</auth:DisplayName>
          <auth:Description>The e-mail address of the user when interoperating with AD FS 1.1 or AD FS 1.0</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/Group" Optional="true">
          <auth:DisplayName>Group</auth:DisplayName>
          <auth:Description>A group that the user is a member of</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/UPN" Optional="true">
          <auth:DisplayName>AD FS 1.x UPN</auth:DisplayName>
          <auth:Description>The UPN of the user when interoperating with AD FS 1.1 or AD FS 1.0</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" Optional="true">
          <auth:DisplayName>Role</auth:DisplayName>
          <auth:Description>A role that the user has</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" Optional="true">
          <auth:DisplayName>Surname</auth:DisplayName>
          <auth:Description>The surname of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" Optional="true">
          <auth:DisplayName>PPID</auth:DisplayName>
          <auth:Description>The private identifier of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" Optional="true">
          <auth:DisplayName>Name ID</auth:DisplayName>
          <auth:Description>The SAML name identifier of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" Optional="true">
          <auth:DisplayName>Authentication time stamp</auth:DisplayName>
          <auth:Description>Used to display the time and date that the user was authenticated</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" Optional="true">
          <auth:DisplayName>Authentication method</auth:DisplayName>
          <auth:Description>The method used to authenticate the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid" Optional="true">
          <auth:DisplayName>Deny only group SID</auth:DisplayName>
          <auth:Description>The deny-only group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarysid" Optional="true">
          <auth:DisplayName>Deny only primary SID</auth:DisplayName>
          <auth:Description>The deny-only primary SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarygroupsid" Optional="true">
          <auth:DisplayName>Deny only primary group SID</auth:DisplayName>
          <auth:Description>The deny-only primary group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid" Optional="true">
          <auth:DisplayName>Group SID</auth:DisplayName>
          <auth:Description>The group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarygroupsid" Optional="true">
          <auth:DisplayName>Primary group SID</auth:DisplayName>
          <auth:Description>The primary group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid" Optional="true">
          <auth:DisplayName>Primary SID</auth:DisplayName>
          <auth:Description>The primary SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname" Optional="true">
          <auth:DisplayName>Windows account name</auth:DisplayName>
          <auth:Description>The domain account name of the user in the form of domain\user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/isregistereduser" Optional="true">
          <auth:DisplayName>Is Registered User</auth:DisplayName>
          <auth:Description>User is registered to use this device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier" Optional="true">
          <auth:DisplayName>Device Identifier</auth:DisplayName>
          <auth:Description>Identifier of the device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/registrationid" Optional="true">
          <auth:DisplayName>Device Registration Identifier</auth:DisplayName>
          <auth:Description>Identifier for Device Registration</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/displayname" Optional="true">
          <auth:DisplayName>Device Registration DisplayName</auth:DisplayName>
          <auth:Description>Display name of Device Registration</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/ostype" Optional="true">
          <auth:DisplayName>Device OS type</auth:DisplayName>
          <auth:Description>OS type of the device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/osversion" Optional="true">
          <auth:DisplayName>Device OS Version</auth:DisplayName>
          <auth:Description>OS version of the device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/ismanaged" Optional="true">
          <auth:DisplayName>Is Managed Device</auth:DisplayName>
          <auth:Description>Device is managed by a management service</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip" Optional="true">
          <auth:DisplayName>Forwarded Client IP</auth:DisplayName>
          <auth:Description>IP address of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-application" Optional="true">
          <auth:DisplayName>Client Application</auth:DisplayName>
          <auth:Description>Type of the Client Application</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-user-agent" Optional="true">
          <auth:DisplayName>Client User Agent</auth:DisplayName>
          <auth:Description>Device type the client is using to access the application</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-ip" Optional="true">
          <auth:DisplayName>Client IP</auth:DisplayName>
          <auth:Description>IP address of the client</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-endpoint-absolute-path" Optional="true">
          <auth:DisplayName>Endpoint Path</auth:DisplayName>
          <auth:Description>Absolute Endpoint path which can be used to determine active versus passive clients</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-proxy" Optional="true">
          <auth:DisplayName>Proxy</auth:DisplayName>
          <auth:Description>DNS name of the federation server proxy that passed the request</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid" Optional="true">
          <auth:DisplayName>Application Identifier</auth:DisplayName>
          <auth:Description>Identifier for the Relying Party</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/applicationpolicy" Optional="true">
          <auth:DisplayName>Application policies</auth:DisplayName>
          <auth:Description>Application policies of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/authoritykeyidentifier" Optional="true">
          <auth:DisplayName>Authority Key Identifier</auth:DisplayName>
          <auth:Description>The Authority Key Identifier extension of the certificate that signed an issued certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/basicconstraints" Optional="true">
          <auth:DisplayName>Basic Constraint</auth:DisplayName>
          <auth:Description>One of the basic constraints of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/eku" Optional="true">
          <auth:DisplayName>Enhanced Key Usage</auth:DisplayName>
          <auth:Description>Describes one of the enhanced key usages of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuer" Optional="true">
          <auth:DisplayName>Issuer</auth:DisplayName>
          <auth:Description>The name of the certificate authority that issued the X.509 certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuername" Optional="true">
          <auth:DisplayName>Issuer Name</auth:DisplayName>
          <auth:Description>The distinguished name of the certificate issuer</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/keyusage" Optional="true">
          <auth:DisplayName>Key Usage</auth:DisplayName>
          <auth:Description>One of the key usages of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/notafter" Optional="true">
          <auth:DisplayName>Not After</auth:DisplayName>
          <auth:Description>Date in local time after which a certificate is no longer valid</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/notbefore" Optional="true">
          <auth:DisplayName>Not Before</auth:DisplayName>
          <auth:Description>The date in local time on which a certificate becomes valid</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatepolicy" Optional="true">
          <auth:DisplayName>Certificate Policies</auth:DisplayName>
          <auth:Description>The policies under which the certificate has been issued</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/rsa" Optional="true">
          <auth:DisplayName>Public Key</auth:DisplayName>
          <auth:Description>Public Key of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/rawdata" Optional="true">
          <auth:DisplayName>Certificate Raw Data</auth:DisplayName>
          <auth:Description>The raw data of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/san" Optional="true">
          <auth:DisplayName>Subject Alternative Name</auth:DisplayName>
          <auth:Description>One of the alternative names of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/serialnumber" Optional="true">
          <auth:DisplayName>Serial Number</auth:DisplayName>
          <auth:Description>The serial number of a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/signaturealgorithm" Optional="true">
          <auth:DisplayName>Signature Algorithm</auth:DisplayName>
          <auth:Description>The algorithm used to create the signature of a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/subject" Optional="true">
          <auth:DisplayName>Subject</auth:DisplayName>
          <auth:Description>The subject from the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/subjectkeyidentifier" Optional="true">
          <auth:DisplayName>Subject Key Identifier</auth:DisplayName>
          <auth:Description>Describes the subject key identifier of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/subjectname" Optional="true">
          <auth:DisplayName>Subject Name</auth:DisplayName>
          <auth:Description>The subject distinguished name from a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplateinformation" Optional="true">
          <auth:DisplayName>V2 Template Name</auth:DisplayName>
          <auth:Description>The name of the version 2 certificate template used when issuing or renewing a certificate. The extension is Microsoft specific.</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplatename" Optional="true">
          <auth:DisplayName>V1 Template Name</auth:DisplayName>
          <auth:Description>The name of the version 1 certificate template used when issuing or renewing a certificate. The extension is Microsoft specific.</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/thumbprint" Optional="true">
          <auth:DisplayName>Thumbprint</auth:DisplayName>
          <auth:Description>Thumbprint of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/x509version" Optional="true">
          <auth:DisplayName>X.509 Version</auth:DisplayName>
          <auth:Description>The X.509 format version of a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork" Optional="true">
          <auth:DisplayName>Inside Corporate Network</auth:DisplayName>
          <auth:Description>Used to indicate if a request originated inside corporate network</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime" Optional="true">
          <auth:DisplayName>Password Expiration Time</auth:DisplayName>
          <auth:Description>Used to display the time when the password expires</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/passwordexpirationdays" Optional="true">
          <auth:DisplayName>Password Expiration Days</auth:DisplayName>
          <auth:Description>Used to display the number of days to password expiry</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/passwordchangeurl" Optional="true">
          <auth:DisplayName>Update Password URL</auth:DisplayName>
          <auth:Description>Used to display the web address of update password service</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/claims/authnmethodsreferences" Optional="true">
          <auth:DisplayName>Authentication Methods References</auth:DisplayName>
          <auth:Description>Used to indicate all authentication methods used to authenticate the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/client-request-id" Optional="true">
          <auth:DisplayName>Client Request ID</auth:DisplayName>
          <auth:Description>Identifier for a user session</auth:Description>
        </auth:ClaimType>
      </fed:ClaimTypesRequested>
      <fed:TargetScopes>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/services/trust/2005/issuedtokenmixedasymmetricbasic256</Address>
        </EndpointReference>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/services/trust/2005/issuedtokenmixedsymmetricbasic256</Address>
        </EndpointReference>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/services/trust/13/issuedtokenmixedasymmetricbasic256</Address>
        </EndpointReference>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/services/trust/13/issuedtokenmixedsymmetricbasic256</Address>
        </EndpointReference>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/ls/</Address>
        </EndpointReference>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>http://adfs.lih.lu/adfs/services/trust</Address>
        </EndpointReference>
      </fed:TargetScopes>
      <fed:ApplicationServiceEndpoint>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/services/trust/2005/issuedtokenmixedasymmetricbasic256</Address>
        </EndpointReference>
      </fed:ApplicationServiceEndpoint>
      <fed:PassiveRequestorEndpoint>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/ls/</Address>
        </EndpointReference>
      </fed:PassiveRequestorEndpoint>
    </RoleDescriptor>
    <RoleDescriptor xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/ws-sx/ws-trust/200512 http://schemas.xmlsoap.org/ws/2005/02/trust http://docs.oasis-open.org/wsfed/federation/200706" ServiceDisplayName="Luxembourg Institute of Health">
      <KeyDescriptor use="signing">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <fed:TokenTypesOffered>
        <fed:TokenType Uri="urn:oasis:names:tc:SAML:2.0:assertion"/>
        <fed:TokenType Uri="urn:oasis:names:tc:SAML:1.0:assertion"/>
      </fed:TokenTypesOffered>
      <fed:ClaimTypesOffered>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" Optional="true">
          <auth:DisplayName>E-Mail Address</auth:DisplayName>
          <auth:Description>The e-mail address of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" Optional="true">
          <auth:DisplayName>Given Name</auth:DisplayName>
          <auth:Description>The given name of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" Optional="true">
          <auth:DisplayName>Name</auth:DisplayName>
          <auth:Description>The unique name of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" Optional="true">
          <auth:DisplayName>UPN</auth:DisplayName>
          <auth:Description>The user principal name (UPN) of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/CommonName" Optional="true">
          <auth:DisplayName>Common Name</auth:DisplayName>
          <auth:Description>The common name of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/EmailAddress" Optional="true">
          <auth:DisplayName>AD FS 1.x E-Mail Address</auth:DisplayName>
          <auth:Description>The e-mail address of the user when interoperating with AD FS 1.1 or AD FS 1.0</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/Group" Optional="true">
          <auth:DisplayName>Group</auth:DisplayName>
          <auth:Description>A group that the user is a member of</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/claims/UPN" Optional="true">
          <auth:DisplayName>AD FS 1.x UPN</auth:DisplayName>
          <auth:Description>The UPN of the user when interoperating with AD FS 1.1 or AD FS 1.0</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" Optional="true">
          <auth:DisplayName>Role</auth:DisplayName>
          <auth:Description>A role that the user has</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" Optional="true">
          <auth:DisplayName>Surname</auth:DisplayName>
          <auth:Description>The surname of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" Optional="true">
          <auth:DisplayName>PPID</auth:DisplayName>
          <auth:Description>The private identifier of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" Optional="true">
          <auth:DisplayName>Name ID</auth:DisplayName>
          <auth:Description>The SAML name identifier of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" Optional="true">
          <auth:DisplayName>Authentication time stamp</auth:DisplayName>
          <auth:Description>Used to display the time and date that the user was authenticated</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" Optional="true">
          <auth:DisplayName>Authentication method</auth:DisplayName>
          <auth:Description>The method used to authenticate the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid" Optional="true">
          <auth:DisplayName>Deny only group SID</auth:DisplayName>
          <auth:Description>The deny-only group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarysid" Optional="true">
          <auth:DisplayName>Deny only primary SID</auth:DisplayName>
          <auth:Description>The deny-only primary SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarygroupsid" Optional="true">
          <auth:DisplayName>Deny only primary group SID</auth:DisplayName>
          <auth:Description>The deny-only primary group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid" Optional="true">
          <auth:DisplayName>Group SID</auth:DisplayName>
          <auth:Description>The group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarygroupsid" Optional="true">
          <auth:DisplayName>Primary group SID</auth:DisplayName>
          <auth:Description>The primary group SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid" Optional="true">
          <auth:DisplayName>Primary SID</auth:DisplayName>
          <auth:Description>The primary SID of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname" Optional="true">
          <auth:DisplayName>Windows account name</auth:DisplayName>
          <auth:Description>The domain account name of the user in the form of domain\user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/isregistereduser" Optional="true">
          <auth:DisplayName>Is Registered User</auth:DisplayName>
          <auth:Description>User is registered to use this device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier" Optional="true">
          <auth:DisplayName>Device Identifier</auth:DisplayName>
          <auth:Description>Identifier of the device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/registrationid" Optional="true">
          <auth:DisplayName>Device Registration Identifier</auth:DisplayName>
          <auth:Description>Identifier for Device Registration</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/displayname" Optional="true">
          <auth:DisplayName>Device Registration DisplayName</auth:DisplayName>
          <auth:Description>Display name of Device Registration</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/ostype" Optional="true">
          <auth:DisplayName>Device OS type</auth:DisplayName>
          <auth:Description>OS type of the device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/osversion" Optional="true">
          <auth:DisplayName>Device OS Version</auth:DisplayName>
          <auth:Description>OS version of the device</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/devicecontext/claims/ismanaged" Optional="true">
          <auth:DisplayName>Is Managed Device</auth:DisplayName>
          <auth:Description>Device is managed by a management service</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip" Optional="true">
          <auth:DisplayName>Forwarded Client IP</auth:DisplayName>
          <auth:Description>IP address of the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-application" Optional="true">
          <auth:DisplayName>Client Application</auth:DisplayName>
          <auth:Description>Type of the Client Application</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-user-agent" Optional="true">
          <auth:DisplayName>Client User Agent</auth:DisplayName>
          <auth:Description>Device type the client is using to access the application</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-ip" Optional="true">
          <auth:DisplayName>Client IP</auth:DisplayName>
          <auth:Description>IP address of the client</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-endpoint-absolute-path" Optional="true">
          <auth:DisplayName>Endpoint Path</auth:DisplayName>
          <auth:Description>Absolute Endpoint path which can be used to determine active versus passive clients</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-proxy" Optional="true">
          <auth:DisplayName>Proxy</auth:DisplayName>
          <auth:Description>DNS name of the federation server proxy that passed the request</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid" Optional="true">
          <auth:DisplayName>Application Identifier</auth:DisplayName>
          <auth:Description>Identifier for the Relying Party</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/applicationpolicy" Optional="true">
          <auth:DisplayName>Application policies</auth:DisplayName>
          <auth:Description>Application policies of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/authoritykeyidentifier" Optional="true">
          <auth:DisplayName>Authority Key Identifier</auth:DisplayName>
          <auth:Description>The Authority Key Identifier extension of the certificate that signed an issued certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/basicconstraints" Optional="true">
          <auth:DisplayName>Basic Constraint</auth:DisplayName>
          <auth:Description>One of the basic constraints of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/eku" Optional="true">
          <auth:DisplayName>Enhanced Key Usage</auth:DisplayName>
          <auth:Description>Describes one of the enhanced key usages of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuer" Optional="true">
          <auth:DisplayName>Issuer</auth:DisplayName>
          <auth:Description>The name of the certificate authority that issued the X.509 certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuername" Optional="true">
          <auth:DisplayName>Issuer Name</auth:DisplayName>
          <auth:Description>The distinguished name of the certificate issuer</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/keyusage" Optional="true">
          <auth:DisplayName>Key Usage</auth:DisplayName>
          <auth:Description>One of the key usages of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/notafter" Optional="true">
          <auth:DisplayName>Not After</auth:DisplayName>
          <auth:Description>Date in local time after which a certificate is no longer valid</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/notbefore" Optional="true">
          <auth:DisplayName>Not Before</auth:DisplayName>
          <auth:Description>The date in local time on which a certificate becomes valid</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatepolicy" Optional="true">
          <auth:DisplayName>Certificate Policies</auth:DisplayName>
          <auth:Description>The policies under which the certificate has been issued</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/rsa" Optional="true">
          <auth:DisplayName>Public Key</auth:DisplayName>
          <auth:Description>Public Key of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/rawdata" Optional="true">
          <auth:DisplayName>Certificate Raw Data</auth:DisplayName>
          <auth:Description>The raw data of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/san" Optional="true">
          <auth:DisplayName>Subject Alternative Name</auth:DisplayName>
          <auth:Description>One of the alternative names of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/serialnumber" Optional="true">
          <auth:DisplayName>Serial Number</auth:DisplayName>
          <auth:Description>The serial number of a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/signaturealgorithm" Optional="true">
          <auth:DisplayName>Signature Algorithm</auth:DisplayName>
          <auth:Description>The algorithm used to create the signature of a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/subject" Optional="true">
          <auth:DisplayName>Subject</auth:DisplayName>
          <auth:Description>The subject from the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/subjectkeyidentifier" Optional="true">
          <auth:DisplayName>Subject Key Identifier</auth:DisplayName>
          <auth:Description>Describes the subject key identifier of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/subjectname" Optional="true">
          <auth:DisplayName>Subject Name</auth:DisplayName>
          <auth:Description>The subject distinguished name from a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplateinformation" Optional="true">
          <auth:DisplayName>V2 Template Name</auth:DisplayName>
          <auth:Description>The name of the version 2 certificate template used when issuing or renewing a certificate. The extension is Microsoft specific.</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplatename" Optional="true">
          <auth:DisplayName>V1 Template Name</auth:DisplayName>
          <auth:Description>The name of the version 1 certificate template used when issuing or renewing a certificate. The extension is Microsoft specific.</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/thumbprint" Optional="true">
          <auth:DisplayName>Thumbprint</auth:DisplayName>
          <auth:Description>Thumbprint of the certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/12/certificatecontext/field/x509version" Optional="true">
          <auth:DisplayName>X.509 Version</auth:DisplayName>
          <auth:Description>The X.509 format version of a certificate</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork" Optional="true">
          <auth:DisplayName>Inside Corporate Network</auth:DisplayName>
          <auth:Description>Used to indicate if a request originated inside corporate network</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime" Optional="true">
          <auth:DisplayName>Password Expiration Time</auth:DisplayName>
          <auth:Description>Used to display the time when the password expires</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/passwordexpirationdays" Optional="true">
          <auth:DisplayName>Password Expiration Days</auth:DisplayName>
          <auth:Description>Used to display the number of days to password expiry</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2012/01/passwordchangeurl" Optional="true">
          <auth:DisplayName>Update Password URL</auth:DisplayName>
          <auth:Description>Used to display the web address of update password service</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/claims/authnmethodsreferences" Optional="true">
          <auth:DisplayName>Authentication Methods References</auth:DisplayName>
          <auth:Description>Used to indicate all authentication methods used to authenticate the user</auth:Description>
        </auth:ClaimType>
        <auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/2012/01/requestcontext/claims/client-request-id" Optional="true">
          <auth:DisplayName>Client Request ID</auth:DisplayName>
          <auth:Description>Identifier for a user session</auth:Description>
        </auth:ClaimType>
      </fed:ClaimTypesOffered>
      <fed:SecurityTokenServiceEndpoint>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/services/trust/2005/certificatemixed</Address>
          <Metadata>
            <Metadata xmlns="http://schemas.xmlsoap.org/ws/2004/09/mex" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex">
              <wsx:MetadataSection xmlns="" Dialect="http://schemas.xmlsoap.org/ws/2004/09/mex">
                <wsx:MetadataReference>
                  <Address xmlns="http://www.w3.org/2005/08/addressing">https://adfs.lih.lu/adfs/services/trust/mex</Address>
                </wsx:MetadataReference>
              </wsx:MetadataSection>
            </Metadata>
          </Metadata>
        </EndpointReference>
      </fed:SecurityTokenServiceEndpoint>
      <fed:PassiveRequestorEndpoint>
        <EndpointReference xmlns="http://www.w3.org/2005/08/addressing">
          <Address>https://adfs.lih.lu/adfs/ls/</Address>
        </EndpointReference>
      </fed:PassiveRequestorEndpoint>
    </RoleDescriptor>
    <Organization>
      <OrganizationName xml:lang="en">Luxembourg Institute of Health</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Luxembourg Institute of Health</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">https://lih.lu</OrganizationURL>
    </Organization>
    <ContactPerson contactType="support"/>
  </EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-iam-education-lu:auth">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-09-22T08:30:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-10.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">cgie.lu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">iam.education.lu</shibmd:Scope>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">lt.iam.education.lu</shibmd:Scope>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">MENJE - CGIE IAM Users</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">MENJE - CGIE IAM Utilisateurs</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">MENJE - CGIE IAM Benutzer</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">MENJE - CGIE IAM Benotzer</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for IAM end users of the Ministry of Education</mdui:Description>
          <mdui:Description xml:lang="fr">Fournisseur d'Identité IAM pour les utilisateurs du Ministère de l'Éducation nationale</mdui:Description>
          <mdui:Description xml:lang="de">Identitätsprovider für die IAM Nutzer des Ministeriums für Bildung</mdui:Description>
          <mdui:Logo width="16" height="16" xml:lang="en">data:image/png;base64,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</mdui:Logo>
          <mdui:Logo width="50" height="50" xml:lang="en">data:image/png;base64,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</mdui:Logo>
          <mdui:Logo width="80" height="80" xml:lang="en">data:image/png;base64,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</mdui:Logo>
          <mdui:Logo width="320" height="240" xml:lang="en">
          data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAUAAAADwCAYAAABxLb1rAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAAuIwAALiMBeKU/dgAAAAd0SU1FB98LAw0KLmQ47LMAACAASURBVHja7Z15nFtV+f/fpwulLXtZ2wEqDcq+yb44KqvAsMhmMx0sBPyCMJpg/LEpgiIgRhIYNpFgYTopKLI47IgwghQUsOxb2KRAoZ3SQhe6nt8f54kNmXtvkplkJmmft6++BpObe889957Pec5znvMcUBRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURQFwBQ7oLshdBFwCjB61a4qC5iXgMSo6dmb9dVRlJVcAGeNCb1kDNtqNa1QQQvGWHvjqA/eOlWrQ1Hqm0FBlp+KX88Ow/UY5pTuhtA3tDoUZSUVQBn2Kt52s7WWH2lFKMpKK4B2tFZPgCVo+JpWg6KstAJotHaCsVoFirLyDoEVRVFUABVFUVQAFUVRVAAVRVFUABVFUVQAFUVRVAAVRVFUABVFUWqbITVWHgsYl3EAgP8CsyzMN1iwBgxrW8tGwEbuGPcTNHJbUZR6E0Brscb8T8FeBR4A+4dR0996rdhvu8eEGq3hFAPfBBr0cSqKUi8CaMEa48y42wycOmp69vNyTjDqg2wX0AXQ3RDaCbgS0CwtiqLUtACKwWfuGjU9e3QlTjhqenYa0Ng9ZtxGFnMfhl3M/66jKIpSOwI4B9hz1PTsG5U+8agP3voY+Hp3Q+hU4IZV8aGOb56wp4ErfFwOg4wxe2U62leqZA7h5pbNgNvBLvXucs3nmUz7wavKOxBuntABfMX/CAPwRKaj/f/V2HN8HOzg4KPMlExHe1u9CaCzxqx9YtQHb+1X7YuNmp79Q3dD6I/AdGCjVUoBLetgzF6er45ZWW+Zaw3s6neHFgiHW3bIZNpfWDVeAhMuoda2A2pGAMPNLecC+5YwaBsBVEQAB/Xf+4kBMv0hfnkiuHTU9OzGwGuavGpltnZaNjBwWJC7wxjA2HtWlfqwJb3wZs3xzS3hmim45aeUlmZux0pdsr8E0ABTRk3PNg9EvY6ant0aw1uawm+l5YelNRyzaTjcstoqMAQImdJc39bARTUi2g0Y1qVEn324uWXDehLAqaOmZwe0pxk1PRvCmrkqgSsX45tbhgIXltpwrOGRVWD4W2q2cmMhFHZ1ONAujHvLGk/CpvUggBaYM2p6du/aeC8YKzPDqoMrS1OHI8t8JfdY6e0/2KOM+gPLrTXwHLcu42ALbFnrApjz++1WKy/GqOnZOdbySzQ0ZmVq7ZN9vlnq1dEZzNDx4ZarVvJOYZ9A26mnVXzgAA9/L7bW9rRCrfUrs8FyUK0LoLFw/6jp2WwtvRzrf5C9EPhQlaP+CTdP2AvDMJ+vD/bp6KwxK/2Oh9t7fLbYwhIfwVxzfHPL+AEs75kY01PojHnB11gxtiKiXS0BtMCy9adnD63RF+QYlY+Vwta53ufdm5PpaP+79R/1DR8fnnD8ytkptGzs89VCA7f4WFTWwCUDVN6vYFnbeAvdGQE/rcjS1+oIoMVYqNmQg1HTs0/h4gPVF1i/DT0E7OAjcM/Jf3T5Nnhj/riSVk3Ip03OB27CWuMzWhs7vnnC4P73YPCQn0Mq09H+RNBAP9zcsnlNCqDFYqC5xl+Un7uOT6lTLrD+HdiZ8iZGrfVsXgYYEW6esBLufW238tGLOVj7rMXfLDaY2/vdhreM9RQQay+T/zcv4Oc1KYDWGJMdNT07v5Zfk1HTs5PALFEdqUvrbx2LbekxbHLRvzMzHe2vSvN6NXjli3lq5dM/7xVAQHcmM3kxxjzhP/Kx+/fzc/wtpudqNGuswZhrxUKc63en1to+B0RXQwCNhQfr5HV5S+WkLjlJMqgVmjHGWntH3hBqEdjf+zV4ix2z0tWMwS/k7OMVIx+/QadZc3x4wvf6cfh7Ot4z9WQ62t8XMZnr8/yMMeaAmhNAiwVbmXV6VX8A1t5lrboB687IwV7h1YithSmZyacVmBMX+DV4gxkUbm5Z2ZbHbeUhNGB5QYa6TwYsk7PGmMv7yfrbxsBIj2djwf5sRYF4x+/5Wdv3meCKC6DBsP4H2dfrorM0psMYdQPW2fD3SOM3vWt4pvCzTKb9E+B9HyvCQmXiyWqjbrx9mpJt+Fmxihcba67PBdn1aL6wabi5pT9WiN3vKyHW/CGvQI8EtN/h4eaW4TVmAdZPjN2o6dmXVFLqjrR3whcLcKKPpXCAjxVhgKHh5pZzVpLx79d8JAXI6xwMSRu8GODO6o++fMNYZkunlePRgBEcBKb8GgABxDKnzt6aBaopdWP97QmM8m5P5p0Vkx9fZkpm8hsBEU8W7EUrQ/1Y2MrrPq2z/P4nKpmO9jeAOfiOhe23q1nO8c0t1xjjqz2HfcmC72ifFjCEw2LH1tYQ2LCwzt6bRSotdcNvrc/QzWB/UUQcjvN7ZS1mtXB4wj51b//Bnl6GnbHM6nmsacH4hYGZNcLNLSdUsagn4d8j/cfjs8/8DFuD6VOegUHVeQ6KUmGrIdzyFazd1/Qc/1pgbqZjcnvwS2nuCXhhLcb8bSWwAff2ucEPPWzmvwU0VYu1ySpZ8bsZ7HA8Jz+40s3c92BWwCm/VWsCWIcdp1LzD8kQ91wvKrkmi/0+09H+hbX2dz6Wh7Gwejg8YWSd11LI2/jtKYCZzOQvwF7tVx8Ys0mVxun3+aZksPza51efBJyxtixAC2vWmd9khMpLbSMzfT/07KysJdPRfnqJKvpL67P6x7h34dm6tZCbJ4wJ6OBf8fnqCmv9V0OFm1s6q2BurOc9iWU+z2TaZ/o00oeDwtXCzS2jaskCXL/Ohg2rqcTUPKcENKiuUk8ypaP9MyzT8PM/GbNlvVaQsWwb8I7/y8cqfsfAp371YW3fhpceQnVjgOYcGvCM7/ULVxNhHFczAmhg3Xp5abobQocaHQHXfhdlCcjfZyaUOZY+CN/AaAaNb55wc30qIFsFfPlMQH2cgK8byI4MN7dULmuOZYJP/CHW8u8A98XTQYIDbFFLFiCzGkJH1Mfw156q60Bqfvh7lF+suoWXMx3t08s535SO9pnAcn+PiGmux3qysLvPO06moz1oyec/rK9BbCwV2n1tfHPLnhaG4T2JddOUTPui4E7QzvXWPwPwjZoSQBOcx6uW3ppd1f6reX4X8J79rJfn3NfXHoLB4eaWU+vPAPRJgmD5NOh3mY72RQaT8nGxGWDDCmnCg14dmfNB2qJbcxrDx/5D9d4ncajWLPDX6+S1aUCpZetvD6/hjaTBmpnpaL+rl6d+JiAs2gLX12F1beFjxX1QgiWQ9HOLWvcc7q1A+db0EbZFmY7J3SW01Q99XRfGfLWmBNDCqO6G0P61/LZ0N4Q6dBlwjRvolgs8e31rDdbe2NvzZjralxjLOX6mFJZB45tbtqqjjmJTn1lSi2V68fqY/F9jjKeFJZsmfbOPw9+MZ+5NawHTVKKmPBz0Zbi5ZbNaGgJbC1fVduOyR6jE1HSjHm2wh3r0+tYYYzOZyef18SW9KugFNpZn6qir2M5zltRiMLxR4kmOw/rtv8GIcHPLcb2uastxnh2ZW8r2eIkN9p4igtOrmeBqDYGNgW26G0I12Yt2N4R+C6yhMlPTnOUb+GztX/t68kxH+0LrMpJY/0Y/oU5CpMx2AcrxdIkGwb+sCXIM2F65BcLNLYe4pKeekx/tUzomf1HKeaZkJr8QVHxj7La1JIA5X8oDNTq0+rGmwap1o4af4JXzDwvGfL9CVzke/5VABswTdVJbX/czvWyJluyUzORFBlI+/YGxsF7vHqNvZhljrf1xmeeaFfCsGmtLAN389ObdDaGLa8z6e9nAUFWYmh7+nuFvmJmnMx3tcytxnSkd7fMICAQGdg2HW+qhp9zDrxG6TDglC0zCb2GIMYZwuOW+8mXAe9tSay1TMpM/LVNNP/HNYGPpVQabqq8Fttae390Q2rhGxC9qrd1GY59rnsu9lktZZwGeW+Fr7e7r+3Ld+BU1byx7bSzkvilLYKZ0TP4A+CjALVDWypBweMJf8Z+5PaRsMTW8h8/KBQvrjQ+3lG3YVF0AJZjynYF+SWaNCW0FJHXoW/PW3xF4r8+2Bt6b0jH50Qqrx9sBHaIFouHm2rUCw+EJmxsf350tYQbYg6MCOoTVw80tx5bR+A8LsK4f68V4ujPoS2PKnwjpj2wwBhjW3TDu04F6SbobQpsYY19B9wGuA+wvfUYSBiq/10wmM3k5Ppmk5d21Fo6s2eoyZge/LTMw5v1etNb/FOkQSgo/Cje3HCb64jX50emT9ir4zTD2UQJMdfz2RB5gAZQXyazd3RCaNwDity3wgTwHNf9q2foLt+wIZkefxrwk09H+uypd+taArtFg7Z01XG07eu+PbI2h5BCYvGFw+xLgN/7t2K5d4qn+6mVwyMqPCb250Skdk18LUhgLu9WqAObEZ2R3Q2jZrDHjdugX8RsTOt9a+xK55LFKbWPsz33tHOio1mUzHe1LMEzyN7IM45tbanXV0I7GZ4c8epvey5IMGGgSbm65v4j1N9j6tDljDJmOyZ/14X5nBPRUZWevGTIAD2wQxjzf3RC6b9T07GHVusishnGfABuY3J5YSm1bf80t61hrjwlw0X4/3Nzy/Wo4MWxuoGsCMyQ/R4XWxVa07NjdveYFxNfdKwHMZNo/Ht88YYbBbOxlDoMpJjQ+kx/WWsv3+na/zDDgN6m6Xy1bgAXWKod2N4SWdjeETq/kubvHhCbNGjNuOZgNZGig4lcfnFNkgkq2gKj8/4zLgBx0cWMwG4SbW4bUWqUZzGZ+SuG3SVSJZz7c+hrjDAuHW74b8OPvGM9wFWOMMXf1UTveDPo23NyyVs0LIP9bYshgLNd2jwkt7W4IXdsn4WsITe1uCC3D8H1jTM7+VvGrH87G1vAklcECd9dSkcaHJ4zzS5Rs4fM+3u7zRbqjST6W/In/66h68kCmo31xH2+72OKKspLaDhrYd+p//fpg4PRZY0JH9+F0u+VZeyp89TT8DbecnjNnariYxsKh42vICjTG7OBntxrDe305d6Zj8lLg1/hHTvgtJZ3kI8gA4ytw2/cHj5Ht1+pGAL1qqNc/typ8dYvhIp83wK740x//cu+St10lo4pYDdXcTgHf/bcC50/6tSlrrQk3t9xaYP2tgX+2bTId7X3eMzzT0f6R9csq7aIF9i3nfEO09SkDPIw7BNjA54U2UzraTT+XZ4gxZknAIZeHm1uuyHS0L6txAXyzAmLTHQ63/BfDZp6KZjmq4HndZbz97tbChErdtLHmQwxjPIpkgLLWBOu2mMpAD+Mu9LG4rHGzif3KlMzkpVheKnLYXjVSfbsEDIf+XSG1Oczr8RgnN8PCzS0bi/U3yMD+PhagMfDnCg4Wg5K8bqMCqNQF4eaWrwF7GO8ZWAOcPUBD8v2K+GT+USNV2ODTqwD8p0KV8VrQBLmF3DA4YGMi+8+MC7CuUKdpXwwoD+ObJ5Sce0AFUBlIfhHwHj+f6Wh/bSAKlelon2OD3MkWM755woBu/xoOT/DPten2Sn6lQnWx1FouwcdHa6zNWcPpgPqqcLyvecS/7wKD2VoFUKl1628o1mdW0KnPZQM6NIdjfcNyDNZgnh7I8lkTkATVmMouOTX2t35DW4wZGm5uGWSt9d2ZLZOZPLei9w4PFTlkOxVApaax8KuAJFRzMx3ttw5k+TId7X+RsBzPrNTW2i3CzROGD6BA7xLwdUWzL03pmDwn4JwGiPusorHAaZW+9ykd7d3A0oBDSl4RogKoDFQDjuPvaLu2FsporZ2Mbz47LJiBLGfQDPC7Vbjewf7eCi4znptXYSgxe0wvOtD3A77bWwVQqeXh7/9Zawd7i4sl09F+Xi2U0xgz0V+kjQEmhptbhg1Q8Xb21SNrs1W43tvek/V5yxl6Fua56oUL2Q/9no2hZ4iMCqBSS5xtvLN4WjC310ohMx3tyyx2ZpEZ4RMHxjr1SQhgAGNeqEZdGMyFlLNkwZgDqzeCMNMIWPgwPjyhpCVxg/zNSM0dWtwKV8plfHNLI/AVz5fXJT29oKaG6pY9iywwuiHc3DK4Xy3o8IRtiiQ2f7Y6lcEV1m/TEI/Wkelon11F98SDQdc2xpQUDzgoQGGf1kYeKH4PajX0pg1xoW+dGvOfvmUwqYIVmJn8joz8gtrCDv1cizsVsdZerJJF/LnBvFtC67DW2LOq+x6Zv+OXCcJJ9C59HQL/El1b628YWH6t1VCm5dLcMgb4pr82cmlNPmzDWUXawtR+7kV28m38sKDK1z6gFHXCmlR1O6b2+RizKMBE3KdPAjhqevY+4Czp+tQSzFUrFmvt19f/IDu3VgtpMENqcuBuuTrIaMh0tP+5Fusz09GeLDIc+9+SsH5in4DkrTOqfO13io6N4K0pmfb+eNNmBfRa+5dygsBkCKOmZ5PdDeNuMZgzcOsfl1ez1Zo+PDxj7ANBKX0r0HgNhtuw5k/rf5BdWMsqncm03xNubhnkZ2dlOtoHRgYNvkk0p3RMrvFO1g7yMwJdmvd+rFNr9/V71atdjkxH+3LA+O6U14/vV6ajvaGWd+xTFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRFEVRlL5itAr6zvxJo8cBNwF7AZ8D1wM/GznxQ6u1oyi1yxCtgj6L3yDgbmBb+Wg94DzgI+Dqmi58OrshcF+R92A/IqHP9UkrKoCKF3vniV8+p9S8AML5wNcDvl8KLNdHrKgAKn5s5/P5tgNs3a0B7AJsI/86iYQezvt+LHB6kbOcSyQ0Xx+xogKo+LG6X93OnzR66MiJHy7pR9HbDjgaOBTYDRgs37wK/KTg6N8CQwPOdg/wO328igqgEsRcn88X9Iv4pbNrAd+XIfcOHkdY4BQioSV5vzkQODbgrG8B3ycSsnm/2RY4BLiJSOhTfeyKCqAC8B+fz6dVWfjWB+LAGcAaAUe2EQk9mfe7ocCVAcfPBg4jEpqd95uRwJ9kKP1L0tlJwMVEQh/p41fqmUFaBX1j5MQPpwGPe3yVqpLwrU46ez7wNnB2EfF7GzfRkc95wNY+xy8BjiISer3g89+L+AGMAH4IvE06+1uxQBVFBXAV5mhcHOCbwLNAZOTED/9cBfHbH3gBuBhYs8jRS4FmIqF5eb/fTgTQi+VAC5HQ4wXXPAdo9jh+dbFAXyedPU5fAaUe0UDoeiCdHQb8BvhxGb86h0joN3nnGAw8Cezuc/zpRELXF1z3aOCOEq93G3AakdAcfWCKWoBKpcRvc2BqieL3FnAOsPmXxM9xQYD4ndVD/ByPy3WfL+HaJwD/IZ3dQR+aohagUgnx2xO3ymTDIkf+S4bF93xp5nbFefYDHvPp8M4lErqshLLshfMnHlbkyAVAmEjobn2Aigqg0lvxOwD4KzA84Kj/4uL7/uIpfCvO9TBwgMc3USKhK8ss135AG7BjwFHLgZOJhG7WB6moACrlit+BwL0EBypfBZz/pUkO//PdCuxZIFBnEwn9uZflG4KbALkIWC3gyJOJhP6oD7QyxKLxicBEYFIylZi0Et7fAbiVVdckU4l+WUCgcYC1J367y7DXT/xm4mZrHyz5nJHQ9ypaxkhoKXAZ6exDuPjAcT5H3kg6+xmR0F/qvGGOAEimEgsGuChjgUZxZ9Rzfa4NLPAQuRuBzYGXgL/1R1l0EqS2xG9ToDNg2PsCsHtZ4ldNIqHncBMrjwS8X+2ks7vU+ZN5FrhWX9CKiN9YYA7evuRLRQT/1V/lUQuwAsyfNHqsx8efjZz44ewyxG8YcBf+Ex5PAIcTCc2tqZuPhGaTzh4KTAa84gGHA3eRzu5MJNRdgQY0SCzO4cBHyVRipscxI4EtgMXAm8lUYrmHRTc0mUrMlfNtCQwD3kimEl8UHLszsBXwn1g0vo58/HkylVgWi8ZXx8VDzk2mEjYWjW+Oi898Jf+asWh8tDzXj5KpxMdl3OtQ4Ku4APU35X6Cjt8CWAt4J5lKzC3jOhsAY4AvgBn5r3a+lSbl2VI6tjeSqcRij3MZYDSwAfCJ3HO+f3qC/B0p9bk8mUp8Jp9lcOFU8z3OO0SuPQR4O5lKzPexLJckU4kFee/AInkHPH3kFfcBtnY2boFLEbU98BV58COk4J8B84D3cSEbrwJT25q6ZlfguoPEGtlb/AgNwNryYi+Sa88E3pAe/Sl5scrhi7amri88BNCrcq8cOfHDaBkCmKBnwoIcjwOHEAmVPwRz/ro9pV62BjYDRkq9zAW6pXE9AzxGJDSrl9brYHmBj/c54i4ioaP7KH7NuCQOm+R9fFsylfiefD8Y+BVwltwfwIfAD5KpxL1555kkDbEJl7x2s5ywAWcmU4lb5LiJuJRmIwuKsnMylZgWi8YvBH4B7CR/c/c3LJlKLI5F418Bbgb2y/vtA8CJXsJdcK+H4YLrcx3iq8D9cm8XJVOJC/OO3U2uk1vhsxy4BTgjaNgugnEzcKTPIUcnU4m75NhTcbGo6+Y6eOC8ZCpxTd75GoE/SrvP8T4QSaYSD8ei8T/g1qzn814ylRgrv5+Gm1zbOZlKTMs7bxQXxpW79mLgGuCcfBGOReNzxHp8GOefzo2k3gSOSqYSr1TFAmztbBwNnCYv/9d68fuXcNlHbm9r6nq2zN9ujItVOwnYqMr2zkXAhVUY+jbKi+037G0qW/zS2RAQBcbjkrSWwnLS2b/hJljuC5xZ7mkJLiOdbQHWAQ7yOOIo0tmJREKTeil+OStzCfAH4AMRnqfyDrsAOFc6uKuBUfLZHbFofKdkKvFq3rGDxd1wr9zvHmLB3hCLxu9LphKzRDz/KnX4bxF45Nr53C4dbicwW8RvOPAQEJKyTMUlk2iR4xsD7rUB51sdIcdOBQ4EYj7HPizH/lIa+wTcZMlC3LJFPy4W8btZ/ntr4C8iMAdLPRKLxo8FbsBFHZxPbhINro5F4x8mU4k75Xy3AhsDv8Ytw9wSl5koF0c6VTrj7UTcXxQhDXrupwBJ4FMp4wIgInWxusf97S8dzvW4pMTfA3YWF8Y3KyqArZ2N60uln0LwjGUxtpN/57R2Nj7W1tT1rRKuPVhE4xcePXQ9+f1WA67zscY/AY4oa9jr1uYmgJNZkQ6rVAaJeB0EPE06eyqR0ItliOBi0tkTpBfe0uOIBOnsPb20Ms+Rv9FkKnGtR0MZLu/DYuA7OQsrFo0vFoE71aOTuT+ZShyZd44X5T3cHbgvmUo8JMPX8TKs9VvfvRGwazKVeDnvs+NE/O5IphKtuSFeLBrfDvhGLBrftuD4fFpE0B5MphLHSdmSuMmPbxQce6aMdH6VTCV+IcfeLo0/EovG4wFW4P7y92fJVGI6kI1F44+J2C7Mcwfklk9OSKYSj8s1XgW6RIDulOHxhtJB/T6ZSrwvvzk3d7FkKnFTLBo/Quq4M2ddFuFn8vf4ZCrxN7n2H2UE+YNYNH5xMpX4sOAdjiZTid/LsX8WMd63oj7A1s7G70qvMKrCkpAt4dpria/gkJXAhfhj/JMTtBAJvVeG+O0mPfimFSjXHsAzpLOnEwndVIYIziGdPVZEcFjBt6OkFz+tF+XJhfH4zSjvgEsMMQs4IxaN5z7fQv56jUwKJ5Neksa5Wpllm+whZnvL3zVlqFzY5rYC/AQwN2l0d5542Fg0/pCHAOaG1+MKrrNQrPHNZfjsRS6Eam1geq68ecPonL90J/nsoFg0nhPNEXn3QTKVWBKLxh8Wy/HlWDR+Iy6c5a0+uDxGS/kXkDfRlkwlZsSi8aki4HuLlUyBmyF37DuxaHwhPhOLQ3opfhfJ0KIa3F3k2iPE5N+97qUvnV0nv4csIEUk9FAZ52qSTmF4BUu4GpAmnd2wpNUiK0TwBdLZc4ErPL49hXT2CiKhN8poCOvkRhgBkwgbyN91Zeifz1xcXsRCCs+1qJf19I6PVYhYHrt7lGdYwPlyRsUMjxFBIblsPEcAyzyuE9TGb8Ilzu2IRePXi/jvKUPfF/LqNTc6afU4//ICq/dC4P9kiBqNReNp8UUu7kW95lw3Mz0mMWYV3H8+hfW2uGIC2NrZ+LsAfxV5vceL0qP+Fze7lCvsptIbb+MxbF6If0hFjj8GiN8C6Q0eBp6TSlosjWIsbte2o4FdA87/iZjMczz+PVZhCYzlOXa/5BimZxqrIPH7pviMVi9y5KfyTD7BZYtZT6zPhiK/u5R0dkaZ/rurgLBHXQ+WRhIu41yfSeMeHIvGN0ymEl5CkJtIez2ZSpS6HUGlgm29zjMzb3h5RZnnm10ghIWCUFg3ACckU4n7yrlIMpW4XiZbDhLL/FNxx/w8bxY7JzTLgA2DhCyZSnwO/CQWjV8sIvgzcY+96tMZFiP3nDeKReOmQAQ3KLj//HKU3JENKVP8zioifi/hkm3eUWxmVyy53XBLtJpwsz8PtTV1LQz4zffwn2W8Azijralrhsd3c6SXfhS4pLWz8UAg7TNU/BjYp62pq7qbAaWzI3DJTL04q+RJj3S2QUR/9YDOqB3nFH7aZ63wVvLCnh5gmVxPOvtsyT5BNylyBvC0x7fHk86eW+rwPplKLI9F4/8RMT1GGmnOOhycTCWW4RLQzge2jkXj2yVTiZcq/MRWL/P4J8TveEwsGr9Sylgqz8t9fgcXF5fDa+LkcRkGHovb4a+cIeZ3gMOBU5OpxI0+dT9f6n5n4Lu4iQ6/8w1KphLLk6nEp8BlsWh8Fm7CavsCawxK8NsnU4lPYtF4zi1xUM5lEYvGNxZLdTluYqXXDClD/PbBoF69kAAAHQlJREFUhSB4MR8XwnFDW1NXSTOHbU1dC8SJ2gX8vLWzcfOgSmntbByCm4b34mrgR2Vc++HWzsZdgX94+Ia2x+W/a6/yALjFx386lUjojhLFz0g5RwUMzY4nEnqmiFi9BsRIZ28A7vTxlw3DrezYi0hoeYki+C/S2dvpmX5/MM55/9My6usK3CzslbFofEeck38bGdp+T2K/fg1cAjwSi8avkaHQGPFLXZpMJXqToOG13BAzFo3/Qqy9vyRTideL/O423Ezp3lKeP0l72wrYKZlK7B3w21twEw/fjUXjt8hoZj+5Dy9L+xTgJAlreUB8etsC6+VP8vi4OADOj0Xjh+dZVK/hJjJycZu/wM2G/zEWje8qFt1G4o/szAuFeVcmHXK+zdwM7XN518zV2wUiZCOTqcQvA8p4iTz3W2PR+LXit4yID/LGZCrxQV8a4aASxW+YWEyDfEz9fdqaun5fqgD5iNJ7bU1drwQccjQr4rUKe9pouddua+r6RKxJr575dKrPST6fX1zGOcJ4TO0LrwJ7FBW/LwvWq9LQ3vU5YvcAC9yPX/l2AC5GsdTh2hTchNF8sVYvlLLkzwBeJqIzFBey9Hucr7qBnqErpV73KVyYyHC55q+B9Uv43SKck/5uqdNrZHR0mo8vL/+374k/rVs6yiRuMucEj2M/FMtwqlhoN4ih0uzjmyz0jc0W99CR8q9F7vFxiaskmUp0Sl1/LIbOjXLMnrg4v3xXwFmiFWkR4evl3/+angjkV3HRCq0lPPcfiHvsPBHETeU8Z/S1EZa6FO50H6tgAXBgW1PX8/0gGCf4fP6TtqauZb0U3Rekpy5kLwnortbw92u4WdZCXsEFu5ZyjiEBYvk5btXIzLLL5n4T5J87t8zzvSA+2UI28rFoghrDVeL72VYs9fWTqcRZed/bZCpxOS4cYxtxq4xJphINyVQivyP4ofhe7y24hOfnyVRiIm42cmdgg2Qq8c88wV03f0he8LsZyVTiKLHQdxJ/6zryWbF7vQcX8L09sGUyldgZNwO+rlw3/9iXxaLcUMr4VWDtZCoRDRiu7i9D5r8Do5OphBErf5y4srYmLzohmUr8GRfgHJJrbA6MSqYSf807ZhwuDnAH+bdeMpU4PX81ifhvd5Bzbyfim2M/ub8XC+7vD2L8fDXvvD/y8EdujrdP3e/z4itBxPp7V26skP9ra+q6oR/Ej9bOxk/yHJ//M6fbmrq26uN5j6HnNDrASW1NXZNKOUfZK0HS2bMLX+KcmBMJXVGiAIaBDp9vzyQSuqaPIv1n/HeO251I6N9lnOtYwCvzzI1EQqei9DsyUXE+cHj+Khn5rkuGt5snU4n/rsz1UMoQ5Cgf8XumwEFbTfEb7SF+UJlZ2X/4fL4bMKlKt9Tk8ZllxUqDUjjZ5/P3ZOjXV64LEMDv4lZGlEqn+JYKQxYOQxkocn6538ka4plilR8t4veXlV38Sh0Cf9/n80urPlP6ZRPWz8/VJ9qaumaKf6GQDatyJ+nscLzDeJ4iEppR4jk2Ab7t8+1Nkq6qr3SxIlC2kLKGrkRCi8gLTs1jE9LZr6oW9T/JVOIOnE91MM7HOAXnk1sX50cNrwr1MKSI5TXcp6HNpEjAcoUZ4fP57Aqd/1N6BkquV6V72Q3vZYMPlXGOAwLcF3dVpJQujOU5eq48ANiedHaYCFupPID3BMq+uAQV/Tn8Wwe31GsRqzDiU71KMuKshWS1WZXqoNgQeD+848Lu7u3EQy+xA1AP1WocO/t8/s8yzvFNn88/lEmHSvGCjwDmwjnKmfx6wufzHUsUrRtxS91aepstOBaNH4cLG9lY/v81yVTizJWpQcua6A7g/WQqUdIughL0vEru5ldsCOy3YuKRfi6n38Pp8zC1tbPR+Fh73VW6F791v+VkwfET0RcrXNagWeSGss4UCb2Jm50uZJsSGvXquOwmJ1BCCIrPOdbDxddtjJv5T5dpddea0G0Ui8a9ZpM3x/nxIjrQ77sFuJPP58/0cznfLVMIymFbn3qo1rDMK7zmEyKh0obzLvh5G18LMJ0dW8GyBmWT2aAX53uVnv7Pr5RgoXwRi8a/DayeTCU+6uW97IJbzfFULn9gnXMmbqmZKair12LReBOVcw+t0gLoNfmwmOIBlhWlralrdmtn49se4nFQa2fjkLamrr44/Q/w+XxqlW5njMdn75Xx+w3xX652Ev4B1pVmjV52ZLuXUB9erEmB7zQWjX8LsMlU4rFYNL47zp+4DHg8mUo8l3fcoLzOcpBYTguSqcRDeceMwi09Gy0jjgclIDn/euNwcXkPyejpOLFIr5UlY/sCqyVTib/Lf++Jm0h6IJlKvBuLxtfARQBsigvgviuZSswruMZquNUjX8Vlc5kO3JOXNZlYNL4ZMkmRZwW+lUwlXpS0VEO8nk8sGt8UN/O+JvDPZCrxZCwaPwSYl0wlnpBjRuCWnRXWj+fned8djovpm4NLJTZ9ZRgCe62V/bCf/X857vWxQib2Yfg7BO9VH5/i1lhWgw09LcDSGV0nnScl3ufqpLOliGkHbpnelwwe4O5YNH4dbs3x74AU8GwsGj8777iHgMvlv3eX89yQ14CPEHFuxy23/D3wpmQizqdJfnskLlj4Jjlvrj1cDHRKZpXHcSsyrgNei0Xj3xcXRUau0Q48J8vXcuUwOL/ro1KG38h9vy6hKsSi8S1ldJIzBu6Uf7kh78jC+5PffQe3DO06KfM/ZbngPXw5oH5Dr9/7fS75Dd8Qt0Ku7t6WbNp1L4Be0dMfD1BZJ/t8nmjtbOxtKMVF0tMWcnNbU1e1JkG8ZoDLcUCvXccjjtkVFNMca4klFpZh7oXy+YUyIQBuyVRuxchjYg0eKg24ARcCMgKXnWcnOdcCIBmLxr0mgW6U73+MS/eev03CCFz85DG4Gf+/isU+CZeteW8ZdXyASxp7fN7w1YqAnybW1KYiOhvjtiFFLMI9C9xAO+O/Tp9YNJ67/nDcuvlcYoOjKD9pbv55B+MWEYyRutsIt/zvM1xm7c3qfQjslQHji4EoaFtT179aOxsfoGcS1LWBrtbOxuPamrqeKNHyGyz+k/M8vp6XZy1UgzU9PitnCL9aHQug32z+OvRtFvLXsmY0t6/ED8RS3gJ4OZlKvB6LxnOTT3Pz95tgRfblW/IyPj8fi8bXx80Yn0HPYPnZwN7JVMKvzJdInB2xaPwiXK4+gJNzQ0PJk3cBBUtMk6nE9QUicx1uUmNL+X4hMC2X8LXgXvz4llhwrwM/EqGdJuFAN/Wh3hul/E/k1d3fZcb+bBHYq+pZAGuNn+LiEgtFYGPgH62dje1i4v/ba5je2tm4jvT8/w//8Iuz25q6PqriPcz3EcG+WJD1Tl/3252Wb0XFovGZIoCl1FUuVdNTBZ/nVrp4TQTeGSB+yPC40Or9tMAv9qlXG4xF41/H7WOxtbwnYyrw3HOjnGcK4vym9bHed5C/IUmlnyMXITCm1l+8uhLAtqaulyQn4dUeXxvgRPk3r7Wz8Xl5+RbKUH6MvFRB659vbmvqqvb+r8v7OKydH/Ddz8Wn0x/0JruKX7qzxX0sy6cVaAOLPEYC4D3hVGyG1St86LMShpQ/wPnQFuOSYkyVYeW4PtbP6j5lKGeL1aEBz3NhgQU/RzqBN2pdU4oJ4Bcew+C1BlgEr5Gd4H4WcNgawD5lnvpm+id2aqaH4JUTUvJFoBBEQtNq+H3z2rVvWZkNsdLk0jkV+qvGyt/ezGb2NnA/55I5VlJQIXn6JlbgnYOek5obl+Fq8bLmcnXzUikZbmqRYpMgXsHAm9SAJfhzXBLI+RU43SLcHhIn9dPsttdMaDlDhaAGuWmNv2+jPeujnO03K08undNE8fvlNuHOrRC5rx/LknON/FfKYWQ47Gv1SmhOMXI+zP1zs8lCs0+bt8DGsWj8a3nl8NrI6mFcDsCDZeieb81uJuExdS2AXo1t49bOxjVqoOw34Z8OqhSW4EIRtmlr6rqyL8lcy8QrhnJzSZFfCjPwTuIKvdiTuZ/xKt97A1mgZCrRhdtPZXPgjVg0/gBuZ8KDcZmR2/qxOI/J37tj0Xg78B/crLHXu5mLU/1HLBq/JxaNXxVwj2/hZrqH40Jv/hqLxp/DY2227OvxN5yraGosGr8PF8B+EAVJQyQZ63liLU6NReMPxqLxu2Qi6j2qlVCkHwXwbZ/Ptx3IQsvytUm42b5ymI5L4vBDoKGtqevEtqaut/u5+F5+EYNLDlkcl+nlNZ9vd63ZNy2dXQ/v5XOlZvR5ApehJp9n8M5a4/X5LPnMa6+QZuBH8r7vKm6GFLCvCEL++9OF/8qkaR7X/UI+e8rjXeziy9vAnobLmzgCN9n3Ki64+yZ6TlichvMTDsNN5ORGFkt9rncKLtvLp7hYyHfkM3zqY7KMsHbBhe98U9xETxWIYAI3S/0P3KTIHiLYSYKXUtYEpojQ+CXu/GlbU1diAAXwV3j7AB/GpUtfIL3dGmItzQc+rlZsX1kJUdPZI/HO2HIWkVCyRDG5GTfZ48VWREKv16AAHob3BE3p961UlFg0vpNYmV3JVOKbq2IdFJsEedrn8yOkNxkI8dsJ7/i9W4CTB2iVSjk85fP5t6TXLIW/Bwjg8fjvwzGQ+OUvnIqi1OgQ+Em8Y7T2be1sHDtAZf6JR7lfAk6tA/GDSOhjGVIUcqAkSy2F+/EOpwH4AelsLQZLH+Hx2UK+vGOYotSOALY1dS3GexbMUHxz9GrhlUb9d1LWesGrTlfHrTEtRUQ/QfZI9aCBFdsR1srwdxfcZjo9XRaR0GJthgPGQlxOx+yqWgGlBELfjPfeEKe1dja2tTV1vdmPw9918F6f/Hyd1fs9uHWkPaSNgI2nC7gOl73Ei4tJZx+Q/X5rgZMD6qGukQwvQ4BFskytbpC9jXdalXuAUgTwPukhCnvwocAtrZ2N32hr6lrST+X1G+JugXPm1guP4jb2LoypPIB0dlsioZdLFNF/4b2/yEjgHtLZbxIJDWxaonR2HbwDeRfjvVNcuQL0OG4WdL9kKvFiBc7XIaOM5txuabFofFt531/J34oxFo1/hRWbgH+HnrPUXuefI+KzTo0L+w/lnk6vl9RWFR8CyzB4Of5O9T2BGyUspeq0NXV9jvcSrLbWzsawWIi1TyS0DBeD6MVPSzyHxflD/eIXxwFPkM7uXiEhW5909keks+Uubj8T7yVwdxMJVSIN+5q4lTWDK/R0Rsr5hooQDJcRxr/J2zdGgqXbpVM+XOIJS2FtaiijTywa/45P1paTcTn+dmclptS1wO0yPPNKDXQiMLy1s/HktqaueX0c4m4MDGlr6grqcf6ES72TzyZIULTsHzwP7/TrOZbi1kV+JoL6Gm529tl+3OnuOhGwwobbQjr725KswEjoCdLZK+Q8XmwOPEk6ewNwOZHQu2WK3jhceqPDcEkkhpRi5XxJNFekcerRadVJG9lRntHDyVQif8nevrjUcPuVmJGlFq28cTLCO4meW8CejIuJrHs3RZ8FsK2py7Z2Np4ivaBX73UcsFtrZ2MMt2FSyasqZOP17wATcDOFxxO83OsSXKCmX5T5hvQ+An1ma2djBriyramrulmvI6F3SWfvpKd/dRBwBaVvPXmONFK/zNaDcUlfTyOd/SduP5dpUsdzxNJZkxWZR76GSxqxC/7bkZbKL33el2eJhB7vRYMdLPWyJW4N7/0ErI2OReO74nLyATyZTCV64yvOLfGalHfeQdJ2HgW+HovG5yRTiXc9rj9SOo5NpJN9BI/19bFo/CBc8PNDyVRiQbHP5bs9cHn9DC6ouSvfBxmLxsfKMxyDi4N9NJlKvFNgwebiVHeRofmSvE3S18IlfVgLF0Sef+1tgb3kPt4A/p5MJZZ63NNnyVTiqVg0vqeUZakcm60rARQRfLO1s3ECbiWF19B5LC5549utnY1/wkWGvwbMaGvqWihbbI6UB7IFbuXDPtKTjiyjHLNaOxub5PzDKlwfG+AmJ37Y2tmYBC6oYmJUcAlZj6FnQPpBpLPfIxK6tQQhXUo6e6yIwV4BRxqp6337yfe3N97rRwF+0QvxG4mb+c5PcvGGl6UvCUDbpWPO//xmXE6+cqz8rURgbpdzbIjLTp6/6mZZLBo/L5lKXF4gQI+yIqkC8v/n0jPByA3S2XyFL68y6fG5ZJC+g55xlYmc+yQWjZ8rhgIFZfxBMpXI5f+7DzgwZ4fIv7m43IzgskQ34uJTH8sTzT/Q06f7ciwaP7ygE7gBWBKLxp8S4ybH8lg0fmIyleioBQEcVM7BbU1d98iQN+gF2kKskvtwS4sWtHY2Wlw84UyxPu4Q6+DgcsRPLMZjpXKHVbFehuJyBj7S2tlYPX9NJPQSbo2mF1eTzo4u8TxzxQK8qxZeKtLZNXGB6V6+4alEQvf24qzniPi9K0Py/YBX8iy0fH4u4nc/btnm9rgU9d8HTi3noslUojWZSmyRN/mRFvG7Wt71fcQa/Y1YOjmuFPH7pwjJwWJNbdTH2r1KxO85XNjUwSJWf8w75h4p3964LDdnyEjgcrFewS0myIVS/UaE7vAi1/6piN8r8gz2FtfTtsDtkjQhn5CUNYxbIneDaM5v684CzBPBjtbOxtm4vQ36bdKhtbNxtDSq/fuxfvYB7m7tbNy/ikHWZ8vQvzDBxChgMunsQbL+t5gILiCd/a687JfQt6SrQSwvIn5GXnSvLCUWt+a2N4Tl72nJVOJBsUiexc2mF+6rkbM8I7ld5GLR+E9xft4TcDn3euMz20xEYgbwY7Ek34lF45cB14v75qlYNL6WHGeB8clU4n35/bu4rMy99dmtIfWwHDgyb3b2oQLRflEsuhzXxqLxC0R8NwA+TqYSz8Si8Rny/WvJVOKxEoqQiy89OZlKPC1lelrE7esyAnmy8P0uyNY9EdgkFo2vn0wlZtWdAIoI3i9L0q4VH0e1xW976a2KpeLqFitzHv6psobhZvPWwgUNF8u024gL+q5OrxUJTSedvRDvpYXfwi3KP7PEc1mxHP+CWyt9Enkzl33kadyi/GLD8rPxT+F0LZHQM71o+ENZsQnQ1LyGvjAWjb8mDTBHg3Qey4ApudTxecPOvqQMy2URH45L/Z77fP2Cc4fE0nkvJ35S3jdi0bhXjs1S2VrabDYoNEVS3TdLvWwo11snr+y9Ed91pG6XsSJbNslUYnksGv+X3PMuHgL4bN6xi0V0N5MOvz4FUETwPeCw1s7Gg+Wl/1Yfy/KWWA5/LxC/sTjnsVfS0C9kOH0b8HRbU9fHZQrrYBmmfFv8FN/wOfT81s7Ga9qauhZU6TmkcBk1vJK4nkE6+wGR0KVliOpH8rsLZCh4jPTO5bgb5onv52HgASKh4tl909mTgEsDnu85vayf4QXlyqcwlCZ3j8s83pUusd56ywifc+cyzbxecJxXJMJsSt/Zb3Wfe5tXxEp9Eudrf1k6jE9wAc99cRvlyrLIw4f6mU95oWdGGEsN0eeU+G1NXQ8CD7Z2No6ThvYtXHxgseHxx+JL+IeY8FMLZ48lvrDDR/weB05sa+p6tw9lXyYN8y3gD62djUeJT67wQa4tw1Q/68drL95XyhCsZaSzLeLX8aq3S0hnFxMJ/a5M67JbhmbXk84OFl9NSHry9aRBLBJx+AKXKmkGbq3yu0RCpU8WpLMn4nZL82IJMIFIqFdhUslU4rM8y2k0X44SKMxqPEMa2WDgkIId2/pKbq+Yj4pkT8l1xKNj0bjJ7cMhs9hBPsDBeUI2zOO9z11/0/zzFj51Eb87kqnEMXnnO72P9/6JvCMjYtH4eslUIn9bgLEF5ctnKTVMxfYEaWvqegu3m9rlIl7r5TW0wdJrzsNNhrzX1tRVSjbn43GO1kKeBA6o9Prftqauu1o7G88Ri6yQ/f0EcOTEDydVYCj8DulsGOfA9pqcSkhc3Xm9yqDsgq9fkH+VJZ39CcHZgaJEQk/18SpPiqV+KjKLHIvGd2bFpkY5sZwTi8afFGs6Sl46NxGVdZKpRG+3dn1a3CzbxqLxQ5KpxAN5515brj8XN/n3iQw/j2LFfsZhvAO2c5bi3tIZg5uwKXwPsiLwG+N2s7tFrr06sImEuawnx76RV7b98V5COi/PbVCsE1oei8bvFSPnTNwkJrFofBt5LktkpFZXVG1TpLamrtkU3zymGGd4fGZx6eurtYj+jyLihRlVtqn604iE7ied/Slug28vzgG2IZ09UWZ+BxaXveZagvesuJpIqBIbTV2CS8p5gezVO08a3ix6xn3+WEYWl8qeGm+LaOwh4pnqpSW6KBaN/wiXLPSeWDT+kFjNDTLqORh4LJlKLItF45fi0pv9SbJMj8CtqviMnvvq3IkLC/tDLBo/Qfxj35Dh4wZ5118Wi8bPx81E3xyLxk8TC2t73KzzhTIUPxOIxqLxTXCTYYfgZqoL/Z9PSRv7WSwa3w1YN5lKfCOgCn6OC525SDZany3PZDXggmQqMaPeBHBQrRastbNxXbxj1p5ua+qq2m5TbU1dn+X1wgQMtaolglfQM4YrnyOA50ln9xtg8dsR5wwPEr9b8U760BvxeURGBC/gZhzHSUM/H7dUbWHesc+K2Nwmxx2F2xqyi+IrWd6R8831KUcGF3L0iFzjcBmW35Zvdck+uWfh9vdoFFE7UlwShQHZF0unN0uEby3cRNJv5NjFeee9CRc8P1VcGluLZZjbE/svuP2Gu3Gbn28hlufPCs+Fi+RIih+1scD1k5Xj5+Vd+1XpRKbg4hP3Ez/jSclU4lceLqDnPfylr3iUY8AwNSyAjazYIyGf37Q1dZ1T5WtPlR49n/famrrG9qPAXIabXPLD4oJSzyUSmt2P5RoplsBPiowgMsCJMvRWFLUAy8TPWdwfZraXv+Szfr37SOicIgJocHuivE06e54EH1dT+FYjnT1NLIOzi4jfdSp+igpg3/DbJW1BNS/a2tm4Jt5BvO/2ew1EQpfLMCbontcGfg28TzqbIJ39aoWFbwzp7Pm4Xb6uK+IKWAb8iEjohyp+Sj0wpIbL5he+UO29b4/0qZeBSboaCd1JOrsrzp+2QxEh/AnwE9LZf+H2u30AeL6klSQrBM/g/EoHAk24sKZSOsr3gfFEQv/UZqWoAPadt3w+Pxjng6qG9TcM50D24v4Bq4lI6FXS2T1wyRO8UmgVsrv8uxiYTzr7PG6LxXdxMWrzcJMGw3DO+Q2lY9laRHa9Mks4CYhVKL+fovQbtTwJMgw3ze41FD64ranroQpfbzAuvMFrGdfLwPb9uHl6kIW2Ey6X3r418JhewsX4PaJNSalHatYHKGmo/urzdUdrZ+MuFRS/0bgAZL81rBfVhPg5a3AakdB+uKVzLw5QKd7FBSTvpOKnqAVYPStwZ9xiaq9yLsIlKLiyralrVi/Pv5U05P/Df53s3W1NXUfVZAU5f90huFi7g/rheT6FS7N0W1l+RUVRAey1CCZZkbnWi8W4BAqPypDsXdwypFwDHcqKfR7G4tbCbiNDyGIzpi8C+0pwdG2Tzm6KywByJC5YtVLP9kWxxDuIhF7VJqOoAPavAK6Gm4D4dj9f+p/AEbKkr75IZzcQgd8HN6mxFaXNns/EReq/JPf/+IDvKqcoq7IAigiOwKXKau6Hyy3FLey/oB+3++wPURyKCy5fH5deahhuAft83FKoj4iEFmmTUFQAa1cIw7g1k9VYl2tx+9Re1NbU9Yq+GoqiAliLIjgclyoowpc3pukt03ALyCf3JbegoigqgP0thg24PH274YJ4N5dhXuH+GvNxmTY+xqVGegM3u1x2FmlFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRFURRlleb/A7hhlB7cvnMAAAAAAElFTkSuQmCC</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>MIIE7zCCA1egAwIBAgIUOIwIXS1ZOD90Wfnn717aB5xAJNAwDQYJKoZIhvcNAQELBQAwgYYxCzAJBgNVBAYTAkxVMQowCAYDVQQIDAEgMRQwEgYDVQQHDAtXYWxmZXJkYW5nZTE6MDgGA1UECgwxQ2VudHJlIGRlIGdlc3Rpb24gaW5mb3JtYXRpcXVlIGRlIGwnw4PCqWR1ZGNhdGlvbjEZMBcGA1UEAwwQaWFtLmVkdWNhdGlvbi5sdTAeFw0yNDAxMTYxMzMwMTJaFw0zNDAxMTUxMzMwMTJaMIGGMQswCQYDVQQGEwJMVTEKMAgGA1UECAwBIDEUMBIGA1UEBwwLV2FsZmVyZGFuZ2UxOjA4BgNVBAoMMUNlbnRyZSBkZSBnZXN0aW9uIGluZm9ybWF0aXF1ZSBkZSBsJ8ODwqlkdWRjYXRpb24xGTAXBgNVBAMMEGlhbS5lZHVjYXRpb24ubHUwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCjmKnPb4OEDdqWjVpRt5Gfq7dOmS5jZ27HCkD8sVezu1BhuCHJEoIG2/zgGejIfy3Z/GFUEoovecRvOmQYf//mNqUOP2JjR+4OYWjrnezG5DTCYgg4+d0t42+qg7lWKVfUutGPnsa9DAXdOOcTTNCnIEqDBjdwvUdEFIRf3100ghplMMMDGj/OGS3M5VALkmQ9vNJ4Fjv8aThzGFyGfLZ2dYZLn5/PMOZwdJq0D+MUhDtLTWESRaa/OkZNvXCoWDCl/TI2+toIhifsXV7T0BcEM0zpG1ZQlI+w3L6lwYD7Dttw2Hq5TeHqqswtwhoqE3+nqUzXelvhoOIuVV1Cq+TQsxPVHP/p4l10l0i+8mOvTZ8H5AvsqkMJESnd7mXk/0lFg5yaLFjjHWtKfGmBvgCLUjdt4aTiuvW//pkWuSwtm/uxBFN3z8E+VaCq6ssc8eA37zezhmSxxZ04S6OHOvvu6HhOYpbbCEIdo0BrCFsZHU6JpKyP5lSLmETrKnDg2+0CAwEAAaNTMFEwHQYDVR0OBBYEFPu/FCn41Mb6dXydPVuplSvWbxg/MB8GA1UdIwQYMBaAFPu/FCn41Mb6dXydPVuplSvWbxg/MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggGBAA8aszOMYJudiAIYbsqIXe7qsErwY3yvYqT2Hg1Er2PJD6/zl92QMhQKpwjvkWpYkcSwf9TtBnp25+R5+l30BRPQFWmGQ4QwJTzzdpUbbHSCm/l3VivyIYF/SN3H2tt9tWVgzPumrPVsz28eSiv/8VCR7iqGyJ3U0xOk+hoH2QaU8uYLYLSlYTXJGDGDiu1XcHKJy7/b4/ZlJm6LJ2XA3mM5EhCS0Qi3Lmv6bO0JJeQY3STjK+x4zr1Cwj7AFC6KW6NNb1ZhqEMedLrR7/1BZYZBVldo/RmbSVt/HTvMa0N9e13eQiyS2KO4tBk8+ilBqEJQOPyqHbjAh2Q1ZVCcfov9bivqhdyRXqUwE0KV6sFLsVSp/eN+SZ/u05YMl8qPaDiKbaAZMJgUuLJoO7Fc+s8hYDpHfBFBtP1MfOa0Uu1pZk7rbBZew2u1cK1VzYYtPG6HMMPg+9c6xZhcMuR50S4cjCTKMIBtq/ft9zYOSIIo5tjwDNpvdlLkeHd64c/HwA==</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.education.lu/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auth.education.lu/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">CGIE - Centre de gestion informatique de l'éducation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">CGIE - Centre de gestion informatique de l'éducation</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">CGIE - Centre de gestion informatique de l'éducation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">CGIE - Centre de gestion informatique de l'éducation</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.cgie.lu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>CGIE</md:GivenName>
      <md:EmailAddress>mailto:helpdesk@cgie.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-restena:authentication:test:edu.lu:discover">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2024-09-04T13:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">Restena 'URL shortener' Service</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">Service 'Raccourcisseur d'URL' de Restena</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">Restena 'URL shortener' Service</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">Restena 'URL shortener' Service</mdui:DisplayName>
          <mdui:Description xml:lang="en">With the URL shortener, securely redirect long URLs to short URLs while respecting your privacy and that of link visitors. Login to shorten and manage your URLs.</mdui:Description>
          <mdui:Description xml:lang="fr">Avec le raccourcisseur d’URL, redirigez des URL longues de manière sécurisée vers des URL courtes tout en respectant votre vie privée et celle des visiteurs-ses de vos liens. Connectez-vous pour raccourcir et gérer vos URL.</mdui:Description>
          <mdui:Description xml:lang="de">Mit dem URL-Verkürzer können Sie lange URLs sicher in kurze URLs umleiten und dabei Ihre Privatsphäre und die der Besucher Ihrer Links schützen. Verbinden Sie sich, um Ihre URLs zu kürzen und zu verwalten.</mdui:Description>
          <mdui:Description xml:lang="lb">Mat dem URL Ofkierzung, sécher laang URLen op kuerz URLen ëmgeleet, wärend Dir Är Privatsphär respektéiert an déi vu Besicher Hirer Links. Loggt Iech an, fir Är URLen ze verkierzen an ze verwalten.</mdui:Description>
          <mdui:Keywords xml:lang="en">short URL</mdui:Keywords>
          <mdui:Logo width="128" height="128" xml:lang="en">https://edu.lu/images/logo.svg</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            MIIF7zCCA9egAwIBAgIJAOkBQcgr8TimMA0GCSqGSIb3DQEBDQUAMIGMMQswCQYDVQQGEwJMVTEZMBcGA1UEBwwQRXNjaC1zdXItQWx6ZXR0ZTEbMBkGA1UECgwSUmVzdGVuYSBGb3VuZGF0aW9uMSQwIgYDVQQDDBtTQU1MIFNQIGluIGNvbW1vbiBuYW1lc3BhY2UxHzAdBgkqhkiG9w0BCQEWEGFkbWluQHJlc3RlbmEubHUwIBcNMjMwMTE4MTI0OTIyWhgPMjA1MDA2MDUxMjQ5MjJaMIGMMQswCQYDVQQGEwJMVTEZMBcGA1UEBwwQRXNjaC1zdXItQWx6ZXR0ZTEbMBkGA1UECgwSUmVzdGVuYSBGb3VuZGF0aW9uMSQwIgYDVQQDDBtTQU1MIFNQIGluIGNvbW1vbiBuYW1lc3BhY2UxHzAdBgkqhkiG9w0BCQEWEGFkbWluQHJlc3RlbmEubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8ItBC2mGa/9Gp32NvmnLSzRUzB4hxXwNJ8a1o2M7o7Z8xF2ZczSuZcQGrkY9XTWjyUGH2zJRv1FKTRrwTVGt/oat8yRNXjeVcP494PJ2hvnaxGWpFILCTTMVzTH1rs3K8sQo70DBd7DbLka8I93AIfLZAn3NbB1BUtSYHsIHMdIa3Vn04jXEabdjB96Bb8tMKcBppnzLLmloqlRnb6nOMOP/qMuydV7b6gDin7TVog7RDdz41g/Mh3Xxzblhpo//h7dANXkXjYRDrtivnu22TvIEPTvEeTCY/qOnZLcjbzMitBxYCE4B6WlY2RC4qIoW5NXJBtcVv4eiqRxHzgEmIrpD/pZwqXjyWq9/SaOkQnDJRSPuYqcLAfm3dUjqkdMQduKXg8jJfVHGFp1tU3GFAUyL7G8KCmj4R6nSlbdPp8v2favq6yiuZ+zwmb2aQpgSD2lXIBoMgrffgE6h5KCG/Ln9r/T/59yQ5raBqAT84yxNj+XX3T7IVt7MVPNt6PupQ+3dQQVHB+14o7eyBBp2TqvpnnX+5VwxVNv9LeDB/OYqSvbSCH8tfm+reBpLs5Iu4zlIn7bdZ8XziWnsCHijggSEtOABH3jgQXA8OJTerOWNT1g5HNbVQP5SVdY4uKvOtr8Ox+34pTXm2/Y5vsX/oXKiKO+LhnLaZqK/ofMjeAwIDAQABo1AwTjAdBgNVHQ4EFgQUNlHbUMf9mPOZjIQHz3Nwr02SD8QwHwYDVR0jBBgwFoAUNlHbUMf9mPOZjIQHz3Nwr02SD8QwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQ0FAAOCAgEAovHxFYaYK1As5qI2AvpUKnS2jFv+4OFyoLMMXFl9iZ7RFLT7iU6OEhrWR11YkYu78xwaqwBoeunGx2fjsKOY2SZV3PjyxdlHF+SL1HPVrLOlRdY8aZts5Z043kgMwrDbbJJJCn+li9nOWcmZP3r+/0JNFl28AXnQ4FSGtRayn31kx2RNEjZvYTl2+mYvlEwU50IogciVL/shQgstvEsL7zyx/lo8X6YvUDPF8it6MBJmDECNHFDDObvsNUjmn72WnrCSlqRI1PNctTjoQuHx1toxeE8PLielriSRpGK3wV9LKWWD8uzoxPXrup96qEztmwuYpjYRjR9KHVCuhmTl2g7Ji1Bt0oWANE5xkIDo6+8+NR5KaMIS6PkO4z+nsbW3pTvE/0kca/yWc8EkaRUJMVB7J19N3NmSL99tzBcOBVJEWIVOPxPk4m8IG5sD/FalW5GLdf1bspbB3R6bTR4oquL2jYlqtZhVOJJF/5viTwH4+D9Weqn7DNA5ClFAwran7Ux9O2RIHRu5XMIxkW3bIDQYqctCLiblpEUcT2GlEk48nRYIzZ1gl9XhVc95zgEDJTnr6IYNYhunU2z4cqZDFYrLowmyho4uV+lGptDwO5Gzpo5GGx3eGIJAZaLNrX9DBRe0cnw8FamuDSsas1QJGBZ9clRkVNChqRr9nMQy5Yg=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://edu.lu/simplesaml_dev/module.php/saml/sp/saml2-logout.php/discover"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://edu.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/discover" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://edu.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/discover" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">Restena 'URL shortener' Service</md:ServiceName>
        <md:ServiceName xml:lang="fr">Service 'Raccourcisseur d'URL' de Restena</md:ServiceName>
        <md:ServiceName xml:lang="lb">Restena 'URL shortener' Service</md:ServiceName>
        <md:ServiceName xml:lang="de">Restena 'URL shortener' Service</md:ServiceName>
        <md:ServiceDescription xml:lang="en">With the URL shortener, securely redirect long URLs to short URLs while respecting your privacy and that of link visitors. Login to shorten and manage your URLs.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">Avec le raccourcisseur d’URL, redirigez des URL longues de manière sécurisée vers des URL courtes tout en respectant votre vie privée et celle des visiteurs-ses de vos liens. Connectez-vous pour raccourcir et gérer vos URL.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">Mit dem URL-Verkürzer können Sie lange URLs sicher in kurze URLs umleiten und dabei Ihre Privatsphäre und die der Besucher Ihrer Links schützen. Verbinden Sie sich, um Ihre URLs zu kürzen und zu verwalten.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">Mat dem URL Ofkierzung, sécher laang URLen op kuerz URLen ëmgeleet, wärend Dir Är Privatsphär respektéiert an déi vu Besicher Hirer Links. Loggt Iech an, fir Är URLen ze verkierzen an ze verwalten.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Restena Foundation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation Restena</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Restena Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation Restena</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="tlh-Kore-AQ-fonipa">Fondation Restena</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Restena</md:GivenName>
      <md:SurName>NOC</md:SurName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-restena:authentication:prod:edu.lu:discover">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2024-09-04T13:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">Restena 'URL shortener' Service</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">Service 'Raccourcisseur d'URL' de Restena</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">Restena 'URL shortener' Service</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">Restena 'URL shortener' Service</mdui:DisplayName>
          <mdui:Description xml:lang="en">With the URL shortener, securely redirect long URLs to short URLs while respecting your privacy and that of link visitors. Login to shorten and manage your URLs.</mdui:Description>
          <mdui:Description xml:lang="fr">Avec le raccourcisseur d’URL, redirigez des URL longues de manière sécurisée vers des URL courtes tout en respectant votre vie privée et celle des visiteurs-ses de vos liens. Connectez-vous pour raccourcir et gérer vos URL.</mdui:Description>
          <mdui:Description xml:lang="de">Mit dem URL-Verkürzer können Sie lange URLs sicher in kurze URLs umleiten und dabei Ihre Privatsphäre und die der Besucher Ihrer Links schützen. Verbinden Sie sich, um Ihre URLs zu kürzen und zu verwalten.</mdui:Description>
          <mdui:Description xml:lang="lb">Mat dem URL Ofkierzung, sécher laang URLen op kuerz URLen ëmgeleet, wärend Dir Är Privatsphär respektéiert an déi vu Besicher Hirer Links. Loggt Iech an, fir Är URLen ze verkierzen an ze verwalten.</mdui:Description>
          <mdui:Keywords xml:lang="en">short URL</mdui:Keywords>
          <mdui:Logo width="128" height="128" xml:lang="en">https://edu.lu/images/logo.svg</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://edu.lu/simplesamlphp/module.php/saml/sp/saml2-logout.php/discover"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://edu.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/discover" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://edu.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/discover" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">Restena 'URL shortener' Service</md:ServiceName>
        <md:ServiceName xml:lang="fr">Service 'Raccourcisseur d'URL' de Restena</md:ServiceName>
        <md:ServiceName xml:lang="lb">Restena 'URL shortener' Service</md:ServiceName>
        <md:ServiceName xml:lang="de">Restena 'URL shortener' Service</md:ServiceName>
        <md:ServiceDescription xml:lang="en">With the URL shortener, securely redirect long URLs to short URLs while respecting your privacy and that of link visitors. Login to shorten and manage your URLs.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">Avec le raccourcisseur d’URL, redirigez des URL longues de manière sécurisée vers des URL courtes tout en respectant votre vie privée et celle des visiteurs-ses de vos liens. Connectez-vous pour raccourcir et gérer vos URL.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">Mit dem URL-Verkürzer können Sie lange URLs sicher in kurze URLs umleiten und dabei Ihre Privatsphäre und die der Besucher Ihrer Links schützen. Verbinden Sie sich, um Ihre URLs zu kürzen und zu verwalten.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">Mat dem URL Ofkierzung, sécher laang URLen op kuerz URLen ëmgeleet, wärend Dir Är Privatsphär respektéiert an déi vu Besicher Hirer Links. Loggt Iech an, fir Är URLen ze verkierzen an ze verwalten.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Restena Foundation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation Restena</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Restena Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation Restena</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="tlh-Kore-AQ-fonipa">Fondation Restena</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Restena</md:GivenName>
      <md:SurName>NOC</md:SurName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://edu-test.universeh.eu/auth/saml2/sp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2023-03-27T10:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="false">
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://edu-test.universeh.eu/auth/saml2/sp/saml2-logout.php/edu-test.universeh.eu"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://edu-test.universeh.eu/auth/saml2/sp/saml2-acs.php/edu-test.universeh.eu" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://edu-test.universeh.eu/auth/saml2/sp/saml1-acs.php/edu-test.universeh.eu" index="1"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://edu-test.universeh.eu/auth/saml2/sp/saml2-acs.php/edu-test.universeh.eu" index="2"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://edu-test.universeh.eu/auth/saml2/sp/saml1-acs.php/edu-test.universeh.eu" index="3"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">UNIVERSEH: The European Space University</md:ServiceName>
        <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="nameid"/>
        <md:RequestedAttribute Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Email"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">UNIVERSEH</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">UNIVERSEH: The European Space University</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://edu-test.universeh.eu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Moodle</md:GivenName>
      <md:SurName>Team</md:SurName>
      <md:EmailAddress>mailto:universeh.moodle@uni.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://eduvpn.restena.lu/saml">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-06-15T10:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Restena eduVPN Service</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">Service eduVPN de Restena</mdui:DisplayName>
          <mdui:DisplayName xml:lang="lb">Restena eduVPN Service</mdui:DisplayName>
          <mdui:DisplayName xml:lang="de">Restena eduVPN Service</mdui:DisplayName>
          <mdui:Keywords xml:lang="en">VPN eduVPN</mdui:Keywords>
        </mdui:UIInfo>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
        <alg:SigningMethod MinKeySize="2048" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduvpn.restena.lu/php-saml-sp/slo"/>
      <md:AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eduvpn.restena.lu/php-saml-sp/acs"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">Restena eduVPN Service</md:ServiceName>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Restena Foundation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation Restena</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Restena Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation Restena</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Restena</md:GivenName>
      <md:SurName>NOC</md:SurName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://eduvpn-test.restena.lu/saml">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-06-15T10:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en-US">eduVPN (eduvpn-test.restena.lu)</mdui:DisplayName>
        </mdui:UIInfo>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha384"/>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
        <alg:SigningMethod MinKeySize="2048" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <alg:SigningMethod MinKeySize="2048" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
        <alg:SigningMethod MinKeySize="2048" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://eduvpn-test.restena.lu/php-saml-sp/slo"/>
      <md:AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://eduvpn-test.restena.lu/php-saml-sp/acs"/>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Restena Foundation</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation Restena</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Restena Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation Restena</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Restena</md:GivenName>
      <md:SurName>NOC</md:SurName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://fs.restena.lu/simplesamlphp/discover">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-07-07T08:20:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA FileSender Service</mdui:DisplayName>
          <mdui:Description xml:lang="en">RESTENA FileSender is a secure way to share large files with anyone! Logon to upload your files or to invite people to send you a file.</mdui:Description>
          <mdui:Description xml:lang="fr">RESTENA FileSender propose un moyen sécurisé pour partager des gros fichiers avec vos collègues! Connectez-vous pour envoyer vos fichiers ou pour inviter vos interlocuteurs à vous en envoyer.</mdui:Description>
          <mdui:Description xml:lang="de">RESTENA FileSender ist eine sichere Methode grosse Dateien mit jedermann zu teilen! Verbinden Sie sich um Dateien zu verschicken oder um jemanden aufzufordern Ihnen eine Datei zu schicken.</mdui:Description>
          <mdui:Description xml:lang="lb">De RESTENA FileSender ass e séchere Wee, fir grouss Fichieren ze verschécken! Loggt Iech an, fir Fichieren eropzelueden oder aner Leit ze invitéieren, Iech Fichieren ze schécken.</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA FileSender large XXL file transfer</mdui:Keywords>
          <mdui:Logo width="32" height="32" xml:lang="en">https://raw.githubusercontent.com/filesender/filesender/master/www/images/favicon.ico</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.restena.lu/simplesamlphp/module.php/saml/sp/saml2-logout.php/discover"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/discover" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://fs.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/discover" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">RESTENA FileSender Service</md:ServiceName>
        <md:ServiceDescription xml:lang="en">RESTENA FileSender is a secure way to share large files with anyone! Logon to upload your files or to invite people to send you a file.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">RESTENA FileSender propose un moyen sécurisé pour partager des gros fichiers avec vos collègues! Connectez-vous pour envoyer vos fichiers ou pour inviter vos interlocuteurs à vous en envoyer.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">RESTENA FileSender ist eine sichere Methode grosse Dateien mit jedermann zu teilen! Verbinden Sie sich um Dateien zu verschicken oder um jemanden aufzufordern Ihnen eine Datei zu schicken.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">De RESTENA FileSender ass e séchere Wee, fir grouss Fichieren ze verschécken! Loggt Iech an, fir Fichieren eropzelueden oder aner Leit ze invitéieren, Iech Fichieren ze schécken.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://fs-test.restena.lu/simplesaml_dev/discover">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-07-07T08:20:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA FileSender Service (TEST)</mdui:DisplayName>
          <mdui:Description xml:lang="en">(TEST) RESTENA FileSender is a secure way to share large files with anyone! Logon to upload your files or to invite people to send you a file.</mdui:Description>
          <mdui:Description xml:lang="fr">(TEST) RESTENA FileSender propose un moyen sécurisé pour partager des gros fichiers avec vos collègues! Connectez-vous pour envoyer vos fichiers ou pour inviter vos interlocuteurs à vous en envoyer.</mdui:Description>
          <mdui:Description xml:lang="de">(TEST) RESTENA FileSender ist eine sichere Methode grosse Dateien mit jedermann zu teilen! Verbinden Sie sich um Dateien zu verschicken oder um jemanden aufzufordern Ihnen eine Datei zu schicken.</mdui:Description>
          <mdui:Description xml:lang="lb">(TEST) De RESTENA FileSender ass e séchere Wee, fir grouss Fichieren ze verschécken! Loggt Iech an, fir Fichieren eropzelueden oder aner Leit ze invitéieren, Iech Fichieren ze schécken.</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA FileSender large XXL file transfer</mdui:Keywords>
          <mdui:Logo width="32" height="32" xml:lang="en">https://raw.githubusercontent.com/filesender/filesender/master/www/images/favicon.ico</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs-test.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-logout.php/discover"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs-test.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/discover" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://fs-test.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/discover" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">RESTENA FileSender Service (TEST)</md:ServiceName>
        <md:ServiceDescription xml:lang="en">(TEST) RESTENA FileSender is a secure way to share large files with anyone! Logon to upload your files or to invite people to send you a file.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">(TEST) RESTENA FileSender propose un moyen sécurisé pour partager des gros fichiers avec vos collègues! Connectez-vous pour envoyer vos fichiers ou pour inviter vos interlocuteurs à vous en envoyer.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">(TEST) RESTENA FileSender ist eine sichere Methode grosse Dateien mit jedermann zu teilen! Verbinden Sie sich um Dateien zu verschicken oder um jemanden aufzufordern Ihnen eine Datei zu schicken.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">(TEST) De RESTENA FileSender ass e séchere Wee, fir grouss Fichieren ze verschécken! Loggt Iech an, fir Fichieren eropzelueden oder aner Leit ze invitéieren, Iech Fichieren ze schécken.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://fs-test.restena.lu/simplesamlphp/discover">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2015-07-07T08:20:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">RESTENA FileSender Service (TEST)</mdui:DisplayName>
          <mdui:Description xml:lang="en">(TEST) RESTENA FileSender is a secure way to share large files with anyone! Logon to upload your files or to invite people to send you a file.</mdui:Description>
          <mdui:Description xml:lang="fr">(TEST) RESTENA FileSender propose un moyen sécurisé pour partager des gros fichiers avec vos collègues! Connectez-vous pour envoyer vos fichiers ou pour inviter vos interlocuteurs à vous en envoyer.</mdui:Description>
          <mdui:Description xml:lang="de">(TEST) RESTENA FileSender ist eine sichere Methode grosse Dateien mit jedermann zu teilen! Verbinden Sie sich um Dateien zu verschicken oder um jemanden aufzufordern Ihnen eine Datei zu schicken.</mdui:Description>
          <mdui:Description xml:lang="lb">(TEST) De RESTENA FileSender ass e séchere Wee, fir grouss Fichieren ze verschécken! Loggt Iech an, fir Fichieren eropzelueden oder aner Leit ze invitéieren, Iech Fichieren ze schécken.</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA FileSender large XXL file transfer</mdui:Keywords>
          <mdui:Logo width="32" height="32" xml:lang="en">https://raw.githubusercontent.com/filesender/filesender/master/www/images/favicon.ico</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            MIIG5TCCBM2gAwIBAgIJAIlJ6s/iVngWMA0GCSqGSIb3DQEBDQUAMIGMMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MSowKAYDVQQDDCFSRVNURU5BIFNBTUwgRW50aXR5IGZzLnJlc3RlbmEubHUwIBcNMTUwNzA3MDczODM0WhgPMjA1NjA3MzEwNzM4MzRaMIGMMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MSowKAYDVQQDDCFSRVNURU5BIFNBTUwgRW50aXR5IGZzLnJlc3RlbmEubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDFF6WZKlTiLtMKFcaxto35kXkY+E5+rwMgmfMJwiLwGLqYiZT+Wf0cmhJNm8GXKGl6dncYeuJOsR6oN26vQGNa3mAK8FVagQlvurjhncu7i0Slo0jdIz6sYRYUBtegRXjdJ0Xlnvm2v45azl/3XGteRQaSks9a1buWY+mxTcbgIWYNKCIKlgf+DKZtVs7dIKytsa2F0RaV7b56o9JmknpzDxOoucxGdMB9874gcI4F8n7465tMMxRyL0DYXksQt3nyBJYlK54C4pJcpPMq6dqRiuVucHyjZ88Q1NNphhBFPWHrlfEz0S4CBbtwNym+U0YUERh/AZmcisl6eJjFGISvhHGLMSBPQiiQVktNzZkQdCsoWOA7YO0a1Yh/ywxQXFxP4ldyA6Xe5bcTMBfQlZ7i1TJWfyyCpWtmqekr/uf6MHuDXFlWvxZNwNdtJdwaykz/Ql4sYw5tTGXd7waH0p0WWckWQwUOQcGloP1fhCo5bPaFAnJHtOgnLw2MIEd+uSsO3WcEGXvNlTLCl98hedx1tKsIE2zDFzBrJaq9JSBk/QHTGEgBC4pAD49jvK8FlRug/ljbXDCLcBitZqQhW/tyqLn6/6b2abCa91DxmacLp74OFtRi3Cvd7la6nogPSeeyOdo58KGxDkjs7woEwT7uWm5uXDl3iiRYfeJVM7VkIQIDAQABo4IBRDCCAUAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYEFO7KeYdBzZfUWhMqrom6YSJaptSrMIHBBgNVHSMEgbkwgbaAFO7KeYdBzZfUWhMqrom6YSJaptSroYGSpIGPMIGMMQswCQYDVQQGEwJMVTETMBEGA1UEBwwKTHV4ZW1ib3VyZzEbMBkGA1UECgwSUkVTVEVOQSBGb3VuZGF0aW9uMR8wHQYJKoZIhvcNAQkBFhBhZG1pbkByZXN0ZW5hLmx1MSowKAYDVQQDDCFSRVNURU5BIFNBTUwgRW50aXR5IGZzLnJlc3RlbmEubHWCCQCJSerP4lZ4FjAJBgNVHRMEAjAAMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly93d3cucmVzdGVuYS5sdS9jYS9mcy5yZXN0ZW5hLmx1LmNybDANBgkqhkiG9w0BAQ0FAAOCAgEAWup+YqfjH+BZbuo7VVBNP+UelxnRjC9Pnev5950kYQimC67OOrkJoILpEMiSJz9D5XhmmmCYAfsxUZmHHh2INkl41o8TQbLmNNgQKh4JQ9foi+jhvyhAuE8S+1X5t0gpmb5otxQwUC7utdvXn70sY5Kke+DiFmkiIZFB0gm8xeBpELZc1zPMS1vHtbx3SbHwuYqZYCFK3IxVdgJ1n2kD1yVavJ4clhaW+ytBZ4vdSaRBytEa6nMDE5Yj2oQEqTH85VKswnEG/xt38speI2DYqHJKCA7iIK+FXBuNGAjxRLcUuBYolGjL4qhmShO89mCqCVWmornMJZxPlURhbE2CtEhupMLW8jPKCmTVr+6k0X65YgWpnqhiwYv8sPmqNt1eyIcJkif0iKdxtB6iWo8VAROD0LgChPMuwQxrzkUMDVgvYb8MQfPuhwPynM4i0XkHZVX8E4d0W1u2Xewmuu0HsKa8GFj/OyMdE7bQSvk2KkvBhqxD2DSZJ72uVRiqxjgZuEVpSwuv6ZMPxwUT9I8P7zCL8wVtqJET0Kooh6ZXe+oogbGeuh/nmFRtgPy1va2SSKVkdl5dt77fC/nf3qlBMNmCp9N6H7zCt2VsDq3THM5FiNz8vtafch+9jUN7goJCmLU5134Rt6+SfTWn/E6fsr7I7+UMu+hjkqWS7K0jqaI=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs-test.restena.lu/simplesamlphp/module.php/saml/sp/saml2-logout.php/discover"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs-test.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/discover" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://fs-test.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/discover" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">RESTENA FileSender Service (TEST)</md:ServiceName>
        <md:ServiceDescription xml:lang="en">(TEST) RESTENA FileSender is a secure way to share large files with anyone! Logon to upload your files or to invite people to send you a file.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">(TEST) RESTENA FileSender propose un moyen sécurisé pour partager des gros fichiers avec vos collègues! Connectez-vous pour envoyer vos fichiers ou pour inviter vos interlocuteurs à vous en envoyer.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">(TEST) RESTENA FileSender ist eine sichere Methode grosse Dateien mit jedermann zu teilen! Verbinden Sie sich um Dateien zu verschicken oder um jemanden aufzufordern Ihnen eine Datei zu schicken.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">(TEST) De RESTENA FileSender ass e séchere Wee, fir grouss Fichieren ze verschécken! Loggt Iech an, fir Fichieren eropzelueden oder aner Leit ze invitéieren, Iech Fichieren ze schécken.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="OLEFA-ST-SAML-TESTSERVER" validUntil="2017-05-08T09:00:54Z" cacheDuration="PT24H" entityID="https://saml.educdesign.lu/saml_metadata.xml">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2016-05-11T10:55:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="fr">OLEFA Test Server</mdui:DisplayName>
          <mdui:Description xml:lang="fr">OLEFA EduID SSO/SLO Test Server</mdui:Description>
          <mdui:Keywords xml:lang="fr">OLEFA INTERN DEV</mdui:Keywords>
          <mdui:Logo width="128" height="128" xml:lang="fr">https://saml.educdesign.lu/osr/olefa/logo.jpg</mdui:Logo>
          <mdui:DisplayName xml:lang="lb">OLEFA Test Server</mdui:DisplayName>
          <mdui:Description xml:lang="lb">OLEFA EduID SSO/SLO Test Server</mdui:Description>
          <mdui:Keywords xml:lang="lb">OLEFA INTERN DEV</mdui:Keywords>
          <mdui:Logo width="128" height="128" xml:lang="lb">https://saml.educdesign.lu/osr/olefa/logo.jpg</mdui:Logo>
          <mdui:DisplayName xml:lang="en">OLEFA Test Server</mdui:DisplayName>
          <mdui:Description xml:lang="en">OLEFA EduID SSO/SLO Test Server</mdui:Description>
          <mdui:Keywords xml:lang="en">OLEFA INTERN DEV</mdui:Keywords>
          <mdui:Logo width="128" height="128" xml:lang="en">https://saml.educdesign.lu/osr/olefa/logo.jpg</mdui:Logo>
          <mdui:DisplayName xml:lang="de">OLEFA Test Server</mdui:DisplayName>
          <mdui:Description xml:lang="de">OLEFA EduID SSO/SLO Test Server</mdui:Description>
          <mdui:Keywords xml:lang="de">OLEFA INTERN DEV</mdui:Keywords>
          <mdui:Logo width="128" height="128" xml:lang="de">https://saml.educdesign.lu/osr/olefa/logo.jpg</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor>
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>MIIF/DCCA+SgAwIBAgIJAIjlYOJkwi+7MA0GCSqGSIb3DQEBCwUAMIGSMQswCQYD VQQGEwJMVTESMBAGA1UECAwJRHVkZWxhbmdlMRIwEAYDVQQHDAlEdWRlbGFuZ2Ux GDAWBgNVBAoMD0VkdWNEZXNpZ24gUy5BLjEbMBkGA1UEAwwSc2FtbC5lZHVjZGVz aWduLmx1MSQwIgYJKoZIhvcNAQkBFhVzdXBwb3J0QGVkdWNkZXNpZ24ubHUwHhcN MTgwMjA4MTMwMzQ2WhcNMjMwMjA3MTMwMzQ2WjCBkjELMAkGA1UEBhMCTFUxEjAQ BgNVBAgMCUR1ZGVsYW5nZTESMBAGA1UEBwwJRHVkZWxhbmdlMRgwFgYDVQQKDA9F ZHVjRGVzaWduIFMuQS4xGzAZBgNVBAMMEnNhbWwuZWR1Y2Rlc2lnbi5sdTEkMCIG CSqGSIb3DQEJARYVc3VwcG9ydEBlZHVjZGVzaWduLmx1MIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAvj8HwdJPOP8c38mrnTjKNErF0KHgWdvIa/AlpjCH camrFaddPRE7VHMXReLtQZRgXcL+hzVS9m1daIBaNBkuMBZRjLYuM65nVejFNkr5 hY3fmhBFaEMz66M45YlkZVCBCql798L6Iu4FHX20n1bcS/bp2OcNXpYczsZAWB0c iesEelJkn9YuIF+ahMX/I5BixXOLdZ6PtWuofoUmWcgkH2nJGxzBnI6KcYkEPovy j+yHVXb0GdPAh8hardDN27m2G/jJ6G7F+zzXnb3Rc9HGcCt2mjW1ZHR7yIXtBqrY 4AiaZ7MjRmfIMY1gBdLLzXogubugfwSizXDoTfZIqCgj5HyUag2tzg3XhY+PQIEd 22rlwO5nDbZ18uz7clw9W6GZDixOotI0e0S2jPqXK2Lz7VLQ+p15atOg27PU87az dixrViczEoHFtJhM4pWeI9phW38Sm+508f5Nxqcck/FtbO8MaaMt/4gf688DAm7X eugn4OH1/W383dG0N5zq3sK7a4XqcTNrmLp7dWMUuBD9MSXqOGprBayYlF65BYPG aB972ODKI2wdHoXp4APsRCy6GEF9WeSLvjF4qLa5JDw+VeP5UrqNGln/lPTv68J2 wxBVhHC35t3RtJ1ZJaXBUiki01iEt/QCpAIVPpEu6bq/liaRXzMg3AAc0MAzyQUk qnUCAwEAAaNTMFEwHQYDVR0OBBYEFL9AuUUK/XXEdXrvTe1cFdCxW9SXMB8GA1Ud IwQYMBaAFL9AuUUK/XXEdXrvTe1cFdCxW9SXMA8GA1UdEwEB/wQFMAMBAf8wDQYJ KoZIhvcNAQELBQADggIBAJm7y3yuexmjFco5ae/rDL1nqg4OFP49la/NDm8d0V9k G64IIxk0um2xVewj0OIAXCceZycJcg0xjSFU/51/KAsgv5RaVkSjRWpzQGFfAUJc qGA2rH9PtLgjOY2IdVmn5WTVHpzF1bgIh3DDvS+sYkLZeCJsYZIzTSYiE7wcfDAW GiBq+fZw1EkIu5zvkTW7tWV3V8RaOn1WKx5zi+2FHxmSfPoKj2C/VodVn5KHv+mn tyqhji5wzRYVDElGm82+TU0g1D1QhDubrXHLDLhItmudhrMPDtUOMrHl1Uzgmojt PnJ+KpaY2qQWyz78aYqgjIJbz0aj36IXsBadyYkZ4WcKf4CfFChE6hF5XNgo/Dlb KA6nAeZEnJQyLUaK0wu6P3hs1abDr/+IxY4niNwx2H1qUPhjRn7Fc+1WNqK3xxBL 7ul4ET+KmC694PajQ0OSZL410O/Kg96q8LggAAg05hJloFP3SqDbZc6J+OhEi/Ds 6hPqIHng7H8awAUur9GUvJFbnAmrNlWDCuWd3sZRNAT30ZQHA57ToK1X8C/0svAf
            0CUPe/GXuH89+xxlSlsxuP6xTcdWfIqcPZFhxG0ZPBwTFS0VuBhkAX2L+nsMra9W uR6VngUmv3w9vNUOg1ZU8JYUwGt3aRdsDJM6PzTu3uzbjBz1Jus66AOiqGkgT74C</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://saml.educdesign.lu/saml_sls"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://saml.educdesign.lu/saml_acs" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">OLEFA Test Server</md:ServiceName>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">EducDesign S.A.</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">EducDesign S.A.</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.educdesign.lu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>EducDesign S.A.</md:GivenName>
      <md:EmailAddress>mailto:support@educdesign.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="ID_f7715079-9580-4844-b737-998040914db2" entityID="https://test-keycloak-auth.wasdi.net/auth/realms/wasdi">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2022-11-21T07:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:KeyName>M2EWdD6PHusk5oDeIjIr_HKT6vNmSPNZc0hggxPSWhI</ds:KeyName>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:KeyName>M2EWdD6PHusk5oDeIjIr_HKT6vNmSPNZc0hggxPSWhI</ds:KeyName>
          <ds:X509Data>
            <ds:X509Certificate>MIICmTCCAYECBgF9b8MX4DANBgkqhkiG9w0BAQsFADAQMQ4wDAYDVQQDDAV3YXNkaTAeFw0yMTExMzAwNzMxMzZaFw0zMTExMzAwNzMzMTZaMBAxDjAMBgNVBAMMBXdhc2RpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ1nnh14NgoF3ppNTVR5DRcBqKLMODMFzsze63Je6QjR63cGw9lqUdhYkkvYVHtZxDlHQT7rbqlUCYC+cxYChY9Erf7CEGa3jok57q6x4lkmUyFZr1+R/V9d9twhyj+eY8KsVFoSiJmrTGmveZXEGBTQW5OaECJgZs+yP9+2Tv9cYwuB1fnHSTnhWpAq0iNIBn3BchHOlqFnnT15hSrLldZ4pr7tHcDGHEahRH1k3LkKJoNDwhqSWjkvfyfwaYdvzrwQldffUQWxOzFGG0ZpisF+GOZ2OpKbDXsYwDM0fePQwHoWx8Vh2dgW11sRzr9+DSWI8Y2Fc4MfzwMQs5Xt+QIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBxR6kIFYT4PrnU2pUOwZfqb8P4y8MJ5SaTuSe5z5GqxkmTGOzq9UJzxHez5dRU7CqkAeEULTTAqX9GGg4IfR1+qAwBMnLWcuPw1w6ydNfIDIVXzf7CLl6t8Wn1jnhBxbNir1rlHrPOzqVEFFAww7yiZ6WvppglIp7pcT6GVSJj9UhKV9WM/j4Wnax+18/NTIYQL7XQ/AbwFgY+tXKNOTWmpvrMb4GRNz6lsKX6lM3+gy/GMtoAM015+qX/a6AYVkblnCUl41cndmRp/8NFq7Js5hlJ+C2m45YsQJPj0ulbqD9I9bRJtglFIc0qforx3XKjw1/zHuG3e6TIVaHQBvm9</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test-keycloak-auth.wasdi.net/auth/realms/wasdi/broker/EduGain/endpoint"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test-keycloak-auth.wasdi.net/auth/realms/wasdi/broker/EduGain/endpoint" index="1" isDefault="true"/>
      <md:AttributeConsumingService index="1" isDefault="true">
        <md:ServiceName xml:lang="en">wasdi</md:ServiceName>
        <md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">WASDI SARL</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">WASDI SARL</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.wasdi.cloud/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>WASDI</md:GivenName>
      <md:SurName>SYSADMIN</md:SurName>
      <md:EmailAddress>mailto:admin-keycloak@wasdi.cloud</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://test-vm.ipil.lu/moodle/auth/saml2/sp/metadata.php" ID="_c98db30de7fd496d0c23dd4b44909d5a157a6d014877aa499897bb6bda3e065a">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_c98db30de7fd496d0c23dd4b44909d5a157a6d014877aa499897bb6bda3e065a">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>2imgyaYlV3RgcYj+UkVZPUo86bF7UtTP5KiN36O4bv8=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>isntkvyjGpbqfpjhpf8hpIXJV4whfg/fCerkwUbZh2rvevOcMKUhtZZL/uFzuLGhp5EVTH4HemM6mp9AWSXulmKSdo8UbXsicuB4sWtpnUWh88ztcy1bBjyXicpSIOoLCbofZEd3EzvBfThF9hdigyGO24oQ1Fkeaocc+3XOJ23lU/tjl/fas2K0wh5xLKAXdLkcr8ND9NwrwkiMZkjQHb/ckflFctuIHkOwUGPYGV9Qwf7YkLxqbz5wDPVgQJ2L8znYUYHsPjpmesGS9y/zE3jJg+Jo7XNPhSRf2vULM0s9h0LqZYnc37b4rtUVGpIZjQiDxvF5C76gzr5dw5e/vg==</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2024-07-18T07:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://test-vm.ipil.lu/moodle/auth/saml2/sp/saml2-logout.php/test-vm.ipil.lu"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://test-vm.ipil.lu/moodle/auth/saml2/sp/saml2-acs.php/test-vm.ipil.lu" index="0"/>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">E-learning platform</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">{mlang fr}IPIL Formations e-learning en Propriété Intellectuelle{mlang}{mlang en}IPIL e-learning courses in Intellectual Property{mlang}</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://test-vm.ipil.lu/moodle</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:EmailAddress>mailto:training@ipil.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-restena:authentication:test:login.restena.lu:luxchat4re">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2025-05-23T07:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://login.restena.lu/simplesaml_dev/module.php/saml/sp/discoResponse/eduID-LU-IdP-discovery" index="0"/>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">LuxChat for R&amp;E (TEST Environment)</mdui:DisplayName>
          <mdui:Description xml:lang="en">(TEST Environment)Login to the LuxChat for R&amp;E service for participating eduID Luxembourg Identity Providers</mdui:Description>
          <mdui:Description xml:lang="fr">(TEST Environment)Le login vers LuxChat for R&amp;E pour les fournisseurs d identité eduID Luxembourg qui y participent</mdui:Description>
          <mdui:Description xml:lang="de">(TEST Environment)Login zum Service LuxChat for R&amp;E für teilnehmende eduID Luxembourg Identitätsprovider</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA OIDC bridge federation</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://login.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-logout.php/eduID-LU-IdP-discovery"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/eduID-LU-IdP-discovery" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/eduID-LU-IdP-discovery" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">LuxChat for R&amp;E (TEST Environment)</md:ServiceName>
        <md:ServiceDescription xml:lang="en">(TEST Environment)Login to the LuxChat for R&amp;E service for participating eduID Luxembourg Identity Providers</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">(TEST Environment)Le login vers LuxChat for R&amp;E pour les fournisseurs d identité eduID Luxembourg qui y participent</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">(TEST Environment)Login zum Service LuxChat for R&amp;E für teilnehmende eduID Luxembourg Identitätsprovider</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-restena:authentication:prod:login.restena.lu:luxchat4re">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2025-05-23T12:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://login.restena.lu/simplesamlphp/module.php/saml/sp/discoResponse/eduID-LU-IdP-discovery" index="0"/>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">LuxChat for R&amp;E</mdui:DisplayName>
          <mdui:Description xml:lang="en">Login to the LuxChat for R&amp;E service for participating eduID Luxembourg Identity Providers</mdui:Description>
          <mdui:Description xml:lang="fr">Le login vers LuxChat for R&amp;E pour les fournisseurs d identité eduID Luxembourg qui y participent</mdui:Description>
          <mdui:Description xml:lang="de">Login zum Service LuxChat for R&amp;E für teilnehmende eduID Luxembourg Identitätsprovider</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA OIDC bridge federation</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://login.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.restena.lu/simplesamlphp/module.php/saml/sp/saml2-logout.php/eduID-LU-IdP-discovery"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/eduID-LU-IdP-discovery" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/eduID-LU-IdP-discovery" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">LuxChat for R&amp;E</md:ServiceName>
        <md:ServiceDescription xml:lang="en">Login to the LuxChat for R&amp;E service for participating eduID Luxembourg Identity Providers</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">Le login vers LuxChat for R&amp;E pour les fournisseurs d identité eduID Luxembourg qui y participent</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">Login zum Service LuxChat for R&amp;E für teilnehmende eduID Luxembourg Identitätsprovider</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-restena:authentication:test:login-oidc.restena.lu:eduid-lu">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-02-19T07:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://login-oidc.restena.lu/simplesaml_dev/module.php/saml/sp/discoResponse/eduID-LU" index="0"/>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">eduID Luxembourg Federated Login Bridge (TEST Environment)</mdui:DisplayName>
          <mdui:Description xml:lang="en">(TEST Environment)This login bridge provides federated access to services via the OpenID Connect protocol.</mdui:Description>
          <mdui:Description xml:lang="fr">(TEST Environment)Un proxy pour des applications basé sur le protocole OpenID Connect.</mdui:Description>
          <mdui:Description xml:lang="de">(TEST Environment)Eine Protokollübersetzungsbrücke für Dienste die auf OpenID Connect basieren.</mdui:Description>
          <mdui:Description xml:lang="lb">(TEST Environment)Desd ass eng Bréck fir Servicer die den Protokoll OpenID Connect benotzen.</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA OIDC bridge federation</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://login.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login-oidc.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-logout.php/eduID-LU"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login-oidc.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/eduID-LU" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login-oidc.restena.lu/simplesaml_dev/module.php/saml/sp/saml2-acs.php/eduID-LU" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">eduID Luxembourg Federated Login Bridge (TEST Environment)</md:ServiceName>
        <md:ServiceDescription xml:lang="en">(TEST Environment)This login bridge provides federated access to services via the OpenID Connect protocol.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">(TEST Environment)Un proxy pour des applications basé sur le protocole OpenID Connect.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">(TEST Environment)Eine Protokollübersetzungsbrücke für Dienste die auf OpenID Connect basieren.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">(TEST Environment)Desd ass eng Bréck fir Servicer die den Protokoll OpenID Connect benotzen.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="urn:x-restena:authentication:prod:login-oidc.restena.lu:eduid-lu">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-02-19T07:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://login-oidc.restena.lu/simplesamlphp/module.php/saml/sp/discoResponse/eduID-LU" index="0"/>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">eduID Luxembourg Federated Login Bridge</mdui:DisplayName>
          <mdui:Description xml:lang="en">This login bridge provides federated access to services via the OpenID Connect protocol.</mdui:Description>
          <mdui:Description xml:lang="fr">Un proxy pour des applications basé sur le protocole OpenID Connect.</mdui:Description>
          <mdui:Description xml:lang="de">Eine Protokollübersetzungsbrücke für Dienste die auf OpenID Connect basieren.</mdui:Description>
          <mdui:Description xml:lang="lb">Desd ass eng Bréck fir Servicer die den Protokoll OpenID Connect benotzen.</mdui:Description>
          <mdui:Keywords xml:lang="en">RESTENA OIDC bridge federation</mdui:Keywords>
          <mdui:Logo width="101" height="105" xml:lang="en">https://login.restena.lu/restena.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>
            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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login-oidc.restena.lu/simplesamlphp/module.php/saml/sp/saml2-logout.php/eduID-LU"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login-oidc.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/eduID-LU" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login-oidc.restena.lu/simplesamlphp/module.php/saml/sp/saml2-acs.php/eduID-LU" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">eduID Luxembourg Federated Login Bridge</md:ServiceName>
        <md:ServiceDescription xml:lang="en">This login bridge provides federated access to services via the OpenID Connect protocol.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="fr">Un proxy pour des applications basé sur le protocole OpenID Connect.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="de">Eine Protokollübersetzungsbrücke für Dienste die auf OpenID Connect basieren.</md:ServiceDescription>
        <md:ServiceDescription xml:lang="lb">Desd ass eng Bréck fir Servicer die den Protokoll OpenID Connect benotzen.</md:ServiceDescription>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.23735.100.0" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RESTENA Foundation asbl</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Fondation RESTENA asbl</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">RESTENA Foundation</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Fondation RESTENA</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.restena.lu/restena/en/EN-Presentation.html</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">http://www.restena.lu/restena/fr/FR-Presentation.html</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>RESTENA NOC</md:GivenName>
      <md:EmailAddress>mailto:noc@restena.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://apps.lem.codes/saml/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-05-22T13:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509Certificate>MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQD1GfNopSgzD6I2ZAU7v8iV1zqSB2UGdiUsbeIgM0bmp5OGTjmi4n9e0gSeu+7VtmD41V1XLzmY12pj2aEAfsDoozdisfvlazEQOId9kkmSQDdO2SJnSELDWTC579wRwgfsZ6L7eCRnJsBofsa2P+RGL93mic7eaNUYxN/jvBvQKSWCCvbJzjpV8nC7DbVcWGRME3bAXx0VnLFx3mGOPwJbTnVV0JRmyGx47JK3kUCg4nv3iJqPHD03/YZln+xQd0Rl2BUsYMOLuYC8qGzgB8lOhfpv7wFGobOUn4VzcMZat4U/1Prmg6/PKPOTe1UDU3EInBaVmvyCyl/KJlIcN4wFAgMBAAECggEAZyhP8Qgp/iujSx8XsMkMJDyc0x83ntuU07k/xeuu+J8pEQrVaT/I+eCMvz47zEjhUXmDupEOvcxUY8gR4kJ28LLZObnNWgaedMRGCkzKmDpczNvIhg28w7lDL87LIdI3QYFw8EPllmCR9Kj++2+ypPO6gjAYGDWpEq6xyIjAcAA+fDadQ5PUT7bR0uz0eJdf0fyamZlH/nLvA/Z8AGKLg4G0Rwgw3f3jwzmUSf5zWUkM1VDp+cOiZmcJ536iWTqw5O5mc6i/rUW6ilNE6ZI/VsKqfUNd8x6MtNy+NHNdZysU2b3XYItw1aC8MUmW3OHJ7tqs5RbwM/TtFF6kqLhFgQKBgQD/F18fLuYQ8/i7DVzBXoP44EICovF45wsu5N1v/Sa3p+eeH6oRAmTfu8QYQ5mLxyRpJeKgZBqQltsoOqnMum4eXBfzCgew1f695Pc8lrRiLmQu5Ftv6kBWBvQJKVJWpCvAMzghOYMfypfV0jsDOHNJSr7ywvp5ojNdC4+/WiB95QKBgQD1+XgRYyeSLftKsEX+h547nGjz1HroZBySxmvMCQnZ9Cm+zgMr/ZNI3YSgGdwqkv+WaXYX6rX58MMHnecPyBtWnmcfzdeD8FhWRaDXqbLzztuI9qKQZoBY6LaMRQ4vwvDlbF5Sk6qig688KNSCVAG8ZAbQdljGaqwuNt0/mKjzoQKBgG5ABq+ukGcBWx5VLyKwG+/j1QPYsu7jRNUWu5IcYrB71EJmQxWo6Do+qAkopmNgRZ9gbWuO+GBHox7nA95lMRTUDtHPIvXN95TRMf4w0HOiw0/1CIP9RaMozC5tepXRzMr8GCVb+w0xfaA/hZvluQYTVSYNGT6a2QI87frxFBv1AoGBAMUzkl1uP0Vk8/i3RgaAOA3WohYKHde+m2HZDodwH6PLqsQ8ajKUg8aBQlkRIoBHhf3S40jddbPCoLm0kJEIf1J8gHTxFH3E7S2NeRwuAziQeVVfVomqg+/D8saWfn8wLO3iaeSOWtkb9hunKGisbQ/aqdPrbdT1pMEQX2UjQSDBAoGAfN/8dU2VhdgReSw/EFI4oE/E9PEBgVIo/Wbw7U7kTGazu15ATi9KWeM1bmBrHaNHXwGdlO/q2ngh8ohtXPjYBahbyYgP+wTceRzHLGmoPT5b22/wNA60utYNF3wX2fgdh93jCl4hH35OTsHCGhtFNEQCiTb3TP9uZOMWdTlhTmg=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://apps.lem.codes/saml/acs.php" index="1"/>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Secondary School Ermesinde</md:OrganizationName>
      <md:OrganizationName xml:lang="fr">Lycée Ermesinde</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Secondary School Ermesinde</md:OrganizationDisplayName>
      <md:OrganizationDisplayName xml:lang="fr">Lycée Ermesinde</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://lem.lu</md:OrganizationURL>
      <md:OrganizationURL xml:lang="fr">https://lem.lu</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Service Informatique LEM</md:GivenName>
      <md:EmailAddress>mailto:informatique@lem.lu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" ID="_4398661a-305b-4965-8d85-7a5643a916a2" entityID="https://sts.windows.net/2cd2c6ea-4356-45a2-8444-cacbd8a744df/">
    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
      <SignedInfo>
        <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <Reference URI="#_4398661a-305b-4965-8d85-7a5643a916a2">
          <Transforms>
            <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </Transforms>
          <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <DigestValue>CPF7ywr7CdtOiWuD1Jrl8qt/ix9SPLsfOqoW14FE77k=</DigestValue>
        </Reference>
      </SignedInfo>
      <SignatureValue>UwvYrAbjzsNxWOeB/V6XsklLNY5ti+j2Fr3bN0VISR/uZXjIZsYbIVy+1i2lhzzN2qCLsIrxp/W87Py1/L+ffax7qzcxgYU6E1ByV+e9z5+SJj6Ly5xQIj7hW1gI591QZq9lPsPtG/tcfa1S0iriCI3KaP4VgaQ5v14kZYGde9gejnEEZk4w/7i2jMgUnUtlSY5Z5J/yieEttSsGPkiPuqlaGa2E7wgfehP35Z525GqUhEcWlV5fr+WbJabo96Se5dp5Pssmy8Xo+orjlIgcRCePJS73uiPffEWUrMiMtk1FvJ7tOwaikqmUYXjZEKLQ7uNcyMBzSJwdBZoeRnNwVg==</SignatureValue>
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-01-08T08:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">vauban.lu</shibmd:Scope>
    </md:Extensions>
    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">Vauban, French Primary and Secondary School in Luxembourg</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">Vauban, Ecole et Lycée Français de Luxembourg</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for Vauban</mdui:Description>
          <mdui:Keywords xml:lang="en">Vauban</mdui:Keywords>
          <mdui:Logo width="78" height="100" xml:lang="en">https://www.vauban.lu/app/themes/vauban/src/assets/logo-vauban-aefe.svg</mdui:Logo>
        </mdui:UIInfo>
      </Extensions>
      <KeyDescriptor use="signing">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/2cd2c6ea-4356-45a2-8444-cacbd8a744df/saml2"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/2cd2c6ea-4356-45a2-8444-cacbd8a744df/saml2"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/2cd2c6ea-4356-45a2-8444-cacbd8a744df/saml2"/>
    </IDPSSODescriptor>
    <Organization>
      <OrganizationName xml:lang="en">Vauban, French Primary and Secondary School in Luxembourg</OrganizationName>
      <OrganizationName xml:lang="fr">Vauban, Ecole et Lycée Français de Luxembourg</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Lycée Vauban</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">https://www.vauban.lu</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
      <GivenName>Sébastien</GivenName>
      <SurName>Desjeunes</SurName>
      <EmailAddress>mailto:s.desjeunes@vauban.lu</EmailAddress>
    </ContactPerson>
  </EntityDescriptor>
  <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" ID="_ec4498a1-1fbe-472b-b9bd-edc20b4c66b5" entityID="https://sts.windows.net/dc0a8df5-07a3-4f82-aca0-230d315fd063/">
    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
      <SignedInfo>
        <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <Reference URI="#_ec4498a1-1fbe-472b-b9bd-edc20b4c66b5">
          <Transforms>
            <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </Transforms>
          <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <DigestValue>NEvBqJw9ilsucfHRXK7h6EY3woShB9CRAsUcp41JYnM=</DigestValue>
        </Reference>
      </SignedInfo>
      <SignatureValue>Nto3EUpUiHhRw0F5HVzQdiAH0Rv3NB4P6ee4KfYIUoO+j0uFQBORwyiXwuJdbiPM36NgUa9B5cAmPWYXLp462nVlVlJrJbuqrcNQp0nJR4fitsp1JTQxj9IQvqADAQRbyXk+4h38lGQhbLw0FFs1GoJsGn6LUh7rvyS2xihJFiJM4jY4StxpS8WmgJNzFoLKybj2E2ukgjD7y8x2m8vCW8ibYfotWsEuGRR8uUGGY8mJIFDfEpBCu2KHkeBYGYFQmRfJcWLWS2Jp3IDBJ+kZQDOWSdoDKNsK3A/KqWLFP5tgwboldsAaLajLC186SGQjuuFhOR26SSQdn3BopxOMww==</SignatureValue>
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://eduid.lu" registrationInstant="2026-01-20T13:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">https://eduid.lu/media/eduid-mrps-02.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">lnds.lu</shibmd:Scope>
    </md:Extensions>
    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">Luxembourg National Data Service (LNDS)</mdui:DisplayName>
          <mdui:DisplayName xml:lang="fr">Plateforme Nationale d'Echange de Données (PNED)</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for LNDS</mdui:Description>
          <mdui:Keywords xml:lang="en">LNDS PNED</mdui:Keywords>
          <mdui:Logo width="78" height="100" xml:lang="en">https://www.lnds.lu/wp-content/themes/lnds-2023/public/images/logo_full.2d72f8.svg</mdui:Logo>
        </mdui:UIInfo>
      </Extensions>
      <KeyDescriptor use="signing">
        <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
          <X509Data>
            <X509Certificate>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</X509Certificate>
          </X509Data>
        </KeyInfo>
      </KeyDescriptor>
      <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/dc0a8df5-07a3-4f82-aca0-230d315fd063/saml2"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/dc0a8df5-07a3-4f82-aca0-230d315fd063/saml2"/>
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/dc0a8df5-07a3-4f82-aca0-230d315fd063/saml2"/>
    </IDPSSODescriptor>
    <Organization>
      <OrganizationName xml:lang="en">Luxembourg National Data Service (LNDS)</OrganizationName>
      <OrganizationName xml:lang="fr">Plateforme Nationale d'Echange de Données (PNED)</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Luxembourg National Data Service (LNDS)</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">https://www.lnds.lu</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
      <GivenName>Nicolas</GivenName>
      <SurName>MELOT</SurName>
      <EmailAddress>mailto:nicolas.melot@lnds.lu</EmailAddress>
    </ContactPerson>
  </EntityDescriptor>
</md:EntitiesDescriptor>
