Index: /aai/clarin-sp-metadata.xml
===================================================================
--- /aai/clarin-sp-metadata.xml	(revision 4616)
+++ /aai/clarin-sp-metadata.xml	(revision 4617)
@@ -1822,126 +1822,132 @@
     </EntityDescriptor>
 
-<!-- CLARIN-NL Meertens institute -->
-    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_b789a3a174a0187c848e235a7ead39f90a4608c0" entityID="https://www.meertens.knaw.nl/Shibboleth.sso/Metadata">
-        
-        <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
-            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
-            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
-            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
-            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
-            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
-            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
-            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
-            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
-            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
-            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
-            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
-        </md:Extensions>
-        
-        <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
-            <md:Extensions>
-                <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
-                    <mdui:DisplayName xml:lang="nl">Meertens Instituut</mdui:DisplayName>
-                    <mdui:DisplayName xml:lang="en">Meertens Institute</mdui:DisplayName>
-                    <mdui:Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot het Meertens Archief en geselecteerde diensten ten behoeve van geesteswetenschappelijk onderzoek op het terrein van Nederlandse taalvariatie en cultuur</mdui:Description>
-                    <mdui:Description xml:lang="en">This Service Provider regulates access to the Meertens Institute Archive and selected services for humanities research activities in the domain of Dutch language variation and culture</mdui:Description>
-                    <mdui:InformationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</mdui:InformationURL>
-                    <mdui:InformationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</mdui:InformationURL>
-                    <mdui:Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen archief</mdui:Keywords>
-                    <mdui:Keywords xml:lang="en">Meertens research documentation language culture humanities archive</mdui:Keywords>
-                    <mdui:Logo height="135" width="200">http://www.meertens.knaw.nl/cms/templates/mi_hetgelaat/css/images/logo_meertens_full.png</mdui:Logo>
-                </mdui:UIInfo><init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://www.meertens.knaw.nl/Shibboleth.sso/DiscoJuice"/>
-                <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://www.meertens.knaw.nl/Shibboleth.sso/DiscoJuice" index="1"/>
-            </md:Extensions>
-            <md:KeyDescriptor>
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>www.meertens.knaw.nl</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509SubjectName>CN=www.meertens.knaw.nl,OU=Meertens Instituut,O=KNAW,C=NL</ds:X509SubjectName>
-                        <ds:X509Certificate>MIIEgjCCA2qgAwIBAgIRAOmcTE0k6Yoag8eNrOUGhicwDQYJKoZIhvcNAQEFBQAw
-                            NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
-                            IFNTTCBDQTAeFw0xMjEyMTcwMDAwMDBaFw0xNTEyMTcyMzU5NTlaMFgxCzAJBgNV
-                            BAYTAk5MMQ0wCwYDVQQKEwRLTkFXMRswGQYDVQQLExJNZWVydGVucyBJbnN0aXR1
-                            dXQxHTAbBgNVBAMTFHd3dy5tZWVydGVucy5rbmF3Lm5sMIIBIjANBgkqhkiG9w0B
-                            AQEFAAOCAQ8AMIIBCgKCAQEAtqF1CkCgz6bB3dv5bTYBRCSwWqgoZActFvigdJsa
-                            DopFIIh+3agGBfmCI4WCb3rAluCw2LYl8mdUaRIXNDr3TkkGQP5Q+pKDHFTd1n0L
-                            TLs7PdTWOG61E/ExIfwTmphUvcrshazJk5xCbFBRbrWFNf/349Anf2ze1mUDBSdl
-                            vRTTyuYcckJKV7OHMnOh3+EsCHOkX1KsOwyhQKfmtpL7n/meIPkF9KwFocsxTjNx
-                            inZDHxTmikjzr6kguu5grEIeXbbA1mfO0AHVGiaXRyvNDl+EoX7IqEKJQbbIKwpd
-                            h1t/CHvZ/PFWdyM8K4IuDdImD3sjoYCg78yLHnR0lJJ8twIDAQABo4IBZzCCAWMw
-                            HwYDVR0jBBgwFoAUDL2TaAzz3qujSWsrN1dH6pDjue0wHQYDVR0OBBYEFOPgQ/s6
-                            AVKL7kI1LBCGTOSGGWk0MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
-                            A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAYBgNVHSAEETAPMA0GCysGAQQB
-                            sjEBAgIdMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwudGNzLnRlcmVuYS5v
-                            cmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUFBwEBBGEwXzA1BggrBgEFBQcwAoYp
-                            aHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5jcnQwJgYIKwYB
-                            BQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJlbmEub3JnMB8GA1UdEQQYMBaCFHd3
-                            dy5tZWVydGVucy5rbmF3Lm5sMA0GCSqGSIb3DQEBBQUAA4IBAQA9ZZaYfsUQ5/9d
-                            uqDpjUaKPkXOfyKUNllh8mInY/LE8hWp+M3L4i5iiAkFkyp+v/d07AZDR0r0F7Jp
-                            +8hEY6HdP5+sdcTzlk6E3QezOmTAIUVcSNYLPuqyvyx0hmGZR1S4z+vYqTNyQMW1
-                            2L/MYOCTUdwruEmqyBR2goNyq0k6K3l5vh6TqV20E45SzpB2JEGRTIPWt46cRJNx
-                            wmpzyA4aXLGH97Z8DFjC2hi1bazaVr9E109r0NMXO/8yaLtc0Ok/vWHLUPB4TLCP
-                            HI6pYTwazmo1x3l7TmGhmhEcVc1JCN0ByVLWB+DvzXsCxYtDItsHPXj2MVPnqMJo
-                            GTLw7jCk
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
-                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
-                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
-                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
-                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
-                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
-            </md:KeyDescriptor>
-            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
-            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/SOAP"/>
-            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Redirect"/>
-            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/POST"/>
-            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Artifact"/>
-            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/SOAP"/>
-            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Redirect"/>
-            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/POST"/>
-            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Artifact"/>
-            <md:NameIDFormat>
-                urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
-            </md:NameIDFormat>
-            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="1"/>
-            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
-            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
-            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
-            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="5"/>
-            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
-            <md:AttributeConsumingService index="1">
-                <md:ServiceName xml:lang="en">https://www.meertens.knaw.nl/Shibboleth.sso/Metadata</md:ServiceName>
-                <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
-                <md:RequestedAttribute FriendlyName="mail" Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
-                <md:RequestedAttribute FriendlyName="displayName" Name="urn:mace:dir:attribute-def:displayName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
-                <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
-                <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
-                <md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
-            </md:AttributeConsumingService>
-        </md:SPSSODescriptor>
-        
-        <md:Organization>
-            <md:OrganizationName xml:lang="nl">Meertens Instituut</md:OrganizationName>
-            <md:OrganizationName xml:lang="en">Meertens Institute</md:OrganizationName>
-            <md:OrganizationDisplayName xml:lang="nl">Meertens Instituut</md:OrganizationDisplayName>
-            <md:OrganizationDisplayName xml:lang="en">Meertens Institute</md:OrganizationDisplayName>
-            <md:OrganizationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</md:OrganizationURL>
-            <md:OrganizationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</md:OrganizationURL>
-        </md:Organization><md:ContactPerson contactType="support">
-            <md:GivenName>KNAW</md:GivenName>
-            <md:SurName>Support</md:SurName>
-            <md:EmailAddress>servicedesk@knaw.nl</md:EmailAddress>
-        </md:ContactPerson><md:ContactPerson contactType="technical">
-            <md:GivenName>Marc</md:GivenName>
-            <md:SurName>Kemps-Snijders</md:SurName>
-            <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
-        </md:ContactPerson><md:ContactPerson contactType="administrative">
-            <md:GivenName>Marc</md:GivenName>
-            <md:SurName>Kemps-Snijders</md:SurName>
-            <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
-        </md:ContactPerson>
-    </md:EntityDescriptor>
+	<!-- CLARIN-NL Meertens institute -->
+	<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_b789a3a174a0187c848e235a7ead39f90a4608c0" entityID="https://www.meertens.knaw.nl/Shibboleth.sso/Metadata">
+	  <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+		<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+						<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+							<saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
+						</saml:Attribute>
+					</mdattr:EntityAttributes><alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+	  </md:Extensions>
+
+	  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+		<md:Extensions>
+		  <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+						<mdui:DisplayName xml:lang="nl">Meertens Instituut</mdui:DisplayName>
+						<mdui:DisplayName xml:lang="en">Meertens Institute</mdui:DisplayName>
+						<mdui:Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot het Meertens Archief en geselecteerde diensten ten behoeve van geesteswetenschappelijk onderzoek op het terrein van Nederlandse taalvariatie en cultuur</mdui:Description>
+						<mdui:Description xml:lang="en">This Service Provider regulates access to the Meertens Institute Archive and selected services for humanities research activities in the domain of Dutch language variation and culture</mdui:Description>
+						<mdui:InformationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</mdui:InformationURL>
+						<mdui:InformationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</mdui:InformationURL>
+						<mdui:Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen archief</mdui:Keywords>
+						<mdui:Keywords xml:lang="en">Meertens research documentation language culture humanities archive</mdui:Keywords>
+						<mdui:PrivacyStatementURL xml:lang="en">https://www.meertens.knaw.nl/cms/collections/data-protection</mdui:PrivacyStatementURL>
+						<mdui:Logo height="135" width="200">http://www.meertens.knaw.nl/cms/templates/mi_hetgelaat/css/images/logo_meertens_full.png</mdui:Logo>
+					</mdui:UIInfo><init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Login"/>
+		  <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Login" index="1"/>
+		</md:Extensions>
+		<md:KeyDescriptor>
+		  <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+			<ds:KeyName>www.meertens.knaw.nl</ds:KeyName>
+			<ds:X509Data>
+			  <ds:X509SubjectName>CN=www.meertens.knaw.nl,OU=Meertens Instituut,O=KNAW,C=NL</ds:X509SubjectName>
+			  <ds:X509Certificate>MIIEgjCCA2qgAwIBAgIRAOmcTE0k6Yoag8eNrOUGhicwDQYJKoZIhvcNAQEFBQAw
+	NjELMAkGA1UEBhMCTkwxDzANBgNVBAoTBlRFUkVOQTEWMBQGA1UEAxMNVEVSRU5B
+	IFNTTCBDQTAeFw0xMjEyMTcwMDAwMDBaFw0xNTEyMTcyMzU5NTlaMFgxCzAJBgNV
+	BAYTAk5MMQ0wCwYDVQQKEwRLTkFXMRswGQYDVQQLExJNZWVydGVucyBJbnN0aXR1
+	dXQxHTAbBgNVBAMTFHd3dy5tZWVydGVucy5rbmF3Lm5sMIIBIjANBgkqhkiG9w0B
+	AQEFAAOCAQ8AMIIBCgKCAQEAtqF1CkCgz6bB3dv5bTYBRCSwWqgoZActFvigdJsa
+	DopFIIh+3agGBfmCI4WCb3rAluCw2LYl8mdUaRIXNDr3TkkGQP5Q+pKDHFTd1n0L
+	TLs7PdTWOG61E/ExIfwTmphUvcrshazJk5xCbFBRbrWFNf/349Anf2ze1mUDBSdl
+	vRTTyuYcckJKV7OHMnOh3+EsCHOkX1KsOwyhQKfmtpL7n/meIPkF9KwFocsxTjNx
+	inZDHxTmikjzr6kguu5grEIeXbbA1mfO0AHVGiaXRyvNDl+EoX7IqEKJQbbIKwpd
+	h1t/CHvZ/PFWdyM8K4IuDdImD3sjoYCg78yLHnR0lJJ8twIDAQABo4IBZzCCAWMw
+	HwYDVR0jBBgwFoAUDL2TaAzz3qujSWsrN1dH6pDjue0wHQYDVR0OBBYEFOPgQ/s6
+	AVKL7kI1LBCGTOSGGWk0MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0G
+	A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAYBgNVHSAEETAPMA0GCysGAQQB
+	sjEBAgIdMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwudGNzLnRlcmVuYS5v
+	cmcvVEVSRU5BU1NMQ0EuY3JsMG0GCCsGAQUFBwEBBGEwXzA1BggrBgEFBQcwAoYp
+	aHR0cDovL2NydC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5jcnQwJgYIKwYB
+	BQUHMAGGGmh0dHA6Ly9vY3NwLnRjcy50ZXJlbmEub3JnMB8GA1UdEQQYMBaCFHd3
+	dy5tZWVydGVucy5rbmF3Lm5sMA0GCSqGSIb3DQEBBQUAA4IBAQA9ZZaYfsUQ5/9d
+	uqDpjUaKPkXOfyKUNllh8mInY/LE8hWp+M3L4i5iiAkFkyp+v/d07AZDR0r0F7Jp
+	+8hEY6HdP5+sdcTzlk6E3QezOmTAIUVcSNYLPuqyvyx0hmGZR1S4z+vYqTNyQMW1
+	2L/MYOCTUdwruEmqyBR2goNyq0k6K3l5vh6TqV20E45SzpB2JEGRTIPWt46cRJNx
+	wmpzyA4aXLGH97Z8DFjC2hi1bazaVr9E109r0NMXO/8yaLtc0Ok/vWHLUPB4TLCP
+	HI6pYTwazmo1x3l7TmGhmhEcVc1JCN0ByVLWB+DvzXsCxYtDItsHPXj2MVPnqMJo
+	GTLw7jCk
+	</ds:X509Certificate>
+			</ds:X509Data>
+		  </ds:KeyInfo>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+		</md:KeyDescriptor>
+		<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
+		<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="2"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/SOAP"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Redirect"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/POST"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Artifact"/>
+		<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/SOAP"/>
+		<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Redirect"/>
+		<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/POST"/>
+		<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Artifact"/>
+		<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="1"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="5"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="7"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="8"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="9"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="10"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="11"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="12"/>
+		<md:AttributeConsumingService index="1">
+		  <md:ServiceName xml:lang="en">https://www.meertens.knaw.nl/Shibboleth.sso/Metadata</md:ServiceName>
+		  <md:RequestedAttribute Name="urn:mace:terena.org:attribute-def:schacHomeOrganization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+		  <md:RequestedAttribute Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+		  <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+		</md:AttributeConsumingService>
+	  </md:SPSSODescriptor>
+
+	  <md:Organization>
+			<md:OrganizationName xml:lang="nl">Meertens Instituut</md:OrganizationName>
+			<md:OrganizationName xml:lang="en">Meertens Institute</md:OrganizationName>
+			<md:OrganizationDisplayName xml:lang="nl">Meertens Instituut</md:OrganizationDisplayName>
+			<md:OrganizationDisplayName xml:lang="en">Meertens Institute</md:OrganizationDisplayName>
+			<md:OrganizationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</md:OrganizationURL>
+			<md:OrganizationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</md:OrganizationURL>
+		</md:Organization><md:ContactPerson contactType="support">
+			<md:GivenName>KNAW</md:GivenName>
+			<md:SurName>Support</md:SurName>
+			<md:EmailAddress>servicedesk@knaw.nl</md:EmailAddress>
+		</md:ContactPerson><md:ContactPerson contactType="technical">
+			<md:GivenName>Marc</md:GivenName>
+			<md:SurName>Kemps-Snijders</md:SurName>
+			<md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
+		</md:ContactPerson><md:ContactPerson contactType="administrative">
+			<md:GivenName>Marc</md:GivenName>
+			<md:SurName>Kemps-Snijders</md:SurName>
+			<md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
+		</md:ContactPerson>
+	</md:EntityDescriptor>
 
 <!-- start of SPs that are not yet an official part of the Service Provider Federation. These will only have access to the CLARIN IdP! -->
@@ -3638,39 +3644,45 @@
 	<!-- OpenSKOS Meertens | KNAW  -->
 	<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_f8e1e427cb18d23d8ca924d2c01604c05969033f" entityID="https://openskos.meertens.knaw.nl/shibboleth">
-		<md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
-		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
-	    	<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
-	    	<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
-	    	<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
-	    	<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
-	    	<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
-	    	<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
-	    	<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
-	    	<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
-	    	<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
-	    	<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
-	 	</md:Extensions>
-	
-	<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
-	<md:Extensions>
-	<mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
-	                    <mdui:DisplayName xml:lang="nl">OpenSKOS | Meertens</mdui:DisplayName>
-	                    <mdui:DisplayName xml:lang="en">OpenSKOS | Meertens</mdui:DisplayName>
-	                    <mdui:Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot de Simple Knowledge Organization System Repository die gehost wordt vanuit het Meertens Instituut</mdui:Description>
-	                    <mdui:Description xml:lang="en">This Service Provider provides access to the Meertens Institute's Simple Knowledge Organization System Repository</mdui:Description>
-	                    <mdui:InformationURL xml:lang="nl">https://openskos.meertens.knaw.nl</mdui:InformationURL>
-	                    <mdui:InformationURL xml:lang="en">https://openskos.meertens.knaw.nl</mdui:InformationURL>
-	                    <mdui:Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen CLAVAS CLARIN OpenSKOS Vocabulary Service</mdui:Keywords>
-	                    <mdui:Keywords xml:lang="en">Meertens research documentation language culture humanities CLAVAS CLARIN OpenSKOS Vocabulary Service </mdui:Keywords>
-	                    <mdui:Logo height="64" width="44">https://openskos.meertens.knaw.nl/assets/images/logo-open-skos.png</mdui:Logo>
-	                </mdui:UIInfo><init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/Login"/>
-	      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/Login" index="1"/>
-	    </md:Extensions>
-	    <md:KeyDescriptor>
-	      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-	        <ds:KeyName>twww11</ds:KeyName>
-	        <ds:X509Data>
-	          <ds:X509SubjectName>CN=twww11</ds:X509SubjectName>
-	          <ds:X509Certificate>MIIC2TCCAcGgAwIBAgIJAOJ/2Z9fcxVXMA0GCSqGSIb3DQEBBQUAMBExDzANBgNV
+
+	  <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+		<mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+						<saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+							<saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
+						</saml:Attribute>
+					</mdattr:EntityAttributes><alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+		<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+		<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+	  </md:Extensions>
+
+	  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+		<md:Extensions>
+		  <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+						<mdui:DisplayName xml:lang="nl">OpenSKOS | Meertens</mdui:DisplayName>
+						<mdui:DisplayName xml:lang="en">OpenSKOS | Meertens</mdui:DisplayName>
+						<mdui:Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot de Simple Knowledge Organization System Repository die gehost wordt vanuit het Meertens Instituut</mdui:Description>
+						<mdui:Description xml:lang="en">This Service Provider provides access to the Meertens Institute's Simple Knowledge Organization System Repository</mdui:Description>
+						<mdui:InformationURL xml:lang="nl">https://openskos.meertens.knaw.nl</mdui:InformationURL>
+						<mdui:InformationURL xml:lang="en">https://openskos.meertens.knaw.nl</mdui:InformationURL>
+						<mdui:Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen CLAVAS CLARIN OpenSKOS Vocabulary Service</mdui:Keywords>
+						<mdui:Keywords xml:lang="en">Meertens research documentation language culture humanities CLAVAS CLARIN OpenSKOS Vocabulary Service </mdui:Keywords>
+						<mdui:PrivacyStatementURL xml:lang="en">https://www.meertens.knaw.nl/cms/collections/data-protection</mdui:PrivacyStatementURL>
+						<mdui:Logo height="64" width="44">https://openskos.meertens.knaw.nl/assets/images/logo-open-skos.png</mdui:Logo>
+					</mdui:UIInfo><init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/Login"/>
+		  <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/Login" index="1"/>
+		</md:Extensions>
+		<md:KeyDescriptor>
+		  <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+			<ds:KeyName>twww11</ds:KeyName>
+			<ds:X509Data>
+			  <ds:X509SubjectName>CN=twww11</ds:X509SubjectName>
+			  <ds:X509Certificate>MIIC2TCCAcGgAwIBAgIJAOJ/2Z9fcxVXMA0GCSqGSIb3DQEBBQUAMBExDzANBgNV
 	BAMTBnR3d3cxMTAeFw0xMzA0MTYxNTA3MzhaFw0yMzA0MTQxNTA3MzhaMBExDzAN
 	BgNVBAMTBnR3d3cxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAP4a
@@ -3689,55 +3701,53 @@
 	1bxBV69YDJSB5BjVPA==
 	</ds:X509Certificate>
-	        </ds:X509Data>
-	      </ds:KeyInfo>
-	      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
-	      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
-	      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
-	      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
-	      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
-	      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
-	    </md:KeyDescriptor>
-	    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
-	    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/SOAP"/>
-	    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/Redirect"/>
-	    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/POST"/>
-	    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/Artifact"/>
-	    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
-	    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="1"/>
-	    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
-	    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
-	    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
-	    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="5"/>
-	    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
-	    <md:AttributeConsumingService index="1">
-	      <md:ServiceName xml:lang="en">https://openskos.meertens.knaw.nl/shibboleth</md:ServiceName>
-	      <md:RequestedAttribute Name="urn:mace:terena.org:attribute-def:schacHomeOrganization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
-	      <md:RequestedAttribute Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
-	      <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
-	    </md:AttributeConsumingService>
+			</ds:X509Data>
+		  </ds:KeyInfo>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+		  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+		</md:KeyDescriptor>
+		<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/SOAP"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/Redirect"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/POST"/>
+		<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SLO/Artifact"/>
+		<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="1"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="5"/>
+		<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://openskos.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
+		<md:AttributeConsumingService index="1">
+		  <md:ServiceName xml:lang="en">https://openskos.meertens.knaw.nl/shibboleth</md:ServiceName>
+		  <md:RequestedAttribute Name="urn:mace:terena.org:attribute-def:schacHomeOrganization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+		  <md:RequestedAttribute Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+		  <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+		</md:AttributeConsumingService>
 	  </md:SPSSODescriptor>
 
 	  <md:Organization>
-                    <md:OrganizationName xml:lang="nl">Meertens Instituut</md:OrganizationName>
-                    <md:OrganizationName xml:lang="en">Meertens Institute</md:OrganizationName>
-                    <md:OrganizationDisplayName xml:lang="nl">Meertens Instituut</md:OrganizationDisplayName>
-                    <md:OrganizationDisplayName xml:lang="en">Meertens Institute</md:OrganizationDisplayName>
-                    <md:OrganizationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</md:OrganizationURL>
-                    <md:OrganizationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</md:OrganizationURL>
-                </md:Organization><md:ContactPerson contactType="support">
-                    <md:GivenName>KNAW</md:GivenName>
-                    <md:SurName>Support</md:SurName>
-                    <md:EmailAddress>servicedesk@knaw.nl</md:EmailAddress>
-                </md:ContactPerson><md:ContactPerson contactType="technical">
-                    <md:GivenName>Marc</md:GivenName>
-                    <md:SurName>Kemps-Snijders</md:SurName>
-                    <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
-                </md:ContactPerson><md:ContactPerson contactType="administrative">
-                    <md:GivenName>Marc</md:GivenName>
-                    <md:SurName>Kemps-Snijders</md:SurName>
-                    <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
-                </md:ContactPerson>
+						<md:OrganizationName xml:lang="nl">Meertens Instituut</md:OrganizationName>
+						<md:OrganizationName xml:lang="en">Meertens Institute</md:OrganizationName>
+						<md:OrganizationDisplayName xml:lang="nl">Meertens Instituut</md:OrganizationDisplayName>
+						<md:OrganizationDisplayName xml:lang="en">Meertens Institute</md:OrganizationDisplayName>
+						<md:OrganizationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</md:OrganizationURL>
+						<md:OrganizationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</md:OrganizationURL>
+					</md:Organization><md:ContactPerson contactType="support">
+						<md:GivenName>KNAW</md:GivenName>
+						<md:SurName>Support</md:SurName>
+						<md:EmailAddress>servicedesk@knaw.nl</md:EmailAddress>
+					</md:ContactPerson><md:ContactPerson contactType="technical">
+						<md:GivenName>Marc</md:GivenName>
+						<md:SurName>Kemps-Snijders</md:SurName>
+						<md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
+					</md:ContactPerson><md:ContactPerson contactType="administrative">
+						<md:GivenName>Marc</md:GivenName>
+						<md:SurName>Kemps-Snijders</md:SurName>
+						<md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
+					</md:ContactPerson>
 	</md:EntityDescriptor>
-
-
 </EntitiesDescriptor>
