Changeset 5513


Ignore:
Timestamp:
08/01/14 13:21:02 (10 years ago)
Author:
Sander Maijers
Message:
  • Add GÉANT Data Protection Code of Conduct adherence to Tübingen's SP to reflect SAML metadata published through eduGAIN.
  • General cleanup: first work on uniform namespace prefix definitions, whitespace cleanup and text revision.
File:
1 edited

Legend:

Unmodified
Added
Removed

  • aai/clarin-sp-metadata.xml

    r5293 r5513  
    55-->
    66<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
     7    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
     8    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     9    xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
     10    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     11    xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
     12    xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
     13    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
     14    xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
     15    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
    716    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    8     xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
    917    xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata saml-schema-metadata-2.0.xsd
     18                        http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd
     19                        urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol sstc-saml-idp-discovery.xsd
     20                        urn:oasis:names:tc:SAML:metadata:attribute sstc-metadata-attr.xsd
     21                        urn:oasis:names:tc:SAML:metadata:rpi saml-metadata-rpi-v1.0.xsd
    1022                        urn:oasis:names:tc:SAML:metadata:ui sstc-saml-metadata-ui-v1.0.xsd
    11                         urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd
    12                         http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd"
     23                        urn:oasis:names:tc:SAML:2.0:assertion sstc-saml-schema-assertion-2.0.xsd
     24                        urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd"
    1325    Name="http://www.clarin.eu/spf">
    14 
    15 
    16     <!-- start of SPs that *are* an official part of the Service Provider Federation. These will have access to the national SPs and the CLARIN IdP. -->
    17 
     26    <!-- Start of production SPs (officially participating in the Service Provider Federation). See: https://www.clarin.eu/spf . -->
    1827    <!-- BBAW (via CLARIN) -->
    1928    <EntityDescriptor entityID="https://shibboleth.bbaw.de/shibboleth">
    … …  
    153162    </EntityDescriptor>
    154163
    155     <!-- CSC (via CLARIN) -->
     164    <!-- CSC lat (via CLARIN) -->
    156165    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
    157166        xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://sp.lat.csc.fi">
    … …  
    278287    </EntityDescriptor>
    279288
     289    <!-- CSC korp (via CLARIN) -->
    280290    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
    281291        xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sp.korp.csc.fi/">
    … …  
    416426                <!-- start : required for terena CoC -->
    417427                <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
    418                     <mdui:DisplayName xml:lang="en">Huygens ING (KNAW) - CLARIN services</mdui:DisplayName>
    419                     <mdui:Description xml:lang="en">Various services provided by Huygens ING
    420                         in the context of the CLARIN initiative.</mdui:Description>
    421                     <mdui:InformationURL xml:lang="nl">http://www.huygens.knaw.nl</mdui:InformationURL>
    422                     <mdui:InformationURL xml:lang="en">http://www.huygens.knaw.nl/?lang=en</mdui:InformationURL>
     428                    <mdui:DisplayName xml:lang="en">Huygens ING (KNAW) - CLARIN
     429                        services</mdui:DisplayName>
     430                    <mdui:Description xml:lang="en">Various services provided by Huygens ING in the
     431                        context of the CLARIN initiative.</mdui:Description>
     432                    <mdui:InformationURL xml:lang="nl"
     433                        >http://www.huygens.knaw.nl</mdui:InformationURL>
     434                    <mdui:InformationURL xml:lang="en"
     435                        >http://www.huygens.knaw.nl/?lang=en</mdui:InformationURL>
    423436                    <mdui:PrivacyStatementURL xml:lang="en"
    424437                        >http://www.huygens.knaw.nl/wp-content/uploads/2013/10/20140327-privacy-policy-HIRE2.pdf</mdui:PrivacyStatementURL>
    … …  
    433446        <Organization>
    434447            <OrganizationName xml:lang="en">Huygens Instituut (KNAW)</OrganizationName>
    435             <OrganizationDisplayName xml:lang="en">Huygens Instituut (KNAW)</OrganizationDisplayName>
     448            <OrganizationDisplayName xml:lang="en">Huygens Instituut
     449                (KNAW)</OrganizationDisplayName>
    436450            <OrganizationURL xml:lang="en">http://www.huygens.knaw.nl/</OrganizationURL>
    437451        </Organization>
    … …  
    794808
    795809    <!-- MPI lux17.mpi.nl (via CLARIN) -->
    796     <md:EntityDescriptor entityID="https://sp.lux17.mpi.nl" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    797         <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     810    <md:EntityDescriptor entityID="https://sp.lux17.mpi.nl"
     811        xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
     812        <md:SPSSODescriptor
     813            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    798814            <md:Extensions>
    799815                <!-- start : required for terena CoC -->
    800816                <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
    801                     <mdui:DisplayName xml:lang="en">Max Planck Institute for Psycholinguistics second Service Provider</mdui:DisplayName>
    802                     <mdui:DisplayName xml:lang="nl">Max Planck Instituut voor Psycholinguistiek tweede Service Provider</mdui:DisplayName>
    803                     <mdui:Description xml:lang="en">Max Planck Institute for Psycholinguistics second Service Provider for Linguistic Services aimed at researchers</mdui:Description>
    804                     <mdui:Description xml:lang="nl">Max Planck Instituut voor Psycholinguistiek tweede Service Provider voor Taalkundige Services gericht op onderzoekers</mdui:Description>
    805                     <mdui:Keywords xml:lang="en">Max Planck Institute for Psycholinguistics Lux17 Service Provider Linguistic Services</mdui:Keywords>
    806                     <mdui:Keywords xml:lang="nl">Max Planck Instituut voor Psycholinguistiek Lux17 Service Provider Taalkundige Services</mdui:Keywords>
    807                     <mdui:Logo height="90" width="90">https://lux17.mpi.nl/gif/mpg-logo-90x90-grey.gif</mdui:Logo>
    808                     <mdui:PrivacyStatementURL xml:lang="en">https://lux17.mpi.nl/privacy_statement.html</mdui:PrivacyStatementURL>
     817                    <mdui:DisplayName xml:lang="en">Max Planck Institute for Psycholinguistics
     818                        second Service Provider</mdui:DisplayName>
     819                    <mdui:DisplayName xml:lang="nl">Max Planck Instituut voor Psycholinguistiek
     820                        tweede Service Provider</mdui:DisplayName>
     821                    <mdui:Description xml:lang="en">Max Planck Institute for Psycholinguistics
     822                        second Service Provider for Linguistic Services aimed at
     823                        researchers</mdui:Description>
     824                    <mdui:Description xml:lang="nl">Max Planck Instituut voor Psycholinguistiek
     825                        tweede Service Provider voor Taalkundige Services gericht op
     826                        onderzoekers</mdui:Description>
     827                    <mdui:Keywords xml:lang="en">Max Planck Institute for Psycholinguistics Lux17
     828                        Service Provider Linguistic Services</mdui:Keywords>
     829                    <mdui:Keywords xml:lang="nl">Max Planck Instituut voor Psycholinguistiek Lux17
     830                        Service Provider Taalkundige Services</mdui:Keywords>
     831                    <mdui:Logo height="90" width="90"
     832                        >https://lux17.mpi.nl/gif/mpg-logo-90x90-grey.gif</mdui:Logo>
     833                    <mdui:PrivacyStatementURL xml:lang="en"
     834                        >https://lux17.mpi.nl/privacy_statement.html</mdui:PrivacyStatementURL>
    809835                </mdui:UIInfo>
    810836                <EntityAttributes xmlns="urn:oasis:names:tc:SAML:metadata:attribute">
    811837                    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
    812                                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
    813                                Name="http://macedir.org/entity-category">
     838                        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
     839                        Name="http://macedir.org/entity-category">
    814840                        <AttributeValue>http://www.edugain.org/dataprotection/coc-eu-01-draft</AttributeValue>
    815841                    </Attribute>
    816842                </EntityAttributes>
    817843                <!-- end : required for terena CoC -->
    818                 <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    819                                            index="1" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    820                                            Location="http://lux17.mpi.nl/Shibboleth.sso/DS"/>
    821                 <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    822                                            index="2" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    823                                            Location="https://lux17.mpi.nl/Shibboleth.sso/DS"/>
     844                <idpdisc:DiscoveryResponse
     845                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     846                    index="1" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     847                    Location="http://lux17.mpi.nl/Shibboleth.sso/DS"/>
     848                <idpdisc:DiscoveryResponse
     849                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     850                    index="2" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     851                    Location="https://lux17.mpi.nl/Shibboleth.sso/DS"/>
    824852            </md:Extensions>
    825853            <md:KeyDescriptor>
    … …  
    827855                    <ds:X509Data>
    828856                        <ds:X509Certificate>
    829     MIIDaDCCAlACCQD2mDCAJYMG3jANBgkqhkiG9w0BAQUFADB2MQswCQYDVQQGEwJO
    830     TDEMMAoGA1UECBMDR0xEMREwDwYDVQQHEwhOaWptZWdlbjEPMA0GA1UEChMGTVBJ
    831     LVBMMRUwEwYDVQQDEwxsdXgxNy5tcGkubmwxHjAcBgkqhkiG9w0BCQEWD2xhdGFk
    832     bWluQG1waS5ubDAeFw0xNDA1MDIxMTI2MDZaFw0xOTA1MDExMTI2MDZaMHYxCzAJ
    833     BgNVBAYTAk5MMQwwCgYDVQQIEwNHTEQxETAPBgNVBAcTCE5pam1lZ2VuMQ8wDQYD
    834     VQQKEwZNUEktUEwxFTATBgNVBAMTDGx1eDE3Lm1waS5ubDEeMBwGCSqGSIb3DQEJ
    835     ARYPbGF0YWRtaW5AbXBpLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
    836     AQEA3QaSP0LJ0mVZZIdEh7zFJW8lnkVGQFuueAiDfVVvGtGvJ5iz7CRoyrdTQDco
    837     oJjQDFub/uU6v0i+saVgI+LuzUlq28hrKF5hIjhWCLMRgYZzsnArcGK3etcChsNE
    838     OPfWNCOCGi90sIqNmJcVRoDw36tLiHXmIkhcy4ZE06SYXvT+qAwo4h30Z/IH2de/
    839     QlYEpkqF131p2lJGWx1Bi5l7IMeZtlwIzbJn08htAT/T8h6g9XvDfmQxS4xuiXGr
    840     uRwVhTTkTP9OsdrXkktJEkSE2p+qP0tYekb+ZPd4LzlSjnDWf3V1T/DrbL071eiC
    841     rx2iDW3n5Wy7so0iwmU5nr9QhwIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQAFSrqi
    842     HOMohDd4JXB3rjX8npCSTTeam84LTI1Twd8GXOmDQ8izcwsfUIILusEqd+66V/kh
    843     iwnBgmrwgw0CVEZjgwkbVdZH68RGO4i6n5hZwmzr5jx4yNkfLZ5uwfHLIkqgJjj0
    844     DvsA6Saom/5BD6dln6TuQ9cwFu+9pOxaWjfEeD2Rm5HFP+VF9GPxM19Gs6xcYi2L
    845     GlEfBQvH/6vp65r3ciw760KPeO1ITxaIfqX5fOxOaA0NLOIGLjX0G11vf/i3n1OQ
    846     MZTR7RMV+bjZiLNoPOJ/Ezz5lr+k0V12yVJ35J2J6TIz6lcB9M1tCFDY7tS89nYf
    847     HFhkY9jzkGrcHMME</ds:X509Certificate>
     857                            MIIDaDCCAlACCQD2mDCAJYMG3jANBgkqhkiG9w0BAQUFADB2MQswCQYDVQQGEwJO
     858                            TDEMMAoGA1UECBMDR0xEMREwDwYDVQQHEwhOaWptZWdlbjEPMA0GA1UEChMGTVBJ
     859                            LVBMMRUwEwYDVQQDEwxsdXgxNy5tcGkubmwxHjAcBgkqhkiG9w0BCQEWD2xhdGFk
     860                            bWluQG1waS5ubDAeFw0xNDA1MDIxMTI2MDZaFw0xOTA1MDExMTI2MDZaMHYxCzAJ
     861                            BgNVBAYTAk5MMQwwCgYDVQQIEwNHTEQxETAPBgNVBAcTCE5pam1lZ2VuMQ8wDQYD
     862                            VQQKEwZNUEktUEwxFTATBgNVBAMTDGx1eDE3Lm1waS5ubDEeMBwGCSqGSIb3DQEJ
     863                            ARYPbGF0YWRtaW5AbXBpLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
     864                            AQEA3QaSP0LJ0mVZZIdEh7zFJW8lnkVGQFuueAiDfVVvGtGvJ5iz7CRoyrdTQDco
     865                            oJjQDFub/uU6v0i+saVgI+LuzUlq28hrKF5hIjhWCLMRgYZzsnArcGK3etcChsNE
     866                            OPfWNCOCGi90sIqNmJcVRoDw36tLiHXmIkhcy4ZE06SYXvT+qAwo4h30Z/IH2de/
     867                            QlYEpkqF131p2lJGWx1Bi5l7IMeZtlwIzbJn08htAT/T8h6g9XvDfmQxS4xuiXGr
     868                            uRwVhTTkTP9OsdrXkktJEkSE2p+qP0tYekb+ZPd4LzlSjnDWf3V1T/DrbL071eiC
     869                            rx2iDW3n5Wy7so0iwmU5nr9QhwIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQAFSrqi
     870                            HOMohDd4JXB3rjX8npCSTTeam84LTI1Twd8GXOmDQ8izcwsfUIILusEqd+66V/kh
     871                            iwnBgmrwgw0CVEZjgwkbVdZH68RGO4i6n5hZwmzr5jx4yNkfLZ5uwfHLIkqgJjj0
     872                            DvsA6Saom/5BD6dln6TuQ9cwFu+9pOxaWjfEeD2Rm5HFP+VF9GPxM19Gs6xcYi2L
     873                            GlEfBQvH/6vp65r3ciw760KPeO1ITxaIfqX5fOxOaA0NLOIGLjX0G11vf/i3n1OQ
     874                            MZTR7RMV+bjZiLNoPOJ/Ezz5lr+k0V12yVJ35J2J6TIz6lcB9M1tCFDY7tS89nYf
     875                            HFhkY9jzkGrcHMME</ds:X509Certificate>
    848876                    </ds:X509Data>
    849877                </ds:KeyInfo>
    850878            </md:KeyDescriptor>
    851             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/SOAP"/>
    852             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/Redirect"/>
    853             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/POST"/>
    854             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/Artifact"/>
     879            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     880                Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/SOAP"/>
     881            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     882                Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/Redirect"/>
     883            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     884                Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/POST"/>
     885            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     886                Location="https://lux17.mpi.nl/Shibboleth.sso/SLO/Artifact"/>
    855887            <!--
    856888            <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    857889            <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    858890            -->
    859             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/SOAP"/>
    860             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/Redirect"/>
    861             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/POST"/>
    862             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/Artifact"/>
    863             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/POST" index="1"/>
    864             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    865             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
    866             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
    867             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://lux17.mpi.nl/Shibboleth.sso/SAML/POST" index="5"/>
    868             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://lux17.mpi.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
     891            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     892                Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/SOAP"/>
     893            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     894                Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/Redirect"/>
     895            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     896                Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/POST"/>
     897            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     898                Location="https://lux17.mpi.nl/Shibboleth.sso/NIM/Artifact"/>
     899            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     900                Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/POST" index="1"/>
     901            <md:AssertionConsumerService
     902                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     903                Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
     904            <md:AssertionConsumerService
     905                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     906                Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
     907            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     908                Location="https://lux17.mpi.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
     909            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     910                Location="https://lux17.mpi.nl/Shibboleth.sso/SAML/POST" index="5"/>
     911            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     912                Location="https://lux17.mpi.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
    869913            <!-- start : required for terena CoC -->
    870914            <md:AttributeConsumingService index="1">
    871                 <md:ServiceName xml:lang="en">Max Planck Institute for Psycholinguistics second Service Provider</md:ServiceName>
    872                 <md:ServiceDescription xml:lang="en">Max Planck Institute for Psycholinguistics second Service Provider for Linguistic Services aimed at researchers</md:ServiceDescription>
     915                <md:ServiceName xml:lang="en">Max Planck Institute for Psycholinguistics second
     916                    Service Provider</md:ServiceName>
     917                <md:ServiceDescription xml:lang="en">Max Planck Institute for Psycholinguistics
     918                    second Service Provider for Linguistic Services aimed at
     919                    researchers</md:ServiceDescription>
    873920                <!-- SAML1 -->
    874                 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
     921                <md:RequestedAttribute FriendlyName="eduPersonPrincipalName"
     922                    Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"
     923                    NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
    875924                <!-- SAML2 -->
    876                 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
     925                <md:RequestedAttribute FriendlyName="eduPersonPrincipalName"
     926                    Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
     927                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    877928            </md:AttributeConsumingService>
    878             <!-- end : required for terena CoC -->   
     929            <!-- end : required for terena CoC -->
    879930        </md:SPSSODescriptor>
    880931        <md:Organization>
    881932            <md:OrganizationName xml:lang="en">MPI</md:OrganizationName>
    882             <md:OrganizationDisplayName xml:lang="en">Max Planck Institute for Psycholinguistics</md:OrganizationDisplayName>
     933            <md:OrganizationDisplayName xml:lang="en">Max Planck Institute for
     934                Psycholinguistics</md:OrganizationDisplayName>
    883935            <md:OrganizationURL xml:lang="en">http://www.mpi.nl</md:OrganizationURL>
    884936        </md:Organization>
    … …  
    936988                    <ds:X509Data>
    937989                        <ds:X509Certificate>
    938 MIIDnjCCAoYCCQCIw16p56fGnTANBgkqhkiG9w0BAQUFADCBkDELMAkGA1UEBhMC
    939 TkwxDDAKBgNVBAgTA0dMRDERMA8GA1UEBxMITmlqbWVnZW4xDzANBgNVBAoTBk1Q
    940 SS1QTDETMBEGA1UECxMKY2F0YWxvZyBzcDEaMBgGA1UEAxMRY2F0YWxvZy5jbGFy
    941 aW4uZXUxHjAcBgkqhkiG9w0BCQEWD2xhdGFkbWluQG1waS5ubDAeFw0xNDA0Mjgw
    942 ODAyMDVaFw0xOTA0MjcwODAyMDVaMIGQMQswCQYDVQQGEwJOTDEMMAoGA1UECBMD
    943 R0xEMREwDwYDVQQHEwhOaWptZWdlbjEPMA0GA1UEChMGTVBJLVBMMRMwEQYDVQQL
    944 EwpjYXRhbG9nIHNwMRowGAYDVQQDExFjYXRhbG9nLmNsYXJpbi5ldTEeMBwGCSqG
    945 SIb3DQEJARYPbGF0YWRtaW5AbXBpLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
    946 MIIBCgKCAQEA38nLf8TTeexrcqzfF5LOQ3F/9Tar+V7kNsLFUKO1ua6npX+4zgBu
    947 EYCm+hKrKDW09QN8yrBd+79a+slA4nCcpUymkh02rQhVbMpNiEQh8UFjqfaYv5fM
    948 R1OlgIWYXx2POdn60KbUYXIPGSrp2zQSXMFJMrnUOXHqxF8fxfTdbDEtcviXXwyC
    949 UjhXC4AJSLL/S8eftV8iioQDZMs5h1Kd95NVFsMhRC5MtD+iUyNsYR8X1PGaFg20
    950 bVg/Jg2eVNwPas49POr+HBOxk3BBtk8KwCAMwjCQUGL3zn7KeDLDFYsry/bWQtVn
    951 IbebSTysNhbrji3/VKnsPHiuOfCvYiqWEQIDAQABMA0GCSqGSIb3DQEBBQUAA4IB
    952 AQDTDfQr4wjJGAUo7os8PWTmKFkAH4D3oFQpxe4bvf6U9of4+fmE778S+WZc9kKs
    953 A0oCNgDwBaY/GdYIYloU/6GAxEu5Kql4HmB1XW5XyYZ15+zYluL86eLFe2DHnPHR
    954 Z3ZjnjzAkcZS6VU/vbowpAL9Oiic9I15BwyNXsT8lWPtOxKcmxAESMc7OtWm0o4C
    955 ijjjB4MNkyvUmnvJZD+7ZpYW6qI4v64a4h1kdydtuCSxFz7lQ9U80gOA+oJWKa9a
    956 yN2Xk8rmco4g1veIYIZ6hKrydr0QJ40WvaiR1EkO0tpPa7wkayhFaOQDRrzFNpfr
    957 gDLbA/e0dbDclBvxUIm9cemA</ds:X509Certificate>
     990                            MIIDnjCCAoYCCQCIw16p56fGnTANBgkqhkiG9w0BAQUFADCBkDELMAkGA1UEBhMC
     991                            TkwxDDAKBgNVBAgTA0dMRDERMA8GA1UEBxMITmlqbWVnZW4xDzANBgNVBAoTBk1Q
     992                            SS1QTDETMBEGA1UECxMKY2F0YWxvZyBzcDEaMBgGA1UEAxMRY2F0YWxvZy5jbGFy
     993                            aW4uZXUxHjAcBgkqhkiG9w0BCQEWD2xhdGFkbWluQG1waS5ubDAeFw0xNDA0Mjgw
     994                            ODAyMDVaFw0xOTA0MjcwODAyMDVaMIGQMQswCQYDVQQGEwJOTDEMMAoGA1UECBMD
     995                            R0xEMREwDwYDVQQHEwhOaWptZWdlbjEPMA0GA1UEChMGTVBJLVBMMRMwEQYDVQQL
     996                            EwpjYXRhbG9nIHNwMRowGAYDVQQDExFjYXRhbG9nLmNsYXJpbi5ldTEeMBwGCSqG
     997                            SIb3DQEJARYPbGF0YWRtaW5AbXBpLm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
     998                            MIIBCgKCAQEA38nLf8TTeexrcqzfF5LOQ3F/9Tar+V7kNsLFUKO1ua6npX+4zgBu
     999                            EYCm+hKrKDW09QN8yrBd+79a+slA4nCcpUymkh02rQhVbMpNiEQh8UFjqfaYv5fM
     1000                            R1OlgIWYXx2POdn60KbUYXIPGSrp2zQSXMFJMrnUOXHqxF8fxfTdbDEtcviXXwyC
     1001                            UjhXC4AJSLL/S8eftV8iioQDZMs5h1Kd95NVFsMhRC5MtD+iUyNsYR8X1PGaFg20
     1002                            bVg/Jg2eVNwPas49POr+HBOxk3BBtk8KwCAMwjCQUGL3zn7KeDLDFYsry/bWQtVn
     1003                            IbebSTysNhbrji3/VKnsPHiuOfCvYiqWEQIDAQABMA0GCSqGSIb3DQEBBQUAA4IB
     1004                            AQDTDfQr4wjJGAUo7os8PWTmKFkAH4D3oFQpxe4bvf6U9of4+fmE778S+WZc9kKs
     1005                            A0oCNgDwBaY/GdYIYloU/6GAxEu5Kql4HmB1XW5XyYZ15+zYluL86eLFe2DHnPHR
     1006                            Z3ZjnjzAkcZS6VU/vbowpAL9Oiic9I15BwyNXsT8lWPtOxKcmxAESMc7OtWm0o4C
     1007                            ijjjB4MNkyvUmnvJZD+7ZpYW6qI4v64a4h1kdydtuCSxFz7lQ9U80gOA+oJWKa9a
     1008                            yN2Xk8rmco4g1veIYIZ6hKrydr0QJ40WvaiR1EkO0tpPa7wkayhFaOQDRrzFNpfr
     1009                            gDLbA/e0dbDclBvxUIm9cemA</ds:X509Certificate>
    9581010                    </ds:X509Data>
    9591011                </ds:KeyInfo>
    … …  
    10281080
    10291081    <!-- MPI corpus1.mpi.nl (via CLARIN) -->
    1030     <md:EntityDescriptor entityID="https://sp.corpus1.mpi.nl" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
    1031         <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     1082    <md:EntityDescriptor entityID="https://sp.corpus1.mpi.nl"
     1083        xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
     1084        <md:SPSSODescriptor
     1085            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    10321086            <md:Extensions>
    10331087                <!-- start : required for terena CoC -->
    10341088                <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
    1035                     <mdui:DisplayName xml:lang="en">Max Planck Institute for Psycholinguistics Service Provider</mdui:DisplayName>
    1036                     <mdui:DisplayName xml:lang="nl">Max Planck Instituut voor Psycholinguistiek Service Provider</mdui:DisplayName>
    1037                     <mdui:Description xml:lang="en">Max Planck Institute for Psycholinguistics Corpus1 Service Provider for Linguistic Services aimed at researchers</mdui:Description>
    1038                     <mdui:Description xml:lang="nl">Max Planck Instituut voor Psycholinguistiek Corpus1 Service Provider voor Taalkundige Services gericht op onderzoekers</mdui:Description>
    1039                     <mdui:Keywords xml:lang="en">Max Planck Instituut voor Psycholinguistiek Corpus1 Service Provider Taalkundige Services</mdui:Keywords>
    1040                     <mdui:Keywords xml:lang="nl">Max Planck Institute for Psycholinguistics Corpus1 Service Provider Linguistic Services</mdui:Keywords>
    1041                     <mdui:Logo height="194" width="189">https://corpus1.mpi.nl/gif/mpg-logo-90x90-grey.gif</mdui:Logo>
    1042                     <mdui:PrivacyStatementURL xml:lang="en">http://corpus1.mpi.nl/IMDI/info/privacy_statement.html</mdui:PrivacyStatementURL>
     1089                    <mdui:DisplayName xml:lang="en">Max Planck Institute for Psycholinguistics
     1090                        Service Provider</mdui:DisplayName>
     1091                    <mdui:DisplayName xml:lang="nl">Max Planck Instituut voor Psycholinguistiek
     1092                        Service Provider</mdui:DisplayName>
     1093                    <mdui:Description xml:lang="en">Max Planck Institute for Psycholinguistics
     1094                        Corpus1 Service Provider for Linguistic Services aimed at
     1095                        researchers</mdui:Description>
     1096                    <mdui:Description xml:lang="nl">Max Planck Instituut voor Psycholinguistiek
     1097                        Corpus1 Service Provider voor Taalkundige Services gericht op
     1098                        onderzoekers</mdui:Description>
     1099                    <mdui:Keywords xml:lang="en">Max Planck Instituut voor Psycholinguistiek Corpus1
     1100                        Service Provider Taalkundige Services</mdui:Keywords>
     1101                    <mdui:Keywords xml:lang="nl">Max Planck Institute for Psycholinguistics Corpus1
     1102                        Service Provider Linguistic Services</mdui:Keywords>
     1103                    <mdui:Logo height="194" width="189"
     1104                        >https://corpus1.mpi.nl/gif/mpg-logo-90x90-grey.gif</mdui:Logo>
     1105                    <mdui:PrivacyStatementURL xml:lang="en"
     1106                        >http://corpus1.mpi.nl/IMDI/info/privacy_statement.html</mdui:PrivacyStatementURL>
    10431107                </mdui:UIInfo>
    10441108                <EntityAttributes xmlns="urn:oasis:names:tc:SAML:metadata:attribute">
    10451109                    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
    1046                                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
    1047                                    Name="http://macedir.org/entity-category">
     1110                        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
     1111                        Name="http://macedir.org/entity-category">
    10481112                        <AttributeValue>http://www.edugain.org/dataprotection/coc-eu-01-draft</AttributeValue>
    10491113                    </Attribute>
    10501114                </EntityAttributes>
    10511115                <!-- end : required for terena CoC -->
    1052                 <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1053                                                index="1" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1054                                                Location="http://corpus1.mpi.nl/Shibboleth.sso/DS"/>
    1055                 <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1056                                                index="2" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1057                                                Location="https://corpus1.mpi.nl/Shibboleth.sso/DS"/>
     1116                <idpdisc:DiscoveryResponse
     1117                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     1118                    index="1" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     1119                    Location="http://corpus1.mpi.nl/Shibboleth.sso/DS"/>
     1120                <idpdisc:DiscoveryResponse
     1121                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     1122                    index="2" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     1123                    Location="https://corpus1.mpi.nl/Shibboleth.sso/DS"/>
    10581124            </md:Extensions>
    10591125            <md:KeyDescriptor>
    … …  
    10611127                    <ds:X509Data>
    10621128                        <ds:X509Certificate>
    1063     MIIDbDCCAlQCCQDcydJCAWzKeDANBgkqhkiG9w0BAQUFADB4MQswCQYDVQQGEwJO
    1064     TDEMMAoGA1UECBMDR0xEMREwDwYDVQQHEwhOaWptZWdlbjEPMA0GA1UEChMGTVBJ
    1065     LVBMMRcwFQYDVQQDEw5jb3JwdXMxLm1waS5ubDEeMBwGCSqGSIb3DQEJARYPbGF0
    1066     YWRtaW5AbXBpLm5sMB4XDTE0MDUwMjExMjkwNVoXDTE5MDUwMTExMjkwNVoweDEL
    1067     MAkGA1UEBhMCTkwxDDAKBgNVBAgTA0dMRDERMA8GA1UEBxMITmlqbWVnZW4xDzAN
    1068     BgNVBAoTBk1QSS1QTDEXMBUGA1UEAxMOY29ycHVzMS5tcGkubmwxHjAcBgkqhkiG
    1069     9w0BCQEWD2xhdGFkbWluQG1waS5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
    1070     AQoCggEBAMFrApun/KXB9YtFiT49PHz7uV9EoVmrFsCBNqVWYhM+msq2dkM7rNVe
    1071     eZdy2hHID72ILMeqeXKX+hFQPyX18eN4L6lfJzzJJI2HGdIuGPyKZXCsVrCqnIWo
    1072     VPRi5dnTlCpCEPhebt05L9TMQJrLWue2qDhhdwkaYrVfm+tsYGK9yiy3Gbsoa10L
    1073     kEpd2oJZLDGHXSZJ6GL4oUMbQ+Z9bIjCelQWC4tU/u6qFGIzyoabaJbAlnFAxFSq
    1074     DIQ9+27JObXMnVH/6iK0mhHTooB72Gd0LQHVHGiCrFyxmbhMp7tIX0vU3Qn4/U8F
    1075     kt/Kep3+Wam/1h1NmmOJzTux2NuRurcCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEA
    1076     YPPRnb1/92C/Si/V5I15TfFSTdOeMcVHQ0DY0ohUw8B4fEbr9htjZoW7Umyco5pF
    1077     kf+2Jm0GRVEJKjBxFEsbNbY8vusnP25u88vJa4Qy3JJZbsYGcPZiFOKffZWg/xqW
    1078     t5F3i+akH5ihUn910/5l85SDUnDS1VvHVdOGwsedRNW4Yi9eEWjiEGQwjlhH0sWh
    1079     uxjCIgYajcptpsZ8N8g+bR7ysVk61E5tcmScA5Pnu1fwu6+76mTF6gZO57jzWK93
    1080     FlSHA6c7bCPMo+r4EZVccHBdrTRe6ZdD+OSOuEV4i0iI7IONOE1/ClWKUyueTsA/
    1081     vKRir2Cb6A/NaScKNHBBhg==</ds:X509Certificate>
     1129                            MIIDbDCCAlQCCQDcydJCAWzKeDANBgkqhkiG9w0BAQUFADB4MQswCQYDVQQGEwJO
     1130                            TDEMMAoGA1UECBMDR0xEMREwDwYDVQQHEwhOaWptZWdlbjEPMA0GA1UEChMGTVBJ
     1131                            LVBMMRcwFQYDVQQDEw5jb3JwdXMxLm1waS5ubDEeMBwGCSqGSIb3DQEJARYPbGF0
     1132                            YWRtaW5AbXBpLm5sMB4XDTE0MDUwMjExMjkwNVoXDTE5MDUwMTExMjkwNVoweDEL
     1133                            MAkGA1UEBhMCTkwxDDAKBgNVBAgTA0dMRDERMA8GA1UEBxMITmlqbWVnZW4xDzAN
     1134                            BgNVBAoTBk1QSS1QTDEXMBUGA1UEAxMOY29ycHVzMS5tcGkubmwxHjAcBgkqhkiG
     1135                            9w0BCQEWD2xhdGFkbWluQG1waS5ubDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
     1136                            AQoCggEBAMFrApun/KXB9YtFiT49PHz7uV9EoVmrFsCBNqVWYhM+msq2dkM7rNVe
     1137                            eZdy2hHID72ILMeqeXKX+hFQPyX18eN4L6lfJzzJJI2HGdIuGPyKZXCsVrCqnIWo
     1138                            VPRi5dnTlCpCEPhebt05L9TMQJrLWue2qDhhdwkaYrVfm+tsYGK9yiy3Gbsoa10L
     1139                            kEpd2oJZLDGHXSZJ6GL4oUMbQ+Z9bIjCelQWC4tU/u6qFGIzyoabaJbAlnFAxFSq
     1140                            DIQ9+27JObXMnVH/6iK0mhHTooB72Gd0LQHVHGiCrFyxmbhMp7tIX0vU3Qn4/U8F
     1141                            kt/Kep3+Wam/1h1NmmOJzTux2NuRurcCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEA
     1142                            YPPRnb1/92C/Si/V5I15TfFSTdOeMcVHQ0DY0ohUw8B4fEbr9htjZoW7Umyco5pF
     1143                            kf+2Jm0GRVEJKjBxFEsbNbY8vusnP25u88vJa4Qy3JJZbsYGcPZiFOKffZWg/xqW
     1144                            t5F3i+akH5ihUn910/5l85SDUnDS1VvHVdOGwsedRNW4Yi9eEWjiEGQwjlhH0sWh
     1145                            uxjCIgYajcptpsZ8N8g+bR7ysVk61E5tcmScA5Pnu1fwu6+76mTF6gZO57jzWK93
     1146                            FlSHA6c7bCPMo+r4EZVccHBdrTRe6ZdD+OSOuEV4i0iI7IONOE1/ClWKUyueTsA/
     1147                            vKRir2Cb6A/NaScKNHBBhg==</ds:X509Certificate>
    10821148                    </ds:X509Data>
    10831149                </ds:KeyInfo>
    10841150            </md:KeyDescriptor>
    1085             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/SOAP"/>
    1086             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/Redirect"/>
    1087             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/POST"/>
    1088             <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/Artifact"/>
     1151            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     1152                Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/SOAP"/>
     1153            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     1154                Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/Redirect"/>
     1155            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     1156                Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/POST"/>
     1157            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     1158                Location="https://corpus1.mpi.nl/Shibboleth.sso/SLO/Artifact"/>
    10891159            <!--
    10901160            <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    10911161            <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    10921162            -->
    1093             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/SOAP"/>
    1094             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/Redirect"/>
    1095             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/POST"/>
    1096             <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/Artifact"/>
    1097             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/POST" index="1"/>
    1098             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    1099             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
    1100             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
    1101             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML/POST" index="5"/>
    1102             <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
     1163            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     1164                Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/SOAP"/>
     1165            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     1166                Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/Redirect"/>
     1167            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     1168                Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/POST"/>
     1169            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     1170                Location="https://corpus1.mpi.nl/Shibboleth.sso/NIM/Artifact"/>
     1171            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     1172                Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/POST" index="1"/>
     1173            <md:AssertionConsumerService
     1174                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     1175                Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
     1176            <md:AssertionConsumerService
     1177                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     1178                Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
     1179            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     1180                Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
     1181            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     1182                Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML/POST" index="5"/>
     1183            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     1184                Location="https://corpus1.mpi.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
    11031185            <!-- start : required for terena CoC -->
    11041186            <md:AttributeConsumingService index="1">
    1105                 <md:ServiceName xml:lang="en">Max Planck Institute for Psycholinguistics Service Provider</md:ServiceName>
    1106                 <md:ServiceDescription xml:lang="en">Max Planck Institute for Psycholinguistics Corpus1 Service Provider.</md:ServiceDescription>
     1187                <md:ServiceName xml:lang="en">Max Planck Institute for Psycholinguistics Service
     1188                    Provider</md:ServiceName>
     1189                <md:ServiceDescription xml:lang="en">Max Planck Institute for Psycholinguistics
     1190                    Corpus1 Service Provider.</md:ServiceDescription>
    11071191                <!-- SAML1 -->
    1108                 <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
    1109                 <md:RequestedAttribute FriendlyName="mail" Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>           
     1192                <md:RequestedAttribute FriendlyName="eduPersonPrincipalName"
     1193                    Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"
     1194                    NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
     1195                <md:RequestedAttribute FriendlyName="mail" Name="urn:mace:dir:attribute-def:mail"
     1196                    NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri"/>
    11101197            </md:AttributeConsumingService>
    1111             <!-- end : required for terena CoC -->   
     1198            <!-- end : required for terena CoC -->
    11121199        </md:SPSSODescriptor>
    11131200        <md:Organization>
    11141201            <md:OrganizationName xml:lang="en">MPI</md:OrganizationName>
    1115             <md:OrganizationDisplayName xml:lang="en">Max Planck Institute for Psycholinguistisc</md:OrganizationDisplayName>
     1202            <md:OrganizationDisplayName xml:lang="en">Max Planck Institute for
     1203                Psycholinguistisc</md:OrganizationDisplayName>
    11161204            <md:OrganizationURL xml:lang="en">http://www.mpi.nl</md:OrganizationURL>
    11171205        </md:Organization>
    … …  
    11221210    </md:EntityDescriptor>
    11231211
    1124        <!-- INL portal (via CLARIN) -->
     1212    <!-- INL portal (via CLARIN) -->
    11251213    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    11261214        entityID="https://portal.clarin.inl.nl/">
    … …  
    14421530    <!-- University of TÃŒbingen (via CLARIN) -->
    14431531    <EntityDescriptor entityID="https://weblicht.sfs.uni-tuebingen.de">
    1444 
    1445 
     1532        <Extensions>
     1533            <mdattr:EntityAttributes>
     1534                <saml:Attribute Name="http://macedir.org/entity-category"
     1535                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
     1536                    <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
     1537                </saml:Attribute>
     1538            </mdattr:EntityAttributes>
     1539        </Extensions>
    14461540        <SPSSODescriptor
    14471541            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    … …  
    14501544                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    14511545                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1452                     Location="https://weblicht.sfs.uni-tuebingen.de/Shibboleth.sso/Login" index="1"
    1453                 />
     1546                    Location="https://weblicht.sfs.uni-tuebingen.de/Shibboleth.sso/Login" index="1"/>
    14541547            </Extensions>
    1455             <KeyDescriptor><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:KeyName>weblicht.sfs.uni-tuebingen.de</ds:KeyName><ds:X509Data><ds:X509SubjectName>emailAddress=wladmin@sfs.uni-tuebingen.de,CN=weblicht.sfs.uni-tuebingen.de,OU=SfS,O=Universitaet Tuebingen,L=Tuebingen,ST=Baden-Wuerttemberg,C=DE</ds:X509SubjectName><ds:X509Certificate>MIIGKzCCBROgAwIBAgIHF3iUXPRQADANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQG
    1456 EwJERTEfMB0GA1UEChMWVW5pdmVyc2l0YWV0IFR1ZWJpbmdlbjEcMBoGA1UEAxMT
    1457 R2xvYmFsLVVOSVRVRS1DQSAwMTEpMCcGCSqGSIb3DQEJARYadW5pdHVlLWNhQHVu
    1458 aS10dWViaW5nZW4uZGUwHhcNMTQwNDI0MTM1MTA4WhcNMTkwMjA0MDAwMDAwWjCB
    1459 wjELMAkGA1UEBhMCREUxGzAZBgNVBAgTEkJhZGVuLVd1ZXJ0dGVtYmVyZzESMBAG
    1460 A1UEBxMJVHVlYmluZ2VuMR8wHQYDVQQKExZVbml2ZXJzaXRhZXQgVHVlYmluZ2Vu
    1461 MQwwCgYDVQQLEwNTZlMxJjAkBgNVBAMTHXdlYmxpY2h0LnNmcy51bmktdHVlYmlu
    1462 Z2VuLmRlMSswKQYJKoZIhvcNAQkBFhx3bGFkbWluQHNmcy51bmktdHVlYmluZ2Vu
    1463 LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KsTGSUCY/epaymY
    1464 W3kqRl84RcNArc5w05x0rEi1qQUpAL1V7K7rJ/p5ZnjxqEhXEqYZXWh0ebkYWgzZ
    1465 jr1Bs3mV1XVJ/9HrwRSFcNdyyFPmmP3Glsaculyn3zIQ4UcPyLk/kRlg37rx5nKj
    1466 m3DZdrk345mjHO6MknFMSuh2TosI0tNhaa4rrRMJTlcOVJpiVlAF/DSZgwPjI6Yl
    1467 5aHKes43tkCx1LJxDRAz9i/DaW4HdYNcwW3A0qlkRKRZqqVwRCG3Z5b9qdSry6t0
    1468 UmmXMLYAxaStHVBx8d3eYWURfMLbvnpGKwWl0XGZQcevA9SzWswdmF/3X7zAmVAQ
    1469 4L2qUQIDAQABo4ICbjCCAmowOQYDVR0gBDIwMDARBg8rBgEEAYGtIYIsAQEEAwEw
    1470 EQYPKwYBBAGBrSGCLAIBBAMBMAgGBmeBDAECAjAJBgNVHRMEAjAAMAsGA1UdDwQE
    1471 AwIE8DATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQU9cQi9vwBJfcH9+Ae
    1472 ytdTniex90EwHwYDVR0jBBgwFoAUsMG7aDV/4tZBnBpxr+D8QTTNw6gwRgYDVR0R
    1473 BD8wPYIdd2VibGljaHQuc2ZzLnVuaS10dWViaW5nZW4uZGWBHHdsYWRtaW5Ac2Zz
    1474 LnVuaS10dWViaW5nZW4uZGUwgZMGA1UdHwSBizCBiDBCoECgPoY8aHR0cDovL2Nk
    1475 cDEucGNhLmRmbi5kZS9jbGFzc2ljLXVuaXR1ZS1jYS9wdWIvY3JsL2dfY2Fjcmwu
    1476 Y3JsMEKgQKA+hjxodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2NsYXNzaWMtdW5pdHVl
    1477 LWNhL3B1Yi9jcmwvZ19jYWNybC5jcmwwgeEGCCsGAQUFBwEBBIHUMIHRMDMGCCsG
    1478 AQUFBzABhidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVyL09DU1Aw
    1479 TAYIKwYBBQUHMAKGQGh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvY2xhc3NpYy11bml0
    1480 dWUtY2EvcHViL2NhY2VydC9nX2NhY2VydC5jcnQwTAYIKwYBBQUHMAKGQGh0dHA6
    1481 Ly9jZHAyLnBjYS5kZm4uZGUvY2xhc3NpYy11bml0dWUtY2EvcHViL2NhY2VydC9n
    1482 X2NhY2VydC5jcnQwDQYJKoZIhvcNAQEFBQADggEBAGZ9bLdCBVw1Txf0f59QvfPe
    1483 Ic02a/QJieoXre844zW5ISZwp14vGy+yzk4BK1tSovtxwf/FHiC7Uoqi+T9cL7E5
    1484 yBbP2Y6cBHJuxy4YyXLimJoO7NWBDW+MOQRN1HjI5KXTMhhzmI81iofZbBlZwCSe
    1485 pUzeHCt4KF3LDrrvNy4YiziDuojh23MHEv8W1/aNhX4F0T+MvwO2dGxAbax7XgLL
    1486 ndO3/u6io4gRQiXZrrAS+1ZXGybrr6gUBN6popli1bR148tWwZNzwe1NjbGBIA5a
    1487 ydKuf18CBYHeixW6XzkCMEdcRTec/qVTn7stpLtuuC5TCblNKGDKmhx9Mec+1Jo=
    1488 </ds:X509Certificate></ds:X509Data></ds:KeyInfo></KeyDescriptor>
     1548            <KeyDescriptor>
     1549                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     1550                    <ds:KeyName>weblicht.sfs.uni-tuebingen.de</ds:KeyName>
     1551                    <ds:X509Data>
     1552                        <ds:X509SubjectName>emailAddress=wladmin@sfs.uni-tuebingen.de,CN=weblicht.sfs.uni-tuebingen.de,OU=SfS,O=Universitaet
     1553                            Tuebingen,L=Tuebingen,ST=Baden-Wuerttemberg,C=DE</ds:X509SubjectName>
     1554                        <ds:X509Certificate>MIIGKzCCBROgAwIBAgIHF3iUXPRQADANBgkqhkiG9w0BAQUFADB3MQswCQYDVQQG
     1555                            EwJERTEfMB0GA1UEChMWVW5pdmVyc2l0YWV0IFR1ZWJpbmdlbjEcMBoGA1UEAxMT
     1556                            R2xvYmFsLVVOSVRVRS1DQSAwMTEpMCcGCSqGSIb3DQEJARYadW5pdHVlLWNhQHVu
     1557                            aS10dWViaW5nZW4uZGUwHhcNMTQwNDI0MTM1MTA4WhcNMTkwMjA0MDAwMDAwWjCB
     1558                            wjELMAkGA1UEBhMCREUxGzAZBgNVBAgTEkJhZGVuLVd1ZXJ0dGVtYmVyZzESMBAG
     1559                            A1UEBxMJVHVlYmluZ2VuMR8wHQYDVQQKExZVbml2ZXJzaXRhZXQgVHVlYmluZ2Vu
     1560                            MQwwCgYDVQQLEwNTZlMxJjAkBgNVBAMTHXdlYmxpY2h0LnNmcy51bmktdHVlYmlu
     1561                            Z2VuLmRlMSswKQYJKoZIhvcNAQkBFhx3bGFkbWluQHNmcy51bmktdHVlYmluZ2Vu
     1562                            LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KsTGSUCY/epaymY
     1563                            W3kqRl84RcNArc5w05x0rEi1qQUpAL1V7K7rJ/p5ZnjxqEhXEqYZXWh0ebkYWgzZ
     1564                            jr1Bs3mV1XVJ/9HrwRSFcNdyyFPmmP3Glsaculyn3zIQ4UcPyLk/kRlg37rx5nKj
     1565                            m3DZdrk345mjHO6MknFMSuh2TosI0tNhaa4rrRMJTlcOVJpiVlAF/DSZgwPjI6Yl
     1566                            5aHKes43tkCx1LJxDRAz9i/DaW4HdYNcwW3A0qlkRKRZqqVwRCG3Z5b9qdSry6t0
     1567                            UmmXMLYAxaStHVBx8d3eYWURfMLbvnpGKwWl0XGZQcevA9SzWswdmF/3X7zAmVAQ
     1568                            4L2qUQIDAQABo4ICbjCCAmowOQYDVR0gBDIwMDARBg8rBgEEAYGtIYIsAQEEAwEw
     1569                            EQYPKwYBBAGBrSGCLAIBBAMBMAgGBmeBDAECAjAJBgNVHRMEAjAAMAsGA1UdDwQE
     1570                            AwIE8DATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQU9cQi9vwBJfcH9+Ae
     1571                            ytdTniex90EwHwYDVR0jBBgwFoAUsMG7aDV/4tZBnBpxr+D8QTTNw6gwRgYDVR0R
     1572                            BD8wPYIdd2VibGljaHQuc2ZzLnVuaS10dWViaW5nZW4uZGWBHHdsYWRtaW5Ac2Zz
     1573                            LnVuaS10dWViaW5nZW4uZGUwgZMGA1UdHwSBizCBiDBCoECgPoY8aHR0cDovL2Nk
     1574                            cDEucGNhLmRmbi5kZS9jbGFzc2ljLXVuaXR1ZS1jYS9wdWIvY3JsL2dfY2Fjcmwu
     1575                            Y3JsMEKgQKA+hjxodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2NsYXNzaWMtdW5pdHVl
     1576                            LWNhL3B1Yi9jcmwvZ19jYWNybC5jcmwwgeEGCCsGAQUFBwEBBIHUMIHRMDMGCCsG
     1577                            AQUFBzABhidodHRwOi8vb2NzcC5wY2EuZGZuLmRlL09DU1AtU2VydmVyL09DU1Aw
     1578                            TAYIKwYBBQUHMAKGQGh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvY2xhc3NpYy11bml0
     1579                            dWUtY2EvcHViL2NhY2VydC9nX2NhY2VydC5jcnQwTAYIKwYBBQUHMAKGQGh0dHA6
     1580                            Ly9jZHAyLnBjYS5kZm4uZGUvY2xhc3NpYy11bml0dWUtY2EvcHViL2NhY2VydC9n
     1581                            X2NhY2VydC5jcnQwDQYJKoZIhvcNAQEFBQADggEBAGZ9bLdCBVw1Txf0f59QvfPe
     1582                            Ic02a/QJieoXre844zW5ISZwp14vGy+yzk4BK1tSovtxwf/FHiC7Uoqi+T9cL7E5
     1583                            yBbP2Y6cBHJuxy4YyXLimJoO7NWBDW+MOQRN1HjI5KXTMhhzmI81iofZbBlZwCSe
     1584                            pUzeHCt4KF3LDrrvNy4YiziDuojh23MHEv8W1/aNhX4F0T+MvwO2dGxAbax7XgLL
     1585                            ndO3/u6io4gRQiXZrrAS+1ZXGybrr6gUBN6popli1bR148tWwZNzwe1NjbGBIA5a
     1586                            ydKuf18CBYHeixW6XzkCMEdcRTec/qVTn7stpLtuuC5TCblNKGDKmhx9Mec+1Jo=
     1587                        </ds:X509Certificate>
     1588                    </ds:X509Data>
     1589                </ds:KeyInfo>
     1590            </KeyDescriptor>
    14891591            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
    14901592                Location="https://weblicht.sfs.uni-tuebingen.de/Shibboleth.sso/SAML2/POST" index="1"/>
    14911593            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
    1492                 Location="https://weblicht.sfs.uni-tuebingen.de/Shibboleth.sso/SAML/POST" index="6"
    1493             />
     1594                Location="https://weblicht.sfs.uni-tuebingen.de/Shibboleth.sso/SAML/POST" index="6"/>
    14941595        </SPSSODescriptor>
    14951596    </EntityDescriptor>
    14961597
    1497     <!-- CNRS-ATILF (via CLARIN), temporarily disabled due to non-fixed heartbleed vulnerability -->
    1498    
     1598    <!-- CNRS-ATILF (via CLARIN), temporarily disabled due to non-fixed Heartbleed vulnerability. -->
     1599
    14991600    <!-- CLARIN-DK-UCPH SP -->
    15001601    <EntityDescriptor ID="_78e4557169289f8f65e453bfcf5c5ebd18a665be"
    … …  
    16081709
    16091710    <!-- CLARIN-NL Meertens institute -->
    1610     <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    1611       ID="_b789a3a174a0187c848e235a7ead39f90a4608c0"
    1612       entityID="https://www.meertens.knaw.nl/Shibboleth.sso/Metadata">
    1613       <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
    1614         <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
    1615           <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    1616             Name="http://macedir.org/entity-category"
    1617             NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
    1618           <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
    1619           </saml:Attribute>
    1620         </mdattr:EntityAttributes>
    1621         <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    1622         <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    1623         <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    1624         <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    1625         <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    1626         <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    1627         <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    1628         <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    1629         <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    1630         <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    1631         <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    1632       </md:Extensions>
    1633 
    1634     <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    1635     <md:Extensions>
    1636       <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
    1637         <mdui:DisplayName xml:lang="nl">Meertens Instituut</mdui:DisplayName>
    1638         <mdui:DisplayName xml:lang="en">Meertens Institute</mdui:DisplayName>
    1639         <mdui:Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot het Meertens Archief en geselecteerde diensten ten behoeve van geesteswetenschappelijk onderzoek op het terrein van Nederlandse taalvariatie en cultuur</mdui:Description>
    1640         <mdui:Description xml:lang="en">This Service Provider regulates access to the Meertens Institute Archive and selected services for humanities research activities in the domain of Dutch language variation and culture</mdui:Description>
    1641         <mdui:InformationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</mdui:InformationURL>
    1642         <mdui:InformationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</mdui:InformationURL>
    1643         <mdui:Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen archief</mdui:Keywords>
    1644         <mdui:Keywords xml:lang="en">Meertens research documentation language culture humanities archive</mdui:Keywords>
    1645         <mdui:PrivacyStatementURL xml:lang="en">https://www.meertens.knaw.nl/cms/collections/data-protection</mdui:PrivacyStatementURL>
    1646         <mdui:Logo height="135" width="200">http://www.meertens.knaw.nl/cms/templates/mi_hetgelaat/css/images/logo_meertens_full.png</mdui:Logo>
    1647       </mdui:UIInfo>
    1648       <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
    1649         Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
    1650         Location="https://www.meertens.knaw.nl/Shibboleth.sso/Login"/>
    1651       <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1652         Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
    1653         Location="https://www.meertens.knaw.nl/Shibboleth.sso/Login"
    1654         index="1"/>
    1655     </md:Extensions>
    1656     <md:KeyDescriptor>
    1657       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    1658         <ds:KeyName>www.meertens.knaw.nl</ds:KeyName>
    1659         <ds:X509Data>
    1660           <ds:X509SubjectName>emailAddress=servicedesk@knaw.nl,CN=www.meertens.knaw.nl,OU=I&amp;A,O=KNAW,L=Amsterdam,ST=NH,C=NL</ds:X509SubjectName>
    1661           <ds:X509Certificate>MIIF8TCCA9mgAwIBAgIJAPS1Y07BXsRDMA0GCSqGSIb3DQEBBQUAMIGOMQswCQYD
    1662                               VQQGEwJOTDELMAkGA1UECAwCTkgxEjAQBgNVBAcMCUFtc3RlcmRhbTENMAsGA1UE
    1663                               CgwES05BVzEMMAoGA1UECwwDSSZBMR0wGwYDVQQDDBR3d3cubWVlcnRlbnMua25h
    1664                               dy5ubDEiMCAGCSqGSIb3DQEJARYTc2VydmljZWRlc2tAa25hdy5ubDAeFw0xNDA1
    1665                               MDYxMDQxMzJaFw0yNDA1MDMxMDQxMzJaMIGOMQswCQYDVQQGEwJOTDELMAkGA1UE
    1666                               CAwCTkgxEjAQBgNVBAcMCUFtc3RlcmRhbTENMAsGA1UECgwES05BVzEMMAoGA1UE
    1667                               CwwDSSZBMR0wGwYDVQQDDBR3d3cubWVlcnRlbnMua25hdy5ubDEiMCAGCSqGSIb3
    1668                               DQEJARYTc2VydmljZWRlc2tAa25hdy5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
    1669                               ADCCAgoCggIBAN0PojgkCqamdv1KflImeJwSTai6yEQv1lVchZsKhtw/eNQrGgFz
    1670                               2iC2p/hpQXoa32W76jXYfG9gK59N2Y22HQcjbw4azfMRyrorDXI9ruAjq9KY0l+q
    1671                               PibNODH4lXUEcJtQ5tgckCZnHtHJHGMrqIUZmgMDWI91GhmKb9qI5OucuHi4dFw0
    1672                               9gvWy2MW/wVejBAuWimQhlDvIzLNF3nesS/mawyXAAIgnyzT5sMEcTDifKuuF/Dq
    1673                               DyrIrlbFcUR9063SGtsbi32Qzk43VXZobD1GiMaah/jtlkZvvHx7x9HRXkjsROsy
    1674                               T0fqPSGsuH1USF4Ll0ctfmjKZdSU1DXoYefnFGah2+vu5x8+aSHyeIAABoNLzaPj
    1675                               NMI+Dt99IuLfSiRKi51HBcgI+uNScJuir/1qxjqxiAzJmXNiKOhPf2ATgsYWeP40
    1676                               Q7Q0AFDIdvFMaRBy+apmHcoE6C8DEnf2ejHaeZBm8T50z/2x1yvGd2EvLKB4Vonq
    1677                               CH/tdiPDRTEgcNjUMD+ZKDsZS3RhqaXJwWyRms0hHEnLPKsLK0JU9pAVEd15nGyg
    1678                               ziL7QpdNpD08UYCjhIoWR/byMPAvU794n/SAYorLs7DpKEinwm4lYeMo1JglhHLa
    1679                               9KFuOBMy5iyQyCijxqSjWfzTgmUf0V0SJMY4283ctufsccPiPbBymSQjAgMBAAGj
    1680                               UDBOMB0GA1UdDgQWBBTvJnIYoaUYRuUSgD1dejg/rypgajAfBgNVHSMEGDAWgBTv
    1681                               JnIYoaUYRuUSgD1dejg/rypgajAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUA
    1682                               A4ICAQC7ki6eHoRyFUVoPK+A9aDfarOnLqujQDk8s775ZcNeSZwza47MgX4HVtxB
    1683                               bfRO4HRTp0huXVbfldV60Fo/OjoQb4hS7bZjTq0m2zy1XoEmlM9rykMS8UnUsVzr
    1684                               BfC4Tq3mF3hBkiTSYkp5EekBr7PVkQK8G3XW8Jfbaf9AMbgOnEiSztHR8VKhgu2H
    1685                               6cxEj6K2il1ge/kbvYJWoxHLAhSkxOhnMs225COGoQt8Gb6pWXIIMo5QkVuZwlQE
    1686                               AKDXeuthjxa/DtxDN3SYw5MMw9qZN1RPbkwEkJpRzHceq7hQbmL0KlwPKXqqKT90
    1687                               o/+9ZTdR/6xptba73E1YtG1Iq5pQBxK6SU3HPLpCBcei6XGdi7QdDFPFfrPLg7RK
    1688                               KpxjeDWUTpopH0JEVvSgX0Tn9pVFVq5F4cial+yOpwDxZvAOwjJlWotoqnyVsDOn
    1689                               uESSSj1tVqW+2zqLTdzOpWaP0kWlu7wrL5PzqWhaPVChL+KYs40TNd2XK1rlOtNe
    1690                               WWcZ8uJ+ftZDNEGNvaTnRZLhxGxE9OWThvwL0iyOw8vEcWHm2JNRy3VkSvguFDcM
    1691                               MXWm4sBAe8iEXXkAxrflHdBubei1FTexa+Kl9lQ/ICrpmT+V1Jyi4DrdvS0+2ijb
    1692                               SF7hTs3mZvR2FPh5VJ0vBUC7QOXB5RBcP6vy4H25WiovevzKOg==
    1693           </ds:X509Certificate>
    1694         </ds:X509Data>
    1695       </ds:KeyInfo>
    1696       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
    1697       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
    1698       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
    1699       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
    1700       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
    1701       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    1702     </md:KeyDescriptor>
    1703     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
    1704     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="2"/>
    1705     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/SOAP"/>
    1706     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Redirect"/>
    1707     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/POST"/>
    1708     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Artifact"/>
    1709     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/SOAP"/>
    1710     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Redirect"/>
    1711     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/POST"/>
    1712     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Artifact"/>
    1713     <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    1714     <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
    1715     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="1"/>
    1716     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    1717     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
    1718     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
    1719     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="5"/>
    1720     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
    1721     <md:AttributeConsumingService index="1">
    1722       <md:ServiceName xml:lang="en">https://www.meertens.knaw.nl/Shibboleth.sso/Metadata</md:ServiceName>
    1723       <md:RequestedAttribute Name="urn:mace:terena.org:attribute-def:schacHomeOrganization" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    1724       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    1725       <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
    1726     </md:AttributeConsumingService>
    1727   </md:SPSSODescriptor>
    1728 
    1729   <md:Organization>
    1730                     <md:OrganizationName xml:lang="nl">Meertens Instituut</md:OrganizationName>
    1731                     <md:OrganizationName xml:lang="en">Meertens Institute</md:OrganizationName>
    1732                     <md:OrganizationDisplayName xml:lang="nl">Meertens Instituut</md:OrganizationDisplayName>
    1733                     <md:OrganizationDisplayName xml:lang="en">Meertens Institute</md:OrganizationDisplayName>
    1734                     <md:OrganizationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</md:OrganizationURL>
    1735                     <md:OrganizationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</md:OrganizationURL>
    1736                 </md:Organization><md:ContactPerson contactType="support">
    1737                     <md:GivenName>KNAW</md:GivenName>
    1738                     <md:SurName>Support</md:SurName>
    1739                     <md:EmailAddress>servicedesk@knaw.nl</md:EmailAddress>
    1740                 </md:ContactPerson><md:ContactPerson contactType="technical">
    1741                     <md:GivenName>Marc</md:GivenName>
    1742                     <md:SurName>Kemps-Snijders</md:SurName>
    1743                     <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
    1744                 </md:ContactPerson><md:ContactPerson contactType="administrative">
    1745                     <md:GivenName>Marc</md:GivenName>
    1746                     <md:SurName>Kemps-Snijders</md:SurName>
    1747                     <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
    1748                 </md:ContactPerson>
    1749         </md:EntityDescriptor>
    1750 
    1751 
    1752     <!-- start of SPs that are not yet an official part of the Service Provider Federation. These will only have access to the CLARIN IdP! -->
     1711    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     1712        ID="_b789a3a174a0187c848e235a7ead39f90a4608c0"
     1713        entityID="https://www.meertens.knaw.nl/Shibboleth.sso/Metadata">
     1714        <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
     1715            <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
     1716                <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
     1717                    Name="http://macedir.org/entity-category"
     1718                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
     1719                    <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
     1720                </saml:Attribute>
     1721            </mdattr:EntityAttributes>
     1722            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
     1723            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
     1724            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
     1725            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
     1726            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
     1727            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
     1728            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
     1729            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
     1730            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
     1731            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
     1732            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     1733        </md:Extensions>
     1734
     1735        <md:SPSSODescriptor
     1736            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     1737            <md:Extensions>
     1738                <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
     1739                    <mdui:DisplayName xml:lang="nl">Meertens Instituut</mdui:DisplayName>
     1740                    <mdui:DisplayName xml:lang="en">Meertens Institute</mdui:DisplayName>
     1741                    <mdui:Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot
     1742                        het Meertens Archief en geselecteerde diensten ten behoeve van
     1743                        geesteswetenschappelijk onderzoek op het terrein van Nederlandse
     1744                        taalvariatie en cultuur</mdui:Description>
     1745                    <mdui:Description xml:lang="en">This Service Provider regulates access to the
     1746                        Meertens Institute Archive and selected services for humanities research
     1747                        activities in the domain of Dutch language variation and
     1748                        culture</mdui:Description>
     1749                    <mdui:InformationURL xml:lang="nl"
     1750                        >http://www.meertens.knaw.nl/cms/nl</mdui:InformationURL>
     1751                    <mdui:InformationURL xml:lang="en"
     1752                        >http://www.meertens.knaw.nl/cms/en</mdui:InformationURL>
     1753                    <mdui:Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur
     1754                        geesteswetenschappen archief</mdui:Keywords>
     1755                    <mdui:Keywords xml:lang="en">Meertens research documentation language culture
     1756                        humanities archive</mdui:Keywords>
     1757                    <mdui:PrivacyStatementURL xml:lang="en"
     1758                        >https://www.meertens.knaw.nl/cms/collections/data-protection</mdui:PrivacyStatementURL>
     1759                    <mdui:Logo height="135" width="200"
     1760                        >http://www.meertens.knaw.nl/cms/templates/mi_hetgelaat/css/images/logo_meertens_full.png</mdui:Logo>
     1761                </mdui:UIInfo>
     1762                <init:RequestInitiator
     1763                    xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     1764                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     1765                    Location="https://www.meertens.knaw.nl/Shibboleth.sso/Login"/>
     1766                <idpdisc:DiscoveryResponse
     1767                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     1768                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     1769                    Location="https://www.meertens.knaw.nl/Shibboleth.sso/Login" index="1"/>
     1770            </md:Extensions>
     1771            <md:KeyDescriptor>
     1772                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     1773                    <ds:KeyName>www.meertens.knaw.nl</ds:KeyName>
     1774                    <ds:X509Data>
     1775                        <ds:X509SubjectName>emailAddress=servicedesk@knaw.nl,CN=www.meertens.knaw.nl,OU=I&amp;A,O=KNAW,L=Amsterdam,ST=NH,C=NL</ds:X509SubjectName>
     1776                        <ds:X509Certificate>MIIF8TCCA9mgAwIBAgIJAPS1Y07BXsRDMA0GCSqGSIb3DQEBBQUAMIGOMQswCQYD
     1777                            VQQGEwJOTDELMAkGA1UECAwCTkgxEjAQBgNVBAcMCUFtc3RlcmRhbTENMAsGA1UE
     1778                            CgwES05BVzEMMAoGA1UECwwDSSZBMR0wGwYDVQQDDBR3d3cubWVlcnRlbnMua25h
     1779                            dy5ubDEiMCAGCSqGSIb3DQEJARYTc2VydmljZWRlc2tAa25hdy5ubDAeFw0xNDA1
     1780                            MDYxMDQxMzJaFw0yNDA1MDMxMDQxMzJaMIGOMQswCQYDVQQGEwJOTDELMAkGA1UE
     1781                            CAwCTkgxEjAQBgNVBAcMCUFtc3RlcmRhbTENMAsGA1UECgwES05BVzEMMAoGA1UE
     1782                            CwwDSSZBMR0wGwYDVQQDDBR3d3cubWVlcnRlbnMua25hdy5ubDEiMCAGCSqGSIb3
     1783                            DQEJARYTc2VydmljZWRlc2tAa25hdy5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
     1784                            ADCCAgoCggIBAN0PojgkCqamdv1KflImeJwSTai6yEQv1lVchZsKhtw/eNQrGgFz
     1785                            2iC2p/hpQXoa32W76jXYfG9gK59N2Y22HQcjbw4azfMRyrorDXI9ruAjq9KY0l+q
     1786                            PibNODH4lXUEcJtQ5tgckCZnHtHJHGMrqIUZmgMDWI91GhmKb9qI5OucuHi4dFw0
     1787                            9gvWy2MW/wVejBAuWimQhlDvIzLNF3nesS/mawyXAAIgnyzT5sMEcTDifKuuF/Dq
     1788                            DyrIrlbFcUR9063SGtsbi32Qzk43VXZobD1GiMaah/jtlkZvvHx7x9HRXkjsROsy
     1789                            T0fqPSGsuH1USF4Ll0ctfmjKZdSU1DXoYefnFGah2+vu5x8+aSHyeIAABoNLzaPj
     1790                            NMI+Dt99IuLfSiRKi51HBcgI+uNScJuir/1qxjqxiAzJmXNiKOhPf2ATgsYWeP40
     1791                            Q7Q0AFDIdvFMaRBy+apmHcoE6C8DEnf2ejHaeZBm8T50z/2x1yvGd2EvLKB4Vonq
     1792                            CH/tdiPDRTEgcNjUMD+ZKDsZS3RhqaXJwWyRms0hHEnLPKsLK0JU9pAVEd15nGyg
     1793                            ziL7QpdNpD08UYCjhIoWR/byMPAvU794n/SAYorLs7DpKEinwm4lYeMo1JglhHLa
     1794                            9KFuOBMy5iyQyCijxqSjWfzTgmUf0V0SJMY4283ctufsccPiPbBymSQjAgMBAAGj
     1795                            UDBOMB0GA1UdDgQWBBTvJnIYoaUYRuUSgD1dejg/rypgajAfBgNVHSMEGDAWgBTv
     1796                            JnIYoaUYRuUSgD1dejg/rypgajAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUA
     1797                            A4ICAQC7ki6eHoRyFUVoPK+A9aDfarOnLqujQDk8s775ZcNeSZwza47MgX4HVtxB
     1798                            bfRO4HRTp0huXVbfldV60Fo/OjoQb4hS7bZjTq0m2zy1XoEmlM9rykMS8UnUsVzr
     1799                            BfC4Tq3mF3hBkiTSYkp5EekBr7PVkQK8G3XW8Jfbaf9AMbgOnEiSztHR8VKhgu2H
     1800                            6cxEj6K2il1ge/kbvYJWoxHLAhSkxOhnMs225COGoQt8Gb6pWXIIMo5QkVuZwlQE
     1801                            AKDXeuthjxa/DtxDN3SYw5MMw9qZN1RPbkwEkJpRzHceq7hQbmL0KlwPKXqqKT90
     1802                            o/+9ZTdR/6xptba73E1YtG1Iq5pQBxK6SU3HPLpCBcei6XGdi7QdDFPFfrPLg7RK
     1803                            KpxjeDWUTpopH0JEVvSgX0Tn9pVFVq5F4cial+yOpwDxZvAOwjJlWotoqnyVsDOn
     1804                            uESSSj1tVqW+2zqLTdzOpWaP0kWlu7wrL5PzqWhaPVChL+KYs40TNd2XK1rlOtNe
     1805                            WWcZ8uJ+ftZDNEGNvaTnRZLhxGxE9OWThvwL0iyOw8vEcWHm2JNRy3VkSvguFDcM
     1806                            MXWm4sBAe8iEXXkAxrflHdBubei1FTexa+Kl9lQ/ICrpmT+V1Jyi4DrdvS0+2ijb
     1807                            SF7hTs3mZvR2FPh5VJ0vBUC7QOXB5RBcP6vy4H25WiovevzKOg==
     1808                        </ds:X509Certificate>
     1809                    </ds:X509Data>
     1810                </ds:KeyInfo>
     1811                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     1812                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
     1813                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
     1814                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
     1815                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
     1816                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     1817            </md:KeyDescriptor>
     1818            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     1819                Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
     1820            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     1821                Location="https://www.meertens.knaw.nl/Shibboleth.sso/Artifact/SOAP" index="2"/>
     1822            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     1823                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/SOAP"/>
     1824            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     1825                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Redirect"/>
     1826            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     1827                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/POST"/>
     1828            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     1829                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SLO/Artifact"/>
     1830            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     1831                Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/SOAP"/>
     1832            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     1833                Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Redirect"/>
     1834            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     1835                Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/POST"/>
     1836            <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     1837                Location="https://www.meertens.knaw.nl/Shibboleth.sso/NIM/Artifact"/>
     1838            <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
     1839            <md:NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</md:NameIDFormat>
     1840            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     1841                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST" index="1"/>
     1842            <md:AssertionConsumerService
     1843                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     1844                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/POST-SimpleSign"
     1845                index="2"/>
     1846            <md:AssertionConsumerService
     1847                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     1848                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/Artifact" index="3"/>
     1849            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     1850                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML2/ECP" index="4"/>
     1851            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     1852                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/POST" index="5"/>
     1853            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     1854                Location="https://www.meertens.knaw.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
     1855            <md:AttributeConsumingService index="1">
     1856                <md:ServiceName xml:lang="en"
     1857                    >https://www.meertens.knaw.nl/Shibboleth.sso/Metadata</md:ServiceName>
     1858                <md:RequestedAttribute
     1859                    Name="urn:mace:terena.org:attribute-def:schacHomeOrganization"
     1860                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
     1861                <md:RequestedAttribute Name="urn:mace:dir:attribute-def:uid"
     1862                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
     1863                <md:RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"
     1864                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
     1865            </md:AttributeConsumingService>
     1866        </md:SPSSODescriptor>
     1867
     1868        <md:Organization>
     1869            <md:OrganizationName xml:lang="nl">Meertens Instituut</md:OrganizationName>
     1870            <md:OrganizationName xml:lang="en">Meertens Institute</md:OrganizationName>
     1871            <md:OrganizationDisplayName xml:lang="nl">Meertens
     1872                Instituut</md:OrganizationDisplayName>
     1873            <md:OrganizationDisplayName xml:lang="en">Meertens
     1874                Institute</md:OrganizationDisplayName>
     1875            <md:OrganizationURL xml:lang="nl"
     1876                >http://www.meertens.knaw.nl/cms/nl</md:OrganizationURL>
     1877            <md:OrganizationURL xml:lang="en"
     1878                >http://www.meertens.knaw.nl/cms/en</md:OrganizationURL>
     1879        </md:Organization>
     1880        <md:ContactPerson contactType="support">
     1881            <md:GivenName>KNAW</md:GivenName>
     1882            <md:SurName>Support</md:SurName>
     1883            <md:EmailAddress>servicedesk@knaw.nl</md:EmailAddress>
     1884        </md:ContactPerson>
     1885        <md:ContactPerson contactType="technical">
     1886            <md:GivenName>Marc</md:GivenName>
     1887            <md:SurName>Kemps-Snijders</md:SurName>
     1888            <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
     1889        </md:ContactPerson>
     1890        <md:ContactPerson contactType="administrative">
     1891            <md:GivenName>Marc</md:GivenName>
     1892            <md:SurName>Kemps-Snijders</md:SurName>
     1893            <md:EmailAddress>marc.kemps.snijders@meertens.knaw.nl</md:EmailAddress>
     1894        </md:ContactPerson>
     1895    </md:EntityDescriptor>
     1896
     1897    <!-- Start of pre-production SPs. See: https://www.clarin.eu/spf . These will only have access to  CLARIN ERIC's own IdP! -->
    17531898
    17541899    <!-- CLARIN-PL -->
    … …  
    18531998    </EntityDescriptor>
    18541999
    1855     <!-- From Daan.Broeder@mpi.nl 2014-01-26 CN=dev.clarin.nl (CLARIN NL test server UU) -->
     2000    <!-- CLARIN NL test server UU (From Daan.Broeder@mpi.nl 2014-01-26 CN=dev.clarin.nl) -->
    18562001    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    18572002        ID="_74e72425e12ba8aa1cabea1cdf919165" entityID="https://dev.clarin.nl/shibboleth">
    … …  
    18712016                    <ds:X509Data>
    18722017                        <ds:X509SubjectName>CN=dev.clarin.nl</ds:X509SubjectName>
    1873 
    18742018                        <ds:X509Certificate>MIIC7jCCAdagAwIBAgIJAIS5kN0UFuPyMA0GCSqGSIb3DQEBBQUAMBgxFjAUBgNV
    18752019                            BAMTDWRldi5jbGFyaW4ubmwwHhcNMTQwMTIwMjAwMzAyWhcNMjQwMTE4MjAwMzAy
    … …  
    18962040                    <ds:X509Data>
    18972041                        <ds:X509SubjectName>CN=dev.clarin.nl</ds:X509SubjectName>
    1898 
    18992042                        <ds:X509Certificate>MIIC7jCCAdagAwIBAgIJAIS5kN0UFuPyMA0GCSqGSIb3DQEBBQUAMBgxFjAUBgNV
    19002043                            BAMTDWRldi5jbGFyaW4ubmwwHhcNMTQwMTIwMjAwMzAyWhcNMjQwMTE4MjAwMzAy
    … …  
    19532096
    19542097    <!-- JSC, Juelich Supercomputing Centre -->
    1955 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_d84ae41f39457179d5d9b4d053e16e33f7ef67fa" entityID="https://clarin.fz-juelich.de/shibboleth">
    1956 
    1957   <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
    1958     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    1959     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    1960     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    1961     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    1962     <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    1963     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    1964     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    1965     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    1966     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    1967     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    1968     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    1969     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    1970     <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    1971     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    1972     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    1973     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    1974   </md:Extensions>
    1975 
    1976   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    1977     <md:Extensions>
    1978       <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://clarin.fz-juelich.de/Shibboleth.sso/Login"/>
    1979       <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://clarin.fz-juelich.de/Shibboleth.sso/Login" index="1"/>
    1980     </md:Extensions>
    1981     <md:KeyDescriptor>
    1982       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    1983         <ds:KeyName>clarin.fz-juelich.de</ds:KeyName>
    1984         <ds:X509Data>
    1985           <ds:X509SubjectName>CN=clarin.fz-juelich.de,OU=JSC,O=Forschungszentrum Juelich GmbH,L=Juelich,ST=Nordrhein-Westfalen,C=DE</ds:X509SubjectName>
    1986           <ds:X509Certificate>MIIF7DCCBNSgAwIBAgIHF3dECdP/XDANBgkqhkiG9w0BAQUFADCBgzELMAkGA1UE
    1987 BhMCREUxJzAlBgNVBAoTHkZvcnNjaHVuZ3N6ZW50cnVtIEp1ZWxpY2ggR21iSDEq
    1988 MCgGA1UEAxMhRlpKIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzAyMR8wHQYJ
    1989 KoZIhvcNAQkBFhBjYUBmei1qdWVsaWNoLmRlMB4XDTE0MDQyMzEzNTYwOVoXDTE3
    1990 MDQyMjEzNTYwOVowgZMxCzAJBgNVBAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4t
    1991 V2VzdGZhbGVuMRAwDgYDVQQHEwdKdWVsaWNoMScwJQYDVQQKEx5Gb3JzY2h1bmdz
    1992 emVudHJ1bSBKdWVsaWNoIEdtYkgxDDAKBgNVBAsTA0pTQzEdMBsGA1UEAxMUY2xh
    1993 cmluLmZ6LWp1ZWxpY2guZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
    1994 AQCt9e9wtfsei5yAZM2nSOHfqK0/rq1qFMVUF8KYm7AeqJj0CEplsVLqcMDkW8A1
    1995 qFmZplF3sWtF6lhO28NnKNaCs6W9R4RfK/YSoxKcVdsxinZVqYhxCXB/XkqTAAuc
    1996 KsY4ZflidSwDtyhrNMI7PgXb35arE32IVS5795TgSbg/LEFker4lDy7lb21ThJ03
    1997 TymGwi/Tv8BR7DQvihc02xfOtnIkwZ0UvtAeGGqiRyxxcyZwnMM6GwM46nBBxGJz
    1998 qBwBupb54PVUEAADLPUpJYHs87SXC48PbsJtsaLUpt0zkes2vazXKY/qARAONtTo
    1999 2uuYiI2sfaNNE37qKdYFCycHAgMBAAGjggJRMIICTTA5BgNVHSAEMjAwMBEGDysG
    2000 AQQBga0hgiwBAQQDATARBg8rBgEEAYGtIYIsAgEEAwEwCAYGZ4EMAQICMAkGA1Ud
    2001 EwQCMAAwCwYDVR0PBAQDAgXgMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggrBgEFBQcD
    2002 AQYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMB0GA1UdDgQWBBTle+Hdh5gX9F2N0I6d
    2003 pkmo8lISKjAfBgNVHSMEGDAWgBQgvXGJpckqMy8R4B/llCZWDxECJTA3BgNVHREE
    2004 MDAughRjbGFyaW4uZnotanVlbGljaC5kZYEWdnNnYy1hZG1AZnotanVlbGljaC5k
    2005 ZTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Z6ai1j
    2006 YS9wdWIvY3JsL2dfY2FjcmwuY3JsMDegNaAzhjFodHRwOi8vY2RwMi5wY2EuZGZu
    2007 LmRlL2Z6ai1jYS9wdWIvY3JsL2dfY2FjcmwuY3JsMIHLBggrBgEFBQcBAQSBvjCB
    2008 uzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZl
    2009 ci9PQ1NQMEEGCCsGAQUFBzAChjVodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Z6ai1j
    2010 YS9wdWIvY2FjZXJ0L2dfY2FjZXJ0LmNydDBBBggrBgEFBQcwAoY1aHR0cDovL2Nk
    2011 cDIucGNhLmRmbi5kZS9memotY2EvcHViL2NhY2VydC9nX2NhY2VydC5jcnQwDQYJ
    2012 KoZIhvcNAQEFBQADggEBACm264szZBQTDUXI/+aZA4+mouqobOH4buqLCno7HE6U
    2013 M9MQFZWnHLOxOgI9j5hQwO2WQXYnMFv4Jm2NGAfWKVf1CkzAnSh41BeNxZxMdyIs
    2014 salsyfaWs8IHMUu8D9D2b040pqK7vJJfgBYQz6OA49mrIojvZH2QdeHZJ2OrRc4p
    2015 7BrdGmnvh7vHxv0CGh2u/77cLtARkZEixwmNX4pj8WiAtF3MqcsFkhZu3pgfveke
    2016 pb3cchv4NAD/wXuj35pyzxv1nf9lpWjSGKP4O0YQQXepTZzTgZOUshEOA89mcv0C
    2017 6QwSuKLQPW+KesXm2dduLl5ZGKC0LAh2Zn7Ut+3mFuE=
    2018 </ds:X509Certificate>
    2019         </ds:X509Data>
    2020       </ds:KeyInfo>
    2021       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
    2022       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
    2023       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
    2024       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
    2025       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
    2026       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
    2027       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
    2028       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
    2029       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    2030     </md:KeyDescriptor>
    2031     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://clarin.fz-juelich.de/Shibboleth.sso/Artifact/SOAP" index="1"/>
    2032     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/SOAP"/>
    2033     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/Redirect"/>
    2034     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/POST"/>
    2035     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/Artifact"/>
    2036     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/POST" index="1"/>
    2037     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    2038     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/Artifact" index="3"/>
    2039     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/ECP" index="4"/>
    2040     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML/POST" index="5"/>
    2041     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML/Artifact" index="6"/>
    2042   </md:SPSSODescriptor>
    2043 
    2044 </md:EntityDescriptor>
     2098    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     2099        ID="_d84ae41f39457179d5d9b4d053e16e33f7ef67fa"
     2100        entityID="https://clarin.fz-juelich.de/shibboleth">
     2101
     2102        <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
     2103            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
     2104            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
     2105            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
     2106            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
     2107            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
     2108            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
     2109            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
     2110            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
     2111            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
     2112            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
     2113            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
     2114            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
     2115            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
     2116            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
     2117            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
     2118            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     2119        </md:Extensions>
     2120
     2121        <md:SPSSODescriptor
     2122            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     2123            <md:Extensions>
     2124                <init:RequestInitiator
     2125                    xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     2126                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     2127                    Location="https://clarin.fz-juelich.de/Shibboleth.sso/Login"/>
     2128                <idpdisc:DiscoveryResponse
     2129                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     2130                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     2131                    Location="https://clarin.fz-juelich.de/Shibboleth.sso/Login" index="1"/>
     2132            </md:Extensions>
     2133            <md:KeyDescriptor>
     2134                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     2135                    <ds:KeyName>clarin.fz-juelich.de</ds:KeyName>
     2136                    <ds:X509Data>
     2137                        <ds:X509SubjectName>CN=clarin.fz-juelich.de,OU=JSC,O=Forschungszentrum
     2138                            Juelich GmbH,L=Juelich,ST=Nordrhein-Westfalen,C=DE</ds:X509SubjectName>
     2139                        <ds:X509Certificate>MIIF7DCCBNSgAwIBAgIHF3dECdP/XDANBgkqhkiG9w0BAQUFADCBgzELMAkGA1UE
     2140                            BhMCREUxJzAlBgNVBAoTHkZvcnNjaHVuZ3N6ZW50cnVtIEp1ZWxpY2ggR21iSDEq
     2141                            MCgGA1UEAxMhRlpKIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzAyMR8wHQYJ
     2142                            KoZIhvcNAQkBFhBjYUBmei1qdWVsaWNoLmRlMB4XDTE0MDQyMzEzNTYwOVoXDTE3
     2143                            MDQyMjEzNTYwOVowgZMxCzAJBgNVBAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4t
     2144                            V2VzdGZhbGVuMRAwDgYDVQQHEwdKdWVsaWNoMScwJQYDVQQKEx5Gb3JzY2h1bmdz
     2145                            emVudHJ1bSBKdWVsaWNoIEdtYkgxDDAKBgNVBAsTA0pTQzEdMBsGA1UEAxMUY2xh
     2146                            cmluLmZ6LWp1ZWxpY2guZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
     2147                            AQCt9e9wtfsei5yAZM2nSOHfqK0/rq1qFMVUF8KYm7AeqJj0CEplsVLqcMDkW8A1
     2148                            qFmZplF3sWtF6lhO28NnKNaCs6W9R4RfK/YSoxKcVdsxinZVqYhxCXB/XkqTAAuc
     2149                            KsY4ZflidSwDtyhrNMI7PgXb35arE32IVS5795TgSbg/LEFker4lDy7lb21ThJ03
     2150                            TymGwi/Tv8BR7DQvihc02xfOtnIkwZ0UvtAeGGqiRyxxcyZwnMM6GwM46nBBxGJz
     2151                            qBwBupb54PVUEAADLPUpJYHs87SXC48PbsJtsaLUpt0zkes2vazXKY/qARAONtTo
     2152                            2uuYiI2sfaNNE37qKdYFCycHAgMBAAGjggJRMIICTTA5BgNVHSAEMjAwMBEGDysG
     2153                            AQQBga0hgiwBAQQDATARBg8rBgEEAYGtIYIsAgEEAwEwCAYGZ4EMAQICMAkGA1Ud
     2154                            EwQCMAAwCwYDVR0PBAQDAgXgMDQGA1UdJQQtMCsGCCsGAQUFBwMCBggrBgEFBQcD
     2155                            AQYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMB0GA1UdDgQWBBTle+Hdh5gX9F2N0I6d
     2156                            pkmo8lISKjAfBgNVHSMEGDAWgBQgvXGJpckqMy8R4B/llCZWDxECJTA3BgNVHREE
     2157                            MDAughRjbGFyaW4uZnotanVlbGljaC5kZYEWdnNnYy1hZG1AZnotanVlbGljaC5k
     2158                            ZTB7BgNVHR8EdDByMDegNaAzhjFodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Z6ai1j
     2159                            YS9wdWIvY3JsL2dfY2FjcmwuY3JsMDegNaAzhjFodHRwOi8vY2RwMi5wY2EuZGZu
     2160                            LmRlL2Z6ai1jYS9wdWIvY3JsL2dfY2FjcmwuY3JsMIHLBggrBgEFBQcBAQSBvjCB
     2161                            uzAzBggrBgEFBQcwAYYnaHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZl
     2162                            ci9PQ1NQMEEGCCsGAQUFBzAChjVodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Z6ai1j
     2163                            YS9wdWIvY2FjZXJ0L2dfY2FjZXJ0LmNydDBBBggrBgEFBQcwAoY1aHR0cDovL2Nk
     2164                            cDIucGNhLmRmbi5kZS9memotY2EvcHViL2NhY2VydC9nX2NhY2VydC5jcnQwDQYJ
     2165                            KoZIhvcNAQEFBQADggEBACm264szZBQTDUXI/+aZA4+mouqobOH4buqLCno7HE6U
     2166                            M9MQFZWnHLOxOgI9j5hQwO2WQXYnMFv4Jm2NGAfWKVf1CkzAnSh41BeNxZxMdyIs
     2167                            salsyfaWs8IHMUu8D9D2b040pqK7vJJfgBYQz6OA49mrIojvZH2QdeHZJ2OrRc4p
     2168                            7BrdGmnvh7vHxv0CGh2u/77cLtARkZEixwmNX4pj8WiAtF3MqcsFkhZu3pgfveke
     2169                            pb3cchv4NAD/wXuj35pyzxv1nf9lpWjSGKP4O0YQQXepTZzTgZOUshEOA89mcv0C
     2170                            6QwSuKLQPW+KesXm2dduLl5ZGKC0LAh2Zn7Ut+3mFuE= </ds:X509Certificate>
     2171                    </ds:X509Data>
     2172                </ds:KeyInfo>
     2173                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
     2174                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
     2175                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
     2176                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     2177                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
     2178                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
     2179                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
     2180                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
     2181                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     2182            </md:KeyDescriptor>
     2183            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     2184                Location="https://clarin.fz-juelich.de/Shibboleth.sso/Artifact/SOAP" index="1"/>
     2185            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     2186                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/SOAP"/>
     2187            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     2188                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/Redirect"/>
     2189            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     2190                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/POST"/>
     2191            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     2192                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SLO/Artifact"/>
     2193            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     2194                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/POST" index="1"/>
     2195            <md:AssertionConsumerService
     2196                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     2197                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/POST-SimpleSign"
     2198                index="2"/>
     2199            <md:AssertionConsumerService
     2200                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     2201                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/Artifact" index="3"/>
     2202            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     2203                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML2/ECP" index="4"/>
     2204            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     2205                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML/POST" index="5"/>
     2206            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     2207                Location="https://clarin.fz-juelich.de/Shibboleth.sso/SAML/Artifact" index="6"/>
     2208        </md:SPSSODescriptor>
     2209
     2210    </md:EntityDescriptor>
    20452211
    20462212
    … …  
    23672533    <!-- Austrian Academy (CLARIN-AT) -->
    23682534    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
    2369         ID="_af80a5dba6c58ebb32350ce01f39c551cab82702" entityID="https://clarin.oeaw.ac.at/shibboleth">
    2370        
     2535        ID="_af80a5dba6c58ebb32350ce01f39c551cab82702"
     2536        entityID="https://clarin.oeaw.ac.at/shibboleth">
     2537
    23712538        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
    23722539            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    … …  
    23812548            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    23822549            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    2383            
     2550
    23842551            <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
    23852552                <saml:Attribute Name="http://macedir.org/entity-category"
    … …  
    23882555                    <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
    23892556                </saml:Attribute>
    2390             </mdattr:EntityAttributes>           
     2557            </mdattr:EntityAttributes>
    23912558        </Extensions>
    2392        
     2559
    23932560        <SPSSODescriptor
    23942561            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    23952562            <Extensions>
    2396                 <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     2563                <init:RequestInitiator
     2564                    xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
    23972565                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
    23982566                    Location="https://clarin.oeaw.ac.at/Shibboleth.sso/Login"/>
    … …  
    24042572                    <mdui:DisplayName xml:lang="de">CLARIN Centre Vienna</mdui:DisplayName>
    24052573                    <mdui:DisplayName xml:lang="en">CLARIN Centre Vienna</mdui:DisplayName>
    2406                     <mdui:Description xml:lang="de">Ein Repositorium fÃŒr Archivieren und Publizieren von Sprachressourcen und Technologien und andere Dienste fÃŒr digitale Geisteswissenschaften.</mdui:Description>
    2407                     <mdui:Description xml:lang="en">A repository for depositing and publishing of language resources and technology and other infrastructure services for digital humanities.
    2408                     </mdui:Description>
    2409                     <mdui:InformationURL xml:lang="de">http://clarin.oeaw.ac.at/ccv</mdui:InformationURL>
     2574                    <mdui:Description xml:lang="de">Ein Repositorium fÃŒr Archivieren und Publizieren
     2575                        von Sprachressourcen und Technologien und andere Dienste fÃŒr digitale
     2576                        Geisteswissenschaften.</mdui:Description>
     2577                    <mdui:Description xml:lang="en">A repository for depositing and publishing of
     2578                        language resources and technology and other infrastructure services for
     2579                        digital humanities. </mdui:Description>
     2580                    <mdui:InformationURL xml:lang="de"
     2581                        >http://clarin.oeaw.ac.at/ccv</mdui:InformationURL>
    24102582                    <mdui:PrivacyStatementURL xml:lang="en"
    24112583                        >http://clarin.oeaw.ac.at/ccv/privacy</mdui:PrivacyStatementURL>
    … …  
    24322604                            +kX3/YW9WAQkmwcyVWDbcmk4DZK5kqqTk+u3fS48cLqai5YVcj8pDDoUx6/ZkwDv
    24332605                            Yqvva2v4+vhzX9SW3QyiChOgFo9sP/UD1U8JAZG0sds5ugwjwiXPPB41hwHdbdEj
    2434                             QZRW2NR0HHMFp0FZeSziXOeaap21wc/W1Nk7wpRI7jYdzLRJHmzhvWz95p0WSnt+ rI8v6OTvibpLrg==
    2435                         </ds:X509Certificate>
     2606                            QZRW2NR0HHMFp0FZeSziXOeaap21wc/W1Nk7wpRI7jYdzLRJHmzhvWz95p0WSnt+
     2607                            rI8v6OTvibpLrg== </ds:X509Certificate>
    24362608                    </ds:X509Data>
    24372609                </ds:KeyInfo>
    … …  
    24552627            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
    24562628                Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SAML2/POST" index="1"/>
    2457             <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     2629            <AssertionConsumerService
     2630                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
    24582631                Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    24592632            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
    … …  
    24662639                Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SAML/Artifact" index="6"/>
    24672640            <AttributeConsumingService index="1">
    2468                 <ServiceName xml:lang="de">CLARIN Centre Vienna / Language Resources Portal</ServiceName>
    2469                 <ServiceName xml:lang="en">CLARIN Centre Vienna / Language Resources Portal</ServiceName>               
    2470                 <ServiceDescription xml:lang="de">Ein Repositorium fÃŒr Archivieren und Publizieren von Sprachressourcen und Technologien und andere Dienste fÃŒr digitale Geisteswissenschaften.</ServiceDescription>
    2471                 <ServiceDescription xml:lang="en">A repository for depositing and publishing of language resources and technology and other infrastructure services for digital humanities.</ServiceDescription>
    2472                 <RequestedAttribute isRequired="false" FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    2473                 <RequestedAttribute isRequired="true" FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    2474                 <RequestedAttribute isRequired="false" FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    2475                 <RequestedAttribute isRequired="false" FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    2476                 <RequestedAttribute isRequired="false" FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    2477                 <RequestedAttribute isRequired="false" FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>     
    2478                 <RequestedAttribute isRequired="false" FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2641                <ServiceName xml:lang="de">CLARIN Centre Vienna / Language Resources
     2642                    Portal</ServiceName>
     2643                <ServiceName xml:lang="en">CLARIN Centre Vienna / Language Resources
     2644                    Portal</ServiceName>
     2645                <ServiceDescription xml:lang="de">Ein Repositorium fÃŒr Archivieren und Publizieren
     2646                    von Sprachressourcen und Technologien und andere Dienste fÃŒr digitale
     2647                    Geisteswissenschaften.</ServiceDescription>
     2648                <ServiceDescription xml:lang="en">A repository for depositing and publishing of
     2649                    language resources and technology and other infrastructure services for digital
     2650                    humanities.</ServiceDescription>
     2651                <RequestedAttribute isRequired="false" FriendlyName="eduPersonPrincipalName"
     2652                    Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6"
     2653                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2654                <RequestedAttribute isRequired="true" FriendlyName="eduPersonTargetedID"
     2655                    Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10"
     2656                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2657                <RequestedAttribute isRequired="false" FriendlyName="mail"
     2658                    Name="urn:oid:0.9.2342.19200300.100.1.3"
     2659                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2660                <RequestedAttribute isRequired="false" FriendlyName="displayName"
     2661                    Name="urn:oid:2.16.840.1.113730.3.1.241"
     2662                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2663                <RequestedAttribute isRequired="false" FriendlyName="sn" Name="urn:oid:2.5.4.4"
     2664                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2665                <RequestedAttribute isRequired="false" FriendlyName="givenName"
     2666                    Name="urn:oid:2.5.4.42"
     2667                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
     2668                <RequestedAttribute isRequired="false" FriendlyName="eduPersonScopedAffiliation"
     2669                    Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9"
     2670                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
    24792671            </AttributeConsumingService>
    24802672        </SPSSODescriptor>
    24812673        <Organization>
    2482             <OrganizationName xml:lang="de">Institut fÃŒr Corpuslinguistik und Texttechnologie, Österreichische Akademie der Wissenschaften</OrganizationName>
    2483             <OrganizationName xml:lang="en">Institute for Corpus Linguistics und Text Technology, Austrian Academy of Sciences</OrganizationName>
    2484             <OrganizationDisplayName xml:lang="de">Institut fÃŒr Corpuslinguistik und Texttechnologie</OrganizationDisplayName>
    2485             <OrganizationDisplayName xml:lang="en">Institute for Corpus Linguistics und Text Technology</OrganizationDisplayName>
    2486             <OrganizationURL xml:lang="en" >http://www.oeaw.ac.at/icltt</OrganizationURL>   
     2674            <OrganizationName xml:lang="de">Institut fÃŒr Corpuslinguistik und Texttechnologie,
     2675                Österreichische Akademie der Wissenschaften</OrganizationName>
     2676            <OrganizationName xml:lang="en">Institute for Corpus Linguistics und Text Technology,
     2677                Austrian Academy of Sciences</OrganizationName>
     2678            <OrganizationDisplayName xml:lang="de">Institut fÃŒr Corpuslinguistik und
     2679                Texttechnologie</OrganizationDisplayName>
     2680            <OrganizationDisplayName xml:lang="en">Institute for Corpus Linguistics und Text
     2681                Technology</OrganizationDisplayName>
     2682            <OrganizationURL xml:lang="en">http://www.oeaw.ac.at/icltt</OrganizationURL>
    24872683        </Organization>
    24882684        <ContactPerson contactType="technical">
    … …  
    25072703        </ContactPerson>
    25082704    </EntityDescriptor>
    2509    
    2510     <!-- UniversitÀt Leipzig //-->
     2705
     2706    <!-- UniversitÀt Leipzig -->
    25112707    <EntityDescriptor ID="_a423ad5163a8068fb6e3a6e815666f70"
    25122708        entityID="https://asvsp.informatik.uni-leipzig.de/">
    … …  
    26612857
    26622858    </EntityDescriptor>
     2859   
     2860    <!-- UniversitÀt Leipzig -->
    26632861    <EntityDescriptor ID="_336fc4004e1c79fd5b973bca6c88d1d8"
    26642862        entityID="https://clarinoai.informatik.uni-leipzig.de/">
    … …  
    28103008
    28113009    </EntityDescriptor>
     3010   
     3011    <!-- UniversitÀt Leipzig -->
    28123012    <EntityDescriptor ID="_3eb30c7696ed09541c2523661723d5ad"
    28133013        entityID="https://clarintest.informatik.uni-leipzig.de/">
    … …  
    29573157                index="6"/>
    29583158        </SPSSODescriptor>
    2959 
     3159       
    29603160    </EntityDescriptor>
    29613161
    … …  
    30613261    </EntityDescriptor>
    30623262
    3063     <!-- Hamburger Zentrum fÃŒr Sprachkorpora (HZSK)-->
     3263    <!-- Hamburger Zentrum fÃŒr Sprachkorpora (HZSK) -->
    30643264    <EntityDescriptor ID="_a3c7e7cd0142650256d6d9582b9703a2633aac22"
    30653265        entityID="http://corpora.uni-hamburg.de">
    … …  
    31663366        </SPSSODescriptor>
    31673367    </EntityDescriptor>
    3168        
    3169         <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_8599a4043cf9ca62c366fd77cc7c7b296a6ae9d3" entityID="https://sp.vs1.corpora.uni-hamburg.de/shibboleth">
    3170 
    3171   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    3172     <md:Extensions>
    3173       <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/Login"/>
    3174       <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/Login" index="1"/>
    3175     </md:Extensions>
    3176     <md:KeyDescriptor>
    3177       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    3178         <ds:KeyName>sp.vs1.corpora.uni-hamburg.de</ds:KeyName>
    3179         <ds:KeyName>vs1.corpora.uni-hamburg.de</ds:KeyName>
    3180         <ds:X509Data>
    3181           <ds:X509SubjectName>CN=vs1.corpora.uni-hamburg.de</ds:X509SubjectName>
    3182           <ds:X509Certificate>MIIDNDCCAhygAwIBAgIJANuIbKBKwh2kMA0GCSqGSIb3DQEBBQUAMCUxIzAhBgNV
    3183                         BAMTGnZzMS5jb3Jwb3JhLnVuaS1oYW1idXJnLmRlMB4XDTE0MDUwNzEwMTUxMFoX
    3184                         DTI0MDUwNDEwMTUxMFowJTEjMCEGA1UEAxMadnMxLmNvcnBvcmEudW5pLWhhbWJ1
    3185                         cmcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+569Sk8uO4aX
    3186                         4zcU6YwHbOgUW92ynGU8JbV0WqLIVRuUkwVBeKI0UCumsxjXE7ynFwv7YPXhAO4b
    3187                         m425NMCmvG/xf8HxofD1+i1FqsjLgYa46C7LchDRTdYArBzf4ZqzlBWPmS+GVqKV
    3188                         8KJZmH1ZY5NkQmq5FokV3bXesiULKPMSznY4RImqrWn8HEb2IjZwpaeAoFckR7kY
    3189                         HUtUmvsreaWwRarPY9CTPzSFKqX5Jjtwt3/Xk6A72HM5qR7mOa/MdMshrTaS/+ML
    3190                         yxW92FpT0Tb72/lFYs97jMpDvDNEJVl++xw5+7lPL9iqPgVKgLhZggLrXR4CYyt2
    3191                         hNAbIStNAgMBAAGjZzBlMEQGA1UdEQQ9MDuCGnZzMS5jb3Jwb3JhLnVuaS1oYW1i
    3192                         dXJnLmRlhh1zcC52czEuY29ycG9yYS51bmktaGFtYnVyZy5kZTAdBgNVHQ4EFgQU
    3193                         V4XXOnZkJqO/CxOzgzCw5RFWih8wDQYJKoZIhvcNAQEFBQADggEBACKcSAQd2bO/
    3194                         bZcS2wvGCENGebMueDwISTvvyGW3hUoA94K28T5WCr/WNPwDty3yBFvn/wboztZ0
    3195                         6jEuhFQ1xo/7zMBdjHSkHFLs2kp0DIfzRgWBJUVpCCV9lkxO7rhN6abiAmonvu2+
    3196                         gQcIJWAcCh//HW4fi7LPZ9DG8OjiK00DinEqm901uznyK0e/NziN/5ExP1d3onxi
    3197                         k1oLIeAl0snOKGd1Cw2MfQYh7QaJdXpM2W3aG6UVLNbzjAvInTjMT6rVJIxxGSdE
    3198                         00Ev3tKPZ6iDZDjawwChLxAlfAby3JLylUJ4Lg/bh8/fY0SUFHAYpS8+ZPvdO6iR
    3199                         LPhJPdKT3mM=
    3200                         </ds:X509Certificate>
    3201         </ds:X509Data>
    3202       </ds:KeyInfo>
    3203     </md:KeyDescriptor>
    3204     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/Artifact/SOAP" index="0"/>
    3205     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/SOAP"/>
    3206     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/Redirect"/>
    3207     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/POST"/>
    3208     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/Artifact"/>
    3209     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/POST" index="0"/>
    3210     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/POST-SimpleSign" index="1"/>
    3211     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/Artifact" index="2"/>
    3212     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/ECP" index="3"/>
    3213     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML/POST" index="4"/>
    3214     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML/Artifact" index="5"/>
    3215   </md:SPSSODescriptor>
    3216 
    3217 </md:EntityDescriptor>
     3368   
     3369    <!-- Hamburger Zentrum fÃŒr Sprachkorpora (HZSK) -->
     3370    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     3371        ID="_8599a4043cf9ca62c366fd77cc7c7b296a6ae9d3"
     3372        entityID="https://sp.vs1.corpora.uni-hamburg.de/shibboleth">
     3373
     3374        <md:SPSSODescriptor
     3375            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     3376            <md:Extensions>
     3377                <init:RequestInitiator
     3378                    xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     3379                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     3380                    Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/Login"/>
     3381                <idpdisc:DiscoveryResponse
     3382                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     3383                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     3384                    Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/Login" index="1"/>
     3385            </md:Extensions>
     3386            <md:KeyDescriptor>
     3387                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     3388                    <ds:KeyName>sp.vs1.corpora.uni-hamburg.de</ds:KeyName>
     3389                    <ds:KeyName>vs1.corpora.uni-hamburg.de</ds:KeyName>
     3390                    <ds:X509Data>
     3391                        <ds:X509SubjectName>CN=vs1.corpora.uni-hamburg.de</ds:X509SubjectName>
     3392                        <ds:X509Certificate>MIIDNDCCAhygAwIBAgIJANuIbKBKwh2kMA0GCSqGSIb3DQEBBQUAMCUxIzAhBgNV
     3393                            BAMTGnZzMS5jb3Jwb3JhLnVuaS1oYW1idXJnLmRlMB4XDTE0MDUwNzEwMTUxMFoX
     3394                            DTI0MDUwNDEwMTUxMFowJTEjMCEGA1UEAxMadnMxLmNvcnBvcmEudW5pLWhhbWJ1
     3395                            cmcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu+569Sk8uO4aX
     3396                            4zcU6YwHbOgUW92ynGU8JbV0WqLIVRuUkwVBeKI0UCumsxjXE7ynFwv7YPXhAO4b
     3397                            m425NMCmvG/xf8HxofD1+i1FqsjLgYa46C7LchDRTdYArBzf4ZqzlBWPmS+GVqKV
     3398                            8KJZmH1ZY5NkQmq5FokV3bXesiULKPMSznY4RImqrWn8HEb2IjZwpaeAoFckR7kY
     3399                            HUtUmvsreaWwRarPY9CTPzSFKqX5Jjtwt3/Xk6A72HM5qR7mOa/MdMshrTaS/+ML
     3400                            yxW92FpT0Tb72/lFYs97jMpDvDNEJVl++xw5+7lPL9iqPgVKgLhZggLrXR4CYyt2
     3401                            hNAbIStNAgMBAAGjZzBlMEQGA1UdEQQ9MDuCGnZzMS5jb3Jwb3JhLnVuaS1oYW1i
     3402                            dXJnLmRlhh1zcC52czEuY29ycG9yYS51bmktaGFtYnVyZy5kZTAdBgNVHQ4EFgQU
     3403                            V4XXOnZkJqO/CxOzgzCw5RFWih8wDQYJKoZIhvcNAQEFBQADggEBACKcSAQd2bO/
     3404                            bZcS2wvGCENGebMueDwISTvvyGW3hUoA94K28T5WCr/WNPwDty3yBFvn/wboztZ0
     3405                            6jEuhFQ1xo/7zMBdjHSkHFLs2kp0DIfzRgWBJUVpCCV9lkxO7rhN6abiAmonvu2+
     3406                            gQcIJWAcCh//HW4fi7LPZ9DG8OjiK00DinEqm901uznyK0e/NziN/5ExP1d3onxi
     3407                            k1oLIeAl0snOKGd1Cw2MfQYh7QaJdXpM2W3aG6UVLNbzjAvInTjMT6rVJIxxGSdE
     3408                            00Ev3tKPZ6iDZDjawwChLxAlfAby3JLylUJ4Lg/bh8/fY0SUFHAYpS8+ZPvdO6iR
     3409                            LPhJPdKT3mM= </ds:X509Certificate>
     3410                    </ds:X509Data>
     3411                </ds:KeyInfo>
     3412            </md:KeyDescriptor>
     3413            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     3414                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/Artifact/SOAP" index="0"/>
     3415            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     3416                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/SOAP"/>
     3417            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     3418                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/Redirect"/>
     3419            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3420                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/POST"/>
     3421            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3422                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SLO/Artifact"/>
     3423            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3424                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/POST" index="0"/>
     3425            <md:AssertionConsumerService
     3426                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     3427                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/POST-SimpleSign"
     3428                index="1"/>
     3429            <md:AssertionConsumerService
     3430                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3431                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/Artifact"
     3432                index="2"/>
     3433            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     3434                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML2/ECP" index="3"/>
     3435            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     3436                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML/POST" index="4"/>
     3437            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     3438                Location="https://vs1.corpora.uni-hamburg.de/Shibboleth.sso/SAML/Artifact" index="5"
     3439            />
     3440        </md:SPSSODescriptor>
     3441
     3442    </md:EntityDescriptor>
    32183443
    32193444    <!-- IMS, University of Stuttgart -->
    … …  
    33283553
    33293554    </EntityDescriptor>
    3330 
    33313555
    33323556    <!-- OpenSKOS Meertens | KNAW  -->
    … …  
    34903714    </md:EntityDescriptor>
    34913715
    3492 <!-- CELR -->
    3493 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/metadata.php/ekrk-sp">
    3494   <md:Extensions>
    3495     <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://taat.edu.ee">
    3496       <mdrpi:RegistrationPolicy xml:lang="en">http://www.geant.net/uri/dataprotection-code-of-conduct/v1</mdrpi:RegistrationPolicy>
    3497     </mdrpi:RegistrationInfo>
    3498   </md:Extensions>
    3499   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
    3500     <md:Extensions>
    3501       <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
    3502         <mdui:DisplayName xml:lang="en">CELR Services</mdui:DisplayName>
    3503         <mdui:DisplayName xml:lang="et">EKRK teenused</mdui:DisplayName>
    3504         <mdui:InformationURL xml:lang="en">http://keeleressursid.ee/en/</mdui:InformationURL>
    3505         <mdui:InformationURL xml:lang="et">http://keeleressursid.ee/et/</mdui:InformationURL>
    3506         <mdui:PrivacyStatementURL xml:lang="en">https://wiki.ut.ee/display/keeleressursid/Privacy+Policy+of+Center+of+Estonian+Language+Resources</mdui:PrivacyStatementURL>
    3507       </mdui:UIInfo>
    3508     </md:Extensions>
    3509     <md:KeyDescriptor use="signing">
    3510       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    3511         <ds:X509Data>
    3512           <ds:X509Certificate>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</ds:X509Certificate>
    3513         </ds:X509Data>
    3514       </ds:KeyInfo>
    3515     </md:KeyDescriptor>
    3516     <md:KeyDescriptor use="encryption">
    3517       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    3518         <ds:X509Data>
    3519           <ds:X509Certificate>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</ds:X509Certificate>
    3520         </ds:X509Data>
    3521       </ds:KeyInfo>
    3522     </md:KeyDescriptor>
    3523     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml2-logout.php/ekrk-sp"/>
    3524     <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    3525     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml2-acs.php/ekrk-sp" index="0"/>
    3526     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml1-acs.php/ekrk-sp" index="1"/>
    3527     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml2-acs.php/ekrk-sp" index="2"/>
    3528     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml1-acs.php/ekrk-sp/artifact" index="3"/>
    3529     <md:AttributeConsumingService index="0">
    3530       <md:ServiceName xml:lang="en">CELR services</md:ServiceName>
    3531       <md:ServiceName xml:lang="et">EKRK teenused</md:ServiceName>
    3532       <md:RequestedAttribute Name="eduPersonPrincipalName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="true"/>
    3533       <md:RequestedAttribute Name="eduPersonTargetedId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    3534       <md:RequestedAttribute Name="cn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    3535       <md:RequestedAttribute Name="sn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    3536       <md:RequestedAttribute Name="o" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    3537       <md:RequestedAttribute Name="displayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    3538       <md:RequestedAttribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
    3539     </md:AttributeConsumingService>
    3540   </md:SPSSODescriptor>
    3541   <md:ContactPerson contactType="technical">
    3542     <md:GivenName>Lauri</md:GivenName>
    3543     <md:SurName>Jesmin</md:SurName>
    3544     <md:EmailAddress>lauri.jesmin@ut.ee</md:EmailAddress>
    3545   </md:ContactPerson>
    3546 </md:EntityDescriptor>
    3547 
    3548 <!-- CMU CHILDES -->
    3549 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_e73581dabbb136967b5a4b0c3a507491f7804e04" entityID="https://childes.talkbank.org/shibboleth">
    3550 
    3551   <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
    3552     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    3553     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    3554     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    3555     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    3556     <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    3557     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    3558     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    3559     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    3560     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    3561     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    3562     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    3563     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    3564     <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    3565     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    3566     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    3567     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    3568   </md:Extensions>
    3569 
    3570   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    3571     <md:Extensions>
    3572       <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://childes.talkbank.org/Shibboleth.sso/Login"/>
    3573       <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://childes.talkbank.org/Shibboleth.sso/Login" index="1"/>
    3574     </md:Extensions>
    3575     <md:KeyDescriptor>
    3576       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    3577         <ds:KeyName>childes.talkbank.org</ds:KeyName>
    3578         <ds:X509Data>
    3579           <ds:X509SubjectName>CN=childes.talkbank.org</ds:X509SubjectName>
    3580           <ds:X509Certificate>MIIDAzCCAeugAwIBAgIJAJkTfjQYZ714MA0GCSqGSIb3DQEBBQUAMB8xHTAbBgNV
    3581 BAMTFGNoaWxkZXMudGFsa2Jhbmsub3JnMB4XDTE0MDMxODE4NTMyMloXDTI0MDMx
    3582 NTE4NTMyMlowHzEdMBsGA1UEAxMUY2hpbGRlcy50YWxrYmFuay5vcmcwggEiMA0G
    3583 CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hiLowJHLHWpzZsZdAdwD9K/qwltK
    3584 vnsNpsdBzFuL2hs3aeL4AQF6jka10Gb1Dgo3b5Vam5NyBau8tOb5A7GwkO6pTgnp
    3585 uFaVGPJSZtmJ0pim7dB+3VtCotf+SzArzm3Uxl7LUdC8ekqMh6Tnr5g5ZsCPxl+D
    3586 D24tS7B0WQTBuGAQF+9ogBxqwakSFDQPcjtt5FMf1FMyPrC9m4oezpijERxQU1qZ
    3587 2L+ZZEBO/b8h7/LYiIOdhXHmH2WvabLewtJ01rFXj8V5V65a9szEC7wh/s/mlBQ3
    3588 xchPYrScQBZdeBSBmf6FxYgvDqisxtDVO8knj5uJdhJ9qiBJYY5n3+ZzAgMBAAGj
    3589 QjBAMB8GA1UdEQQYMBaCFGNoaWxkZXMudGFsa2Jhbmsub3JnMB0GA1UdDgQWBBQY
    3590 9eWGSTeFuDuIznq2Ww2d/o4KsjANBgkqhkiG9w0BAQUFAAOCAQEAHhmtwHUyGdPj
    3591 eYRd5SMjgyifWAG7bQJvqiHdC1LNoTcPjTUTfzK6k01v2KDwsOSSj5tRNne3CrkV
    3592 DFSQFhuUvLmUEbFTIHj0Hxkv+soOcbIlRibTW6AnEGRFE9iRFHZTAc77xij25EwB
    3593 Bb7gOjZTFZMSAAmOMOkOxTW7IUI9XTjb5bseDXGr/VlkDUg3US10bhPhGFYfg9gz
    3594 k7EVZj45i0IaYzsxCu6sspV3RqkZnrf7xQLFlXi2vrHDC1/tfce8iNZ39iMEi15W
    3595 6vq+/FwHiapEaha1/wqd1aPv8FLYBGdfidv6vDVZZCpvsBTjTOEs4dh70Qm/9l5C
    3596 IOIhmH9kkA==
    3597 </ds:X509Certificate>
    3598         </ds:X509Data>
    3599       </ds:KeyInfo>
    3600       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
    3601       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
    3602       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
    3603       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
    3604       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
    3605       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
    3606       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
    3607       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
    3608       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    3609     </md:KeyDescriptor>
    3610     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://childes.talkbank.org/Shibboleth.sso/Artifact/SOAP" index="1"/>
    3611     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://childes.talkbank.org/Shibboleth.sso/SLO/SOAP"/>
    3612     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://childes.talkbank.org/Shibboleth.sso/SLO/Redirect"/>
    3613     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://childes.talkbank.org/Shibboleth.sso/SLO/POST"/>
    3614     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://childes.talkbank.org/Shibboleth.sso/SLO/Artifact"/>
    3615     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/POST" index="1"/>
    3616     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    3617     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/Artifact" index="3"/>
    3618     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/ECP" index="4"/>
    3619     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://childes.talkbank.org/Shibboleth.sso/SAML/POST" index="5"/>
    3620     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://childes.talkbank.org/Shibboleth.sso/SAML/Artifact" index="6"/>
    3621   </md:SPSSODescriptor>
     3716    <!-- CELR -->
     3717    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     3718        xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
     3719        xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
     3720        xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
     3721        entityID="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/metadata.php/ekrk-sp">
     3722        <md:Extensions>
     3723            <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
     3724                registrationAuthority="http://taat.edu.ee">
     3725                <mdrpi:RegistrationPolicy xml:lang="en"
     3726                    >http://www.geant.net/uri/dataprotection-code-of-conduct/v1</mdrpi:RegistrationPolicy>
     3727            </mdrpi:RegistrationInfo>
     3728        </md:Extensions>
     3729        <md:SPSSODescriptor
     3730            protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
     3731            <md:Extensions>
     3732                <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
     3733                    <mdui:DisplayName xml:lang="en">CELR Services</mdui:DisplayName>
     3734                    <mdui:DisplayName xml:lang="et">EKRK teenused</mdui:DisplayName>
     3735                    <mdui:InformationURL xml:lang="en"
     3736                        >http://keeleressursid.ee/en/</mdui:InformationURL>
     3737                    <mdui:InformationURL xml:lang="et"
     3738                        >http://keeleressursid.ee/et/</mdui:InformationURL>
     3739                    <mdui:PrivacyStatementURL xml:lang="en"
     3740                        >https://wiki.ut.ee/display/keeleressursid/Privacy+Policy+of+Center+of+Estonian+Language+Resources</mdui:PrivacyStatementURL>
     3741                </mdui:UIInfo>
     3742            </md:Extensions>
     3743            <md:KeyDescriptor use="signing">
     3744                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     3745                    <ds:X509Data>
     3746                        <ds:X509Certificate>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</ds:X509Certificate>
     3747                    </ds:X509Data>
     3748                </ds:KeyInfo>
     3749            </md:KeyDescriptor>
     3750            <md:KeyDescriptor use="encryption">
     3751                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     3752                    <ds:X509Data>
     3753                        <ds:X509Certificate>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</ds:X509Certificate>
     3754                    </ds:X509Data>
     3755                </ds:KeyInfo>
     3756            </md:KeyDescriptor>
     3757            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     3758                Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml2-logout.php/ekrk-sp"/>
     3759            <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
     3760            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3761                Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml2-acs.php/ekrk-sp"
     3762                index="0"/>
     3763            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     3764                Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml1-acs.php/ekrk-sp"
     3765                index="1"/>
     3766            <md:AssertionConsumerService
     3767                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3768                Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml2-acs.php/ekrk-sp"
     3769                index="2"/>
     3770            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     3771                Location="https://ekrksso.keeleressursid.ee/simplesaml/module.php/saml/sp/saml1-acs.php/ekrk-sp/artifact"
     3772                index="3"/>
     3773            <md:AttributeConsumingService index="0">
     3774                <md:ServiceName xml:lang="en">CELR services</md:ServiceName>
     3775                <md:ServiceName xml:lang="et">EKRK teenused</md:ServiceName>
     3776                <md:RequestedAttribute Name="eduPersonPrincipalName"
     3777                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" isRequired="true"/>
     3778                <md:RequestedAttribute Name="eduPersonTargetedId"
     3779                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
     3780                <md:RequestedAttribute Name="cn"
     3781                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
     3782                <md:RequestedAttribute Name="sn"
     3783                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
     3784                <md:RequestedAttribute Name="o"
     3785                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
     3786                <md:RequestedAttribute Name="displayName"
     3787                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
     3788                <md:RequestedAttribute Name="mail"
     3789                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"/>
     3790            </md:AttributeConsumingService>
     3791        </md:SPSSODescriptor>
     3792        <md:ContactPerson contactType="technical">
     3793            <md:GivenName>Lauri</md:GivenName>
     3794            <md:SurName>Jesmin</md:SurName>
     3795            <md:EmailAddress>lauri.jesmin@ut.ee</md:EmailAddress>
     3796        </md:ContactPerson>
     3797    </md:EntityDescriptor>
     3798
     3799    <!-- CMU CHILDES -->
     3800    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     3801        ID="_e73581dabbb136967b5a4b0c3a507491f7804e04"
     3802        entityID="https://childes.talkbank.org/shibboleth">
     3803
     3804        <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
     3805            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
     3806            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
     3807            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
     3808            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
     3809            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
     3810            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
     3811            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
     3812            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
     3813            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
     3814            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
     3815            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
     3816            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
     3817            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
     3818            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
     3819            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
     3820            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     3821        </md:Extensions>
     3822
     3823        <md:SPSSODescriptor
     3824            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     3825            <md:Extensions>
     3826                <init:RequestInitiator
     3827                    xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     3828                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     3829                    Location="https://childes.talkbank.org/Shibboleth.sso/Login"/>
     3830                <idpdisc:DiscoveryResponse
     3831                    xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     3832                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
     3833                    Location="https://childes.talkbank.org/Shibboleth.sso/Login" index="1"/>
     3834            </md:Extensions>
     3835            <md:KeyDescriptor>
     3836                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     3837                    <ds:KeyName>childes.talkbank.org</ds:KeyName>
     3838                    <ds:X509Data>
     3839                        <ds:X509SubjectName>CN=childes.talkbank.org</ds:X509SubjectName>
     3840                        <ds:X509Certificate>MIIDAzCCAeugAwIBAgIJAJkTfjQYZ714MA0GCSqGSIb3DQEBBQUAMB8xHTAbBgNV
     3841                            BAMTFGNoaWxkZXMudGFsa2Jhbmsub3JnMB4XDTE0MDMxODE4NTMyMloXDTI0MDMx
     3842                            NTE4NTMyMlowHzEdMBsGA1UEAxMUY2hpbGRlcy50YWxrYmFuay5vcmcwggEiMA0G
     3843                            CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5hiLowJHLHWpzZsZdAdwD9K/qwltK
     3844                            vnsNpsdBzFuL2hs3aeL4AQF6jka10Gb1Dgo3b5Vam5NyBau8tOb5A7GwkO6pTgnp
     3845                            uFaVGPJSZtmJ0pim7dB+3VtCotf+SzArzm3Uxl7LUdC8ekqMh6Tnr5g5ZsCPxl+D
     3846                            D24tS7B0WQTBuGAQF+9ogBxqwakSFDQPcjtt5FMf1FMyPrC9m4oezpijERxQU1qZ
     3847                            2L+ZZEBO/b8h7/LYiIOdhXHmH2WvabLewtJ01rFXj8V5V65a9szEC7wh/s/mlBQ3
     3848                            xchPYrScQBZdeBSBmf6FxYgvDqisxtDVO8knj5uJdhJ9qiBJYY5n3+ZzAgMBAAGj
     3849                            QjBAMB8GA1UdEQQYMBaCFGNoaWxkZXMudGFsa2Jhbmsub3JnMB0GA1UdDgQWBBQY
     3850                            9eWGSTeFuDuIznq2Ww2d/o4KsjANBgkqhkiG9w0BAQUFAAOCAQEAHhmtwHUyGdPj
     3851                            eYRd5SMjgyifWAG7bQJvqiHdC1LNoTcPjTUTfzK6k01v2KDwsOSSj5tRNne3CrkV
     3852                            DFSQFhuUvLmUEbFTIHj0Hxkv+soOcbIlRibTW6AnEGRFE9iRFHZTAc77xij25EwB
     3853                            Bb7gOjZTFZMSAAmOMOkOxTW7IUI9XTjb5bseDXGr/VlkDUg3US10bhPhGFYfg9gz
     3854                            k7EVZj45i0IaYzsxCu6sspV3RqkZnrf7xQLFlXi2vrHDC1/tfce8iNZ39iMEi15W
     3855                            6vq+/FwHiapEaha1/wqd1aPv8FLYBGdfidv6vDVZZCpvsBTjTOEs4dh70Qm/9l5C
     3856                            IOIhmH9kkA== </ds:X509Certificate>
     3857                    </ds:X509Data>
     3858                </ds:KeyInfo>
     3859                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
     3860                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
     3861                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
     3862                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     3863                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
     3864                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
     3865                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
     3866                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
     3867                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     3868            </md:KeyDescriptor>
     3869            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     3870                Location="https://childes.talkbank.org/Shibboleth.sso/Artifact/SOAP" index="1"/>
     3871            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     3872                Location="https://childes.talkbank.org/Shibboleth.sso/SLO/SOAP"/>
     3873            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     3874                Location="https://childes.talkbank.org/Shibboleth.sso/SLO/Redirect"/>
     3875            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3876                Location="https://childes.talkbank.org/Shibboleth.sso/SLO/POST"/>
     3877            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3878                Location="https://childes.talkbank.org/Shibboleth.sso/SLO/Artifact"/>
     3879            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3880                Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/POST" index="1"/>
     3881            <md:AssertionConsumerService
     3882                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     3883                Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/POST-SimpleSign"
     3884                index="2"/>
     3885            <md:AssertionConsumerService
     3886                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3887                Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/Artifact" index="3"/>
     3888            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     3889                Location="https://childes.talkbank.org/Shibboleth.sso/SAML2/ECP" index="4"/>
     3890            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     3891                Location="https://childes.talkbank.org/Shibboleth.sso/SAML/POST" index="5"/>
     3892            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     3893                Location="https://childes.talkbank.org/Shibboleth.sso/SAML/Artifact" index="6"/>
     3894        </md:SPSSODescriptor>
    36223895        <Organization>
    36233896            <OrganizationName xml:lang="en">Carnegie Mellon University</OrganizationName>
    3624             <OrganizationDisplayName xml:lang="en">Carnegie Mellon University</OrganizationDisplayName>
     3897            <OrganizationDisplayName xml:lang="en">Carnegie Mellon
     3898                University</OrganizationDisplayName>
    36253899            <OrganizationURL xml:lang="en">http://www.cmu.edu</OrganizationURL>
    36263900        </Organization>
    … …  
    36353909            <EmailAddress>mailto:macw@cmu.edu</EmailAddress>
    36363910        </ContactPerson>
    3637   </md:EntityDescriptor>
    3638 
    3639 <!-- CMU TalkBank -->
    3640 <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_b140b08106f7fa2dc3c0e9a2f6c95da869b35eb7" entityID="https://talkbank.talkbank.org/shibboleth">
    3641 
    3642   <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
    3643     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
    3644     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
    3645     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
    3646     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
    3647     <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    3648     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
    3649     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
    3650     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
    3651     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
    3652     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
    3653     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
    3654     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
    3655     <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
    3656     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
    3657     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    3658     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
    3659   </md:Extensions>
    3660 
    3661   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
    3662     <md:Extensions>
    3663       <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://talkbank.talkbank.org/Shibboleth.sso/Login"/>
    3664     </md:Extensions>
    3665     <md:KeyDescriptor>
    3666       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    3667         <ds:KeyName>talkbank.talkbank.org</ds:KeyName>
    3668         <ds:X509Data>
    3669           <ds:X509SubjectName>CN=talkbank.talkbank.org</ds:X509SubjectName>
    3670           <ds:X509Certificate>MIIDBjCCAe6gAwIBAgIJAIzKsiKO/JQPMA0GCSqGSIb3DQEBBQUAMCAxHjAcBgNV
    3671 BAMTFXRhbGtiYW5rLnRhbGtiYW5rLm9yZzAeFw0xNDAzMTgxOTEzMDlaFw0yNDAz
    3672 MTUxOTEzMDlaMCAxHjAcBgNVBAMTFXRhbGtiYW5rLnRhbGtiYW5rLm9yZzCCASIw
    3673 DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALno8eiR+W6+ZX3Yn5g7QNWUYues
    3674 0NwWPwTcKCaMYB8GZFhPwKTTfju2oXdyTBGZZCIqIM5Wfrg9UMfdh3j1zrC3loj7
    3675 Hx5HwY+i/+Tx/s/UAW9njBbnrRM4f/4xKRfCeiaeQo+RedrcNZADkaE1uy+EhRh3
    3676 xVpZZHkIKWekGk1jh8NsW8QnRBTA1GLd9BZBDaVvaBpnEW5IwqeN0iJSy7WwcwC6
    3677 qLfDqLUFaC2OI2fi+RtV4Vfs1Oq30ZbLHZG9+MFCPpqkGxEbyUgohcfGCKoz8/vW
    3678 fk6MgiaiGqJ0/K3AaCCJz+1zFUmq1hf5aSsVu/lvBMzAH+77QDQNKyZSxNMCAwEA
    3679 AaNDMEEwIAYDVR0RBBkwF4IVdGFsa2JhbmsudGFsa2Jhbmsub3JnMB0GA1UdDgQW
    3680 BBQgweM96szLBSev8r+xBdkfzq2pXTANBgkqhkiG9w0BAQUFAAOCAQEAemzcmcrh
    3681 5EWY2BXLmyMrdl4h5GnVtANr1hcKP7RfX0+EaWXlgPBTml4W8TIzegvyv6MuIIXU
    3682 RB2b1VWOo9NY0zSbbazP2x6wcqgM0Imzpac+FWeGgh+D3j4mWC5NZYezZ8ahsvjq
    3683 sCAq1dYlkAIj/34KLLhZLuZYceQXOW9KiossZEyp/6u4yzndgMmGqtK9TZnitAio
    3684 M7H5R35g3WcjoBPdGHTSValup4MaMhz3dbLzS+X4s97XjIYVuaJFags+JZz+79b6
    3685 xPttj9gCJKXC12f60rCBFakal1AEmL9GnYf2jyKaxkot5rxU053SU5ahhUAJpCoU
    3686 nqtFHmhEv2mrhA==
    3687 </ds:X509Certificate>
    3688         </ds:X509Data>
    3689       </ds:KeyInfo>
    3690       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
    3691       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
    3692       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
    3693       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
    3694       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
    3695       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
    3696       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
    3697       <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
    3698       <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
    3699     </md:KeyDescriptor>
    3700     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://talkbank.talkbank.org/Shibboleth.sso/Artifact/SOAP" index="1"/>
    3701     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/SOAP"/>
    3702     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/Redirect"/>
    3703     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/POST"/>
    3704     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/Artifact"/>
    3705     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/POST" index="1"/>
    3706     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
    3707     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/Artifact" index="3"/>
    3708     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/ECP" index="4"/>
    3709     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML/POST" index="5"/>
    3710     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML/Artifact" index="6"/>
    3711   </md:SPSSODescriptor>
     3911    </md:EntityDescriptor>
     3912
     3913    <!-- CMU TalkBank -->
     3914    <md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
     3915        ID="_b140b08106f7fa2dc3c0e9a2f6c95da869b35eb7"
     3916        entityID="https://talkbank.talkbank.org/shibboleth">
     3917
     3918        <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
     3919            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
     3920            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
     3921            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
     3922            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
     3923            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
     3924            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
     3925            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
     3926            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
     3927            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
     3928            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
     3929            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
     3930            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
     3931            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
     3932            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
     3933            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
     3934            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
     3935        </md:Extensions>
     3936
     3937        <md:SPSSODescriptor
     3938            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     3939            <md:Extensions>
     3940                <init:RequestInitiator
     3941                    xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     3942                    Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
     3943                    Location="https://talkbank.talkbank.org/Shibboleth.sso/Login"/>
     3944            </md:Extensions>
     3945            <md:KeyDescriptor>
     3946                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
     3947                    <ds:KeyName>talkbank.talkbank.org</ds:KeyName>
     3948                    <ds:X509Data>
     3949                        <ds:X509SubjectName>CN=talkbank.talkbank.org</ds:X509SubjectName>
     3950                        <ds:X509Certificate>MIIDBjCCAe6gAwIBAgIJAIzKsiKO/JQPMA0GCSqGSIb3DQEBBQUAMCAxHjAcBgNV
     3951                            BAMTFXRhbGtiYW5rLnRhbGtiYW5rLm9yZzAeFw0xNDAzMTgxOTEzMDlaFw0yNDAz
     3952                            MTUxOTEzMDlaMCAxHjAcBgNVBAMTFXRhbGtiYW5rLnRhbGtiYW5rLm9yZzCCASIw
     3953                            DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALno8eiR+W6+ZX3Yn5g7QNWUYues
     3954                            0NwWPwTcKCaMYB8GZFhPwKTTfju2oXdyTBGZZCIqIM5Wfrg9UMfdh3j1zrC3loj7
     3955                            Hx5HwY+i/+Tx/s/UAW9njBbnrRM4f/4xKRfCeiaeQo+RedrcNZADkaE1uy+EhRh3
     3956                            xVpZZHkIKWekGk1jh8NsW8QnRBTA1GLd9BZBDaVvaBpnEW5IwqeN0iJSy7WwcwC6
     3957                            qLfDqLUFaC2OI2fi+RtV4Vfs1Oq30ZbLHZG9+MFCPpqkGxEbyUgohcfGCKoz8/vW
     3958                            fk6MgiaiGqJ0/K3AaCCJz+1zFUmq1hf5aSsVu/lvBMzAH+77QDQNKyZSxNMCAwEA
     3959                            AaNDMEEwIAYDVR0RBBkwF4IVdGFsa2JhbmsudGFsa2Jhbmsub3JnMB0GA1UdDgQW
     3960                            BBQgweM96szLBSev8r+xBdkfzq2pXTANBgkqhkiG9w0BAQUFAAOCAQEAemzcmcrh
     3961                            5EWY2BXLmyMrdl4h5GnVtANr1hcKP7RfX0+EaWXlgPBTml4W8TIzegvyv6MuIIXU
     3962                            RB2b1VWOo9NY0zSbbazP2x6wcqgM0Imzpac+FWeGgh+D3j4mWC5NZYezZ8ahsvjq
     3963                            sCAq1dYlkAIj/34KLLhZLuZYceQXOW9KiossZEyp/6u4yzndgMmGqtK9TZnitAio
     3964                            M7H5R35g3WcjoBPdGHTSValup4MaMhz3dbLzS+X4s97XjIYVuaJFags+JZz+79b6
     3965                            xPttj9gCJKXC12f60rCBFakal1AEmL9GnYf2jyKaxkot5rxU053SU5ahhUAJpCoU
     3966                            nqtFHmhEv2mrhA== </ds:X509Certificate>
     3967                    </ds:X509Data>
     3968                </ds:KeyInfo>
     3969                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
     3970                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
     3971                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
     3972                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     3973                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
     3974                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
     3975                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
     3976                <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
     3977                <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     3978            </md:KeyDescriptor>
     3979            <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     3980                Location="https://talkbank.talkbank.org/Shibboleth.sso/Artifact/SOAP" index="1"/>
     3981            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
     3982                Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/SOAP"/>
     3983            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
     3984                Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/Redirect"/>
     3985            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3986                Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/POST"/>
     3987            <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3988                Location="https://talkbank.talkbank.org/Shibboleth.sso/SLO/Artifact"/>
     3989            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     3990                Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/POST" index="1"/>
     3991            <md:AssertionConsumerService
     3992                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
     3993                Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/POST-SimpleSign"
     3994                index="2"/>
     3995            <md:AssertionConsumerService
     3996                Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
     3997                Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/Artifact" index="3"/>
     3998            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
     3999                Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML2/ECP" index="4"/>
     4000            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
     4001                Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML/POST" index="5"/>
     4002            <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
     4003                Location="https://talkbank.talkbank.org/Shibboleth.sso/SAML/Artifact" index="6"/>
     4004        </md:SPSSODescriptor>
    37124005        <Organization>
    37134006            <OrganizationName xml:lang="en">Carnegie Mellon University</OrganizationName>
    3714             <OrganizationDisplayName xml:lang="en">Carnegie Mellon University</OrganizationDisplayName>
     4007            <OrganizationDisplayName xml:lang="en">Carnegie Mellon
     4008                University</OrganizationDisplayName>
    37154009            <OrganizationURL xml:lang="en">http://www.cmu.edu</OrganizationURL>
    37164010        </Organization>
    … …  
    37254019            <EmailAddress>mailto:macw@cmu.edu</EmailAddress>
    37264020        </ContactPerson>
    3727   </md:EntityDescriptor>
     4021    </md:EntityDescriptor>
    37284022
    37294023</EntitiesDescriptor>
Note: See TracChangeset for help on using the changeset viewer.