<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2021-07-27T05:34:06.618Z" entityID="https://idp.kav.cas.cz/idp/shibboleth">

<Extensions xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
            <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
        </eduidmd:RepublishRequest>
    </Extensions>


    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">kav.cas.cz</shibmd:Scope>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                 <mdui:DisplayName xml:lang="en">Czech Academy of Sciences</mdui:DisplayName>
                 <mdui:DisplayName xml:lang="cs">Akademie věd České republiky</mdui:DisplayName>
                 <mdui:Description xml:lang="en">Identity Provider for CAS employees</mdui:Description>
                 <mdui:Description xml:lang="cs">Identity Provider pro zaměstnance AV ČR</mdui:Description>
                 <mdui:InformationURL xml:lang="en">http://www.kav.cas.cz/</mdui:InformationURL>
                 <mdui:InformationURL xml:lang="cs">http://www.kav.cas.cz/</mdui:InformationURL>
                 <mdui:Logo height="44" width="61">https://gedeon.cas.cz/loga/logo-av-44.png</mdui:Logo>
                 <mdui:Logo height="1063" width="1476">https://gedeon.cas.cz/loga/logo-av-1063.png</mdui:Logo>
           </mdui:UIInfo>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.kav.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
<!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.kav.cas.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.kav.cas.cz/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.kav.cas.cz/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.kav.cas.cz:8443/idp/profile/SAML2/SOAP/SLO"/>
--> 

         <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.kav.cas.cz/idp/profile/SAML2/Redirect/SSO"/>


        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.kav.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.kav.cas.cz/idp/profile/SAML2/POST/SSO"/>

    </IDPSSODescriptor>

<Organization>
      <OrganizationName xml:lang="en">Czech Academy of Sciences</OrganizationName>
      <OrganizationName xml:lang="cs">Akademie věd České republiky</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Czech Academy of Sciences</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="cs">Akademie věd České republiky</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">http://www.kav.cas.cz/</OrganizationURL>
      <OrganizationURL xml:lang="cs">http://www.kav.cas.cz/</OrganizationURL>
    </Organization>

    <ContactPerson contactType="technical">
      <GivenName>Petr</GivenName>
      <SurName>Vaníček</SurName>
      <EmailAddress>mailto:vanicekp@utia.cas.cz</EmailAddress>
    </ContactPerson>

</EntityDescriptor>
