<?xml version="1.0" encoding="UTF-8"?>

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.vsb.cz/idp/shibboleth">

<Extensions>
    <!-- eduGAIN -->
    <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
      <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
    </eduidmd:RepublishRequest>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
        <!-- Research and Scholarship -->
        <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
        <!-- Code of Conduct -->
        <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
      </saml:Attribute>
      <!-- Sirtfi -->
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification">
        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </Extensions>

  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <Extensions>
      <shibmd:Scope regexp="false">vsb.cz</shibmd:Scope>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">VSB – Technical University of Ostrava</mdui:DisplayName>
        <mdui:DisplayName xml:lang="cs">VŠB – Technická univerzita Ostrava</mdui:DisplayName>
        <mdui:Description xml:lang="en">VSB-TUO Identity Provider</mdui:Description>
        <mdui:Description xml:lang="cs">Poskytovatel identity pro VŠB-TUO</mdui:Description>
        <mdui:InformationURL xml:lang="en">http://www.vsb.cz/?lang=en</mdui:InformationURL>
        <mdui:InformationURL xml:lang="cs">http://www.vsb.cz/</mdui:InformationURL>
        <mdui:Logo height="40" width="99">https://idp.vsb.cz/idp/images/vsb-logo-40.svg</mdui:Logo>
      </mdui:UIInfo>
    </Extensions>


        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDFDCCAfygAwIBAgIVAMu0ePB4xgh9EIK+qEugr/6czSz9MA0GCSqGSIb3DQEB
CwUAMBUxEzARBgNVBAMMCmlkcC52c2IuY3owHhcNMTYwMjEyMTAxOTE5WhcNMzYw
MjEyMTAxOTE5WjAVMRMwEQYDVQQDDAppZHAudnNiLmN6MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAp9ddBjiE6E+aXfEUOc6oKurTK1dsoqZ+ACLUQgVF
oGaBc3yToQMgnD6tQ4xGS4zgUPn02fe/0hh9Tz2hD+aNHvf7j24I1RUYBd5p/geG
wMvReGp9H5lDmSrABic6kLB121GoMMIBqZO+2VadiSIMziItI2V6KuGs90t/UDOO
ncnjjPmzpJIdACk1JOWDGZtE4AIQhz9q5tAiev6ETJG77WAwLbH1eAv2DsYCSVdk
1NXbgaMV0SNBhgD9oqga1SQNyK+R/Q2boc22pXQMdbdgB95zrMGoFuSBK/yMXIGH
fNLYRWemKT8N6fF+y6X3glL5VHwe9e4vxdUOeprUurqn3QIDAQABo1swWTAdBgNV
HQ4EFgQUrx36LTaKgVLjioqCfZdQOA5wLL4wOAYDVR0RBDEwL4IKaWRwLnZzYi5j
eoYhaHR0cHM6Ly9pZHAudnNiLmN6L2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB
CwUAA4IBAQA7OHbMVdAJTFfeM2yUXG5Sb6LMrZzMBgJvE2kM6X2+ONggB8c5relu
TD6+BoA4q/ZiTYabXZUVtglz/ksMWPwFcW+EdZnLQeCAS9DSJRjR1/ZOFU73awfE
UbDUopTknDLZ06+LW045Qgg7Q7LNqVs5SUDYy/EAmEYNgHJVL4T6Lrk/f2ToLpXb
e+84As5I60v+3ywJlBKOZsjZ17Nw+y6fcbpeEIuWXd/YvuyT/qN6fzNqLkjU+F1I
wBFnh3xvCTPaFTFgT++wDCqDvtq9GMD1w6SEiZiq7xSh1SVoJYxIu6Zq5C3YyOVS
8aQKeBPJ3f6ZH0CSSD1nGI+/joVQegLg
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.vsb.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.vsb.cz/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.vsb.cz/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.vsb.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.vsb.cz:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.vsb.cz/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.vsb.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.vsb.cz/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>

  <Organization>
    <OrganizationName xml:lang="en">VSB – Technical University of Ostrava</OrganizationName>
    <OrganizationName xml:lang="cs">Vysoká škola báňská – Technická univerzita Ostrava</OrganizationName>
    <OrganizationDisplayName xml:lang="en">VSB – Technical University of Ostrava</OrganizationDisplayName>
    <OrganizationDisplayName xml:lang="cs">VŠB – Technická univerzita Ostrava</OrganizationDisplayName>
    <OrganizationURL xml:lang="en">http://www.vsb.cz/?lang=en</OrganizationURL>
    <OrganizationURL xml:lang="cs">http://www.vsb.cz/</OrganizationURL>
  </Organization>

  <ContactPerson contactType="technical">
    <GivenName>Stanislav</GivenName>
    <SurName>Vaštyl</SurName>
    <EmailAddress>mailto:stanislav.vastyl@vsb.cz</EmailAddress>
  </ContactPerson>
  <ContactPerson contactType="technical">
    <GivenName>Jiří</GivenName>
    <SurName>Mrkva</SurName>
    <EmailAddress>mailto:jiri.mrkva@vsb.cz</EmailAddress>
  </ContactPerson>
  <ContactPerson contactType="technical">
    <GivenName>Martin</GivenName>
    <SurName>Lasoň</SurName>
    <EmailAddress>mailto:martin.lason@vsb.cz</EmailAddress>
  </ContactPerson>
  <ContactPerson contactType="other" xmlns:remd="http://refeds.org/metadata" remd:contactType="http://refeds.org/metadata/contactType/security">
    <GivenName>VSB SECURE TEAM</GivenName>
    <EmailAddress>mailto:abuse@vsb.cz</EmailAddress>
  </ContactPerson>

</EntityDescriptor>
