<EntityDescriptor entityID="urn:example:idp" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="signing">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data>
          <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dev.idp.tbhapi.com/saml/slo"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev.idp.tbhapi.com/saml/slo"/>
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://dev.idp.tbhapi.com/saml/sso"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://dev.idp.tbhapi.com/saml/sso"/>
    <Attribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Student ID" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="E-Mail Address" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="FirstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="First Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="LastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Last Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="activeTerm" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Active Term" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
  </IDPSSODescriptor>
</EntityDescriptor>