<?xml version="1.0" encoding="UTF-8" ?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="idI77cl-9siRg2ozLItaJBe3-4EBE" entityID="https://login.uaccess.leidenuniv.nl/nidp/saml2/metadata"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#idI77cl-9siRg2ozLItaJBe3-4EBE">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>yDKEUkaV51XAaUtJBK3x17KOC/SJia5f/mIeYs+c1/A=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
YRmls1/r4q101nGAQTSAO/Ldtm6fsagwAKoiJ1oPD38Iqx36pXjn05D/SC/ILqg7zAup89r4jQiA
6Qe9PwlbUaOLhL2VcXqs2dlOOZB2RtyIVi9uYoHnYOZIb0JpFwPr3b9nhh6mIa6+cZCsRj/Fb3pr
HDg/0q1jx3UXNYhwwwSWKbqy5WjMLxSvhxIFP/Rwy1BXn+s/Grb+NF2qf5zEZ4pEpFQgoZa6FPOI
KsMnpqbDp2GTdMhCCfhXgFiUKcfTp2vhKEEjzoPpLN2n24oaBuO89zaeBKLY3AZUHLKGYM4IGjpW
0++urfupHkG4hLZGz9AVFxbcnJEp7YV1WJm96Q==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<md:AttributeAuthorityDescriptor ID="id4qbY6Q3oO6ER0DegRs3KSDVovTE" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>
MIIFJTCCBA2gAwIBAgIkAhwR/6b9sEOXRKYgjUOssDatea7f+zxVnTYqaOcvAgIZCaUcMA0GCSqG
SIb3DQEBCwUAMDExGjAYBgNVBAsTEU9yZ2FuaXphdGlvbmFsIENBMRMwEQYDVQQKFApwaW1hMV90
cmVlMB4XDTE3MDMxMzA5NDQ1NloXDTI3MDMxMzA5NDQ1NlowQDEVMBMGA1UEAxMMdGVzdC1zaWdu
aW5nMRYwFAYDVQQLEw1hY2Nlc3NNYW5hZ2VyMQ8wDQYDVQQKEwZub3ZlbGwwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCuDdZGIHMDpaD6dY75QBOngIe+TKDZd10ZOXn58Mo9Uy3C2Hel
oCz1ExjCStHhUdQgfrDucx8snDl3MFuQqRT5/pyEKnzivAJ2AeaRMTlOm1UIdckDr9rrLZCFMxPh
NPy62tcox9H7qxW9M56oa/77sQUceF3fJPrYerqmdU/D/c4ZvVQ+DX80FaoV6bO7QG4WKe5G5Tf2
Tvqh4z8gPHfDMB2ntRqy+7f3LiaMk8pCO8F4LNx0PnW76pO46wnUxqHzIep5R/PPw+UCfRqSalXI
+0BNc2pYkG9gvUR3Z7RIFIbEvphamAYkb6eVlsDwOCpvJ0+sdvjZAbw5u0oJ5Jb7AgMBAAGjggIU
MIICEDAdBgNVHQ4EFgQU1Wix5q8OVdSPLDauOx3U8foN8h4wHwYDVR0jBBgwFoAUobh0eA7JHw6s
HHzhlWDF+skZhGUwggHMBgtghkgBhvg3AQkEAQSCAbswggG3BAIBAAEB/xMdTm92ZWxsIFNlY3Vy
aXR5IEF0dHJpYnV0ZSh0bSkWQ2h0dHA6Ly9kZXZlbG9wZXIubm92ZWxsLmNvbS9yZXBvc2l0b3J5
L2F0dHJpYnV0ZXMvY2VydGF0dHJzX3YxMC5odG0wggFIoBoBAQAwCDAGAgEBAgFGMAgwBgIBAQIB
CgIBaaEaAQEAMAgwBgIBAQIBADAIMAYCAQECAQACAQCiBgIBFwEB/6OCAQSgWAIBAgICAP8CAQAD
DQCAAAAAAAAAAAAAAAADCQCAAAAAAAAAADAYMBACAQACCH//////////AQEAAgQG8N9IMBgwEAIB
AAIIf/////////8BAQACBAbw30ihWAIBAgICAP8CAQADDQBAAAAAAAAAAAAAAAADCQBAAAAAAAAA
ADAYMBACAQACCH//////////AQEAAgQR/6b9MBgwEAIBAAIIf/////////8BAQACBBH/pv2iTjBM
AgECAgEAAgIA/wMNAIAAAAAAAAAAAAAAAAMJAIAAAAAAAAAAMBIwEAIBAAIIf/////////8BAQAw
EjAQAgEAAgh//////////wEBADANBgkqhkiG9w0BAQsFAAOCAQEAbnz3idQ7uZGoR+43RXmfrUqH
iw9QqAZmIqHNeczL4nBkJDNvE94c4/nBYFcW75QW3fuLLXNetemUwVTbwj+oSOoFtUZRBMZroVod
K0S5rliHir31bVYlX9DOX9Sbk8c6pk0YorgeJsRB56Yco2R9q0MIJ3kRQcimse13WTxJmPUWalcK
IB5wZA2u8vOjYdcsYvQIcJ1YR2EwBOnAkWE9oMMaMxLL2lBIVrKcwelTXxEmJAuhJOP28XsXUoqK
iZDaXJvO5htAm69ugbUJfWh4DJllTEsYERDknrw3IvVEwBhrXt1b2pU79awNMnIQPeY5earUzvjo
hW2oWW6RxByDsA==
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
</md:KeyDescriptor>
<md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/soap"/>
<md:AssertionIDRequestService Binding="urn:oasis:names:tc:SAML:2.0:bindings:URI" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/assertion"/>
<md:AssertionIDRequestService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/soap"/>
</md:AttributeAuthorityDescriptor>
<md:IDPSSODescriptor ID="iduVnGpNvV1iOCyxemVLHVeh1eUGI" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/soap" index="0" isDefault="true"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/slo" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/slo_return"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/slo" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/slo_return"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/soap"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/rni" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/rni_return"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/rni" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/rni_return"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/soap"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/sso"/>
<md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/sso"/>
<md:NameIDMappingService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/soap"/>
</md:IDPSSODescriptor>
<md:SPSSODescriptor AuthnRequestsSigned="true" ID="id6AjTuw0NeSZxfk2l6KNg5dtaqs0" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:KeyDescriptor use="signing">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
</md:KeyDescriptor>
<md:KeyDescriptor use="encryption">
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spsoap" index="0" isDefault="true"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spslo" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/spslo_return"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spslo" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/spslo_return"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spsoap"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/sprni" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/sprni_return"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/sprni" ResponseLocation="https://login.uaccess.leidenuniv.nl/nidp/saml2/sprni_return"/>
<md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spsoap"/>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spassertion_consumer" index="0" isDefault="true"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spassertion_consumer" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://login.uaccess.leidenuniv.nl/nidp/saml2/spassertion_consumer" index="2"/>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Universiteit Leiden</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">Universiteit Leiden Identity Server</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://universiteitleiden.nl</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="technical">
<md:Company>Universiteit Leiden</md:Company>
<md:GivenName>ULCN</md:GivenName>
<md:SurName>Middleware</md:SurName>
<md:EmailAddress>directoryservices@issc.leidenuniv.nl</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>