<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.ssc.cas.cz/idp/shibboleth">

    <Extensions xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
            <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
        </eduidmd:RepublishRequest>
    </Extensions>


    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">ssc.cas.cz</shibmd:Scope>
            <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                 <mdui:DisplayName xml:lang="en">Centre of Administration and Operations of AS CR</mdui:DisplayName>
                 <mdui:DisplayName xml:lang="cs">Středisko společných činností AV ČR</mdui:DisplayName>
                 <mdui:Description xml:lang="en">Identity Provider SSC AV CR employees.</mdui:Description>
                 <mdui:Description xml:lang="cs">Identity Provider pro zaměstnance SSČ AV ČR</mdui:Description>
                 <mdui:InformationURL xml:lang="en">http://www.ssc.cas.cz/</mdui:InformationURL>
                 <mdui:InformationURL xml:lang="cs">http://www.ssc.cas.cz/</mdui:InformationURL>
                 <mdui:Logo height="44" width="74">https://gedeon.cas.cz/loga/logo-ssc-44.png</mdui:Logo>
                 <mdui:Logo height="638" width="1080">https://gedeon.cas.cz/loga/logo-ssc-638.png</mdui:Logo>
           </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUXPYLmocUcTH+oKw7G2+QXKvjEEQwDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOaWRwLnNzYy5jYXMuY3owHhcNMTYxMDI0MDgyMTE5WhcN
MzYxMDI0MDgyMTE5WjAZMRcwFQYDVQQDDA5pZHAuc3NjLmNhcy5jejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAIxN9gtDpQWeqhbniCFVz2fsc8HvHjnf
Xa6Qx1h5XbgAIQ+EIjaD5rKsOe1ZtwTaeBD2BDnwMFD2hj+Q6Ujh7nxD6rn+Q2Ot
oLfYVbZSbv+8fvOl/mb4EMBCEguJMeUz5RmX04j3QpiriLNcjnWqXUS9WCYdRLjk
rnamOQygpN27TIPnoUHvCsoRn1wMODKKItdjLXiHDqEQqJ7K16DzS74GYRwktg85
P/kUJxB9Ff6Vs0RUXh8w37QPFgSdkItEWQQHMaaMGgpmufqLghTjA6zTVRJtX1Gs
dPW8zwdChhnOQan1MIa49UWXb76jQzoGNHfkAs77bdiOFViFiwqh+eMCAwEAAaNj
MGEwHQYDVR0OBBYEFPazSkIhwwoRQhMevpLNdKopcZALMEAGA1UdEQQ5MDeCDmlk
cC5zc2MuY2FzLmN6hiVodHRwczovL2lkcC5zc2MuY2FzLmN6L2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQAO4yaE/gCOhn9GOQ/3lWwXAnATn2sONKHe
cBLampWCuGUrvTqmrtHINJ3cEGi0Oaefw2M+t7LyxOt4IcEIf30TBOCDCZ/H0byI
BcfVrpSUHGMlU7Ar1TMG/vYsuOISZZvvJMBJDmKzMhrhT4SoE7W6Zt/pAJUXWkF9
Bp15VXtn80L4TqGrXWWjNesyd16UNYdUmL6kSDu2SHtvXHCqRBknVqVzu/ad84h+
WlvR75sMM4Z6s19foKRAvICkbgUQIZash4z8iKabi+9a4yY+WQmzS2LO16wmUyD+
PekHDlCio2wnMsWiQbs8R8TPVp841I/WkoZQ39GaNQAYT6qmpusg
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUO+a4F1CQBqxJA1JElzFTYRCgOIswDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOaWRwLnNzYy5jYXMuY3owHhcNMTYxMDI0MDgyMTIwWhcN
MzYxMDI0MDgyMTIwWjAZMRcwFQYDVQQDDA5pZHAuc3NjLmNhcy5jejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJVgNZCivPcYuhqIHlM63jO4SezeeKwo
gJz8yWzcrsVzc/oJJnX3OXEjNue0DZWfnR8Q0MCtzP7viN4N5YHFujesLBP5tRZK
hb1QF+f7obvGtnocw1eqncWesCVYHINSTZoZLLbf+5ckdxVOXPL/GrVLP1uxYKRI
XgrjjcYuW8NqCEP/INgiwZW6uW5J9Y9sKTr6TD5NO12EgDuFO1hl0xOpIFWdNY6n
A2gQlWMwoY3YxTgjzb3h5O+BFhWrl/OzQOCtVrAjIlAubxYEssApfQ90YgTLOh6/
DPqDF2H8xpLpk8//1HDCBxDSnp2RRXnYrcIAGg8A/mNGiK5gOSlXMJ0CAwEAAaNj
MGEwHQYDVR0OBBYEFH2NPdHPXXO2zeB2IXMga733h1L7MEAGA1UdEQQ5MDeCDmlk
cC5zc2MuY2FzLmN6hiVodHRwczovL2lkcC5zc2MuY2FzLmN6L2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQBIp24cXH21EsJPUfa9EbYer83l1BS5bgG3
/7DIjJZg356RukerjOD9TYSyxYst7C/pmMPfd3v9Tbnpj6oNRsg8eRmT3FvbY4pT
1TK6h4moo/KruogrNwrK4PIPEFY8h5ynIxVz2fHNB4eitueFiP3o09u6bPnSgGyB
54KvQjxwEozm+gZ6nJGzgNXo+o4xkY9BILUAZSm6J7Br118pWU3AFNLGZ0Tqywju
kMVIyYOLWdkp5fvcrUJthN6Mga2hhyXQVtKF5rM61gAlobofFjDaiPydIG4Nkdku
aOsLsMa0+JqHIhyWCwtmBdrNAEEzxINQ4e4LaiIoCOEYgEE4Pvvj
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ssc.cas.cz:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ssc.cas.cz/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ssc.cas.cz/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ssc.cas.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ssc.cas.cz:8443/idp/profile/SAML2/SOAP/SLO"/>
        -->

        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
	<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ssc.cas.cz/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.ssc.cas.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ssc.cas.cz/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>

    <Organization>
      <OrganizationName xml:lang="en">Centre of Administration and Operations of ASCR</OrganizationName>
      <OrganizationName xml:lang="cs">Středisko společných činností AV ČR</OrganizationName>
      <OrganizationDisplayName xml:lang="en">Centre of Administration and Operations of ASCR, v. v. i.</OrganizationDisplayName>
      <OrganizationDisplayName xml:lang="cs">Středisko společných činností AV ČR</OrganizationDisplayName>
      <OrganizationURL xml:lang="en">http://www.ssc.cas.cz/</OrganizationURL>
      <OrganizationURL xml:lang="cs">http://www.ssc.cas.cz/</OrganizationURL>
    </Organization>

    <ContactPerson contactType="technical">
      <GivenName>Petr</GivenName>
      <SurName>Vaníček</SurName>
      <EmailAddress>mailto:vanicekp@utia.cas.cz</EmailAddress>
    </ContactPerson>


</EntityDescriptor>
