<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor
    entityID="https://idp.it-hiroshima.ac.jp/idp/shibboleth"
    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

    <md:Extensions>
      <shibmd:Scope regexp="false">it-hiroshima.ac.jp</shibmd:Scope>
      <mdui:UIInfo>
        <mdui:DisplayName xml:lang="en">Hiroshima Institute of Technology IdP</mdui:DisplayName>
        <mdui:Description xml:lang="en">Identity Provider for Hiroshima Institute of Technology</mdui:Description>
        <mdui:Logo xml:lang="en" width="80" height="80">https://idp.it-hiroshima.ac.jp/path/to/logo.png</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>

    <!-- Signing certificate (v5, NII に提出済みの idp-signing.crt と一致) -->
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>

    <!-- Encryption certificate（v5） -->
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>

    <!-- SSO / SLO URLs（v5 正式 URL） -->
    <md:SingleLogoutService
        Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
        Location="https://idp.it-hiroshima.ac.jp/idp/profile/SAML2/SOAP/ArtifactResolution" />

    <md:SingleSignOnService
        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
        Location="https://idp.it-hiroshima.ac.jp/idp/profile/SAML2/POST-SimpleSign/SSO" />

    <md:SingleSignOnService
        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
        Location="https://idp.it-hiroshima.ac.jp/idp/profile/SAML2/Redirect/SSO" />

    <md:SingleSignOnService
        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
        Location="https://idp.it-hiroshima.ac.jp/idp/profile/SAML2/POST/SSO" />

  </md:IDPSSODescriptor>
</md:EntityDescriptor>