<?xml version="1.0" encoding="UTF-8"?>


<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="https://idp.isprambiente.it/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">isprambiente.it</shibmd:Scope>
<!--
    Fill in the details for your IdP here 
	    -->
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Italian Institute for Environmental Protection and Research</mdui:DisplayName>
		<mdui:DisplayName xml:lang="it">Istituto Superiore per la Protezione e la Ricerca Ambientale</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity provider for Italian Institute for Environmental Protection and Research users</mdui:Description>
		<mdui:Description xml:lang="it">Identity provider per gli utenti dell'Istituto Superiore per la Protezione e la Ricerca Ambientale</mdui:Description>
		<mdui:Logo height="80" width="60">https://idp.isprambiente.it/logo.png</mdui:Logo>
		<mdui:Logo width="16" height="16">https://idp.isprambiente.it/logo-s.png</mdui:Logo>
	        <mdui:InformationURL xml:lang="en">https://idp.isprambiente.it/en/index.html</mdui:InformationURL> 
	        <mdui:InformationURL xml:lang="it">https://idp.isprambiente.it/it/index.html</mdui:InformationURL>
	        <mdui:PrivacyStatementURL xml:lang="en">https://www.isprambiente.gov.it/en/privacy</mdui:PrivacyStatementURL>  
	        <mdui:PrivacyStatementURL xml:lang="it">https://www.isprambiente.gov.it/it/privacy</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDNzCCAh+gAwIBAgIUBZ5sGJn2JR86i35lY7djJIk1Gd4wDQYJKoZIhvcNAQEL
BQAwHjEcMBoGA1UEAwwTaWRwLmlzcHJhbWJpZW50ZS5pdDAeFw0xNzEyMTkwOTQ4
MDNaFw0zNzEyMTkwOTQ4MDNaMB4xHDAaBgNVBAMME2lkcC5pc3ByYW1iaWVudGUu
aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/xzD7AuGErvjowOD
2eT4aIHX5jg6K3dufWBj7+CKePMxNigzUiOqHyPcj14yeFVwrkhf+hlb45p0Bo7y
c3ehbmxEBUtdr/RX1N/W2T7/0SlD8tmBY2Upg+s1/r4RXk0TyAhMcL4qAmNQMSA+
/giuNcFpzYjW9Kdd9/8cKq7MOIRyXtNva5osxftVzRDk+gPwH3IFWmQ61k+bTB6q
bAwjO4l9GkKI2h4buz7HWrp0+LsP0EMoMk+1x9M7+91qHjlNtUvdXUSc08WlTDdi
THPdUzWexknPs6Z55S/4MOlLvKqvM9ib/kSrTd11LIB8A+X/MkwfZH5VdiWzsm+v
KrVLAgMBAAGjbTBrMB0GA1UdDgQWBBRP/+D+coGQFB2fiuTe3Wy6PqFm0DBKBgNV
HREEQzBBghNpZHAuaXNwcmFtYmllbnRlLml0hipodHRwczovL2lkcC5pc3ByYW1i
aWVudGUuaXQvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQADggEBAAbR9PwD
8i1QgJxycpIVh+IUNuA5+EOrzvXdwYhupxrvXMrRimqRD7kWFfyncJ0PnnLT8ir6
+jjoEFoQejcnsZlD/lA44/ElYiK/7100QgIWaWKnQpVMjShWH911XeNkQzMSrjX+
EnvVzcXrYZjElUsbjWS1x47jyxrxDcCjjVlx/xC2//jeaLAEUpMtqBPThAKoOras
tBNMWJkwo41kCaVHDE3Synbro8dmA5dd5+6lKIMHUhgaTWITgjWrcExwZdWXO4Ut
r+Hx9iSx+YWjyCwK6+sWAdmmpviaTO+LKq/uu65HiQ+Zm9dAsP5GBS2qUJXFS7R2
QzjgyYvqC0Lh6oY=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.isprambiente.it/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"/>

        
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.isprambiente.it/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.isprambiente.it/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.isprambiente.it/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>	
	<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.isprambiente.it/idp/profile/SAML2/SOAP/SLO"/>
        

        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
	<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.isprambiente.it/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.isprambiente.it/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.isprambiente.it/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>


    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">isprambiente.it</shibmd:Scope>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDNzCCAh+gAwIBAgIUBZ5sGJn2JR86i35lY7djJIk1Gd4wDQYJKoZIhvcNAQEL
BQAwHjEcMBoGA1UEAwwTaWRwLmlzcHJhbWJpZW50ZS5pdDAeFw0xNzEyMTkwOTQ4
MDNaFw0zNzEyMTkwOTQ4MDNaMB4xHDAaBgNVBAMME2lkcC5pc3ByYW1iaWVudGUu
aXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/xzD7AuGErvjowOD
2eT4aIHX5jg6K3dufWBj7+CKePMxNigzUiOqHyPcj14yeFVwrkhf+hlb45p0Bo7y
c3ehbmxEBUtdr/RX1N/W2T7/0SlD8tmBY2Upg+s1/r4RXk0TyAhMcL4qAmNQMSA+
/giuNcFpzYjW9Kdd9/8cKq7MOIRyXtNva5osxftVzRDk+gPwH3IFWmQ61k+bTB6q
bAwjO4l9GkKI2h4buz7HWrp0+LsP0EMoMk+1x9M7+91qHjlNtUvdXUSc08WlTDdi
THPdUzWexknPs6Z55S/4MOlLvKqvM9ib/kSrTd11LIB8A+X/MkwfZH5VdiWzsm+v
KrVLAgMBAAGjbTBrMB0GA1UdDgQWBBRP/+D+coGQFB2fiuTe3Wy6PqFm0DBKBgNV
HREEQzBBghNpZHAuaXNwcmFtYmllbnRlLml0hipodHRwczovL2lkcC5pc3ByYW1i
aWVudGUuaXQvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQADggEBAAbR9PwD
8i1QgJxycpIVh+IUNuA5+EOrzvXdwYhupxrvXMrRimqRD7kWFfyncJ0PnnLT8ir6
+jjoEFoQejcnsZlD/lA44/ElYiK/7100QgIWaWKnQpVMjShWH911XeNkQzMSrjX+
EnvVzcXrYZjElUsbjWS1x47jyxrxDcCjjVlx/xC2//jeaLAEUpMtqBPThAKoOras
tBNMWJkwo41kCaVHDE3Synbro8dmA5dd5+6lKIMHUhgaTWITgjWrcExwZdWXO4Ut
r+Hx9iSx+YWjyCwK6+sWAdmmpviaTO+LKq/uu65HiQ+Zm9dAsP5GBS2qUJXFS7R2
QzjgyYvqC0Lh6oY=
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.isprambiente.it/idp/profile/SAML2/SOAP/AttributeQuery"/>

    </AttributeAuthorityDescriptor>
    <Organization>
	    <OrganizationName xml:lang="it">Istituto Superiore per la Protezione e la Ricerca Ambientale</OrganizationName>
	    <OrganizationName xml:lang="en">Italian Institute for Environmental Protection and Research</OrganizationName>
	    <OrganizationDisplayName xml:lang="it">ISPRA</OrganizationDisplayName>
	    <OrganizationDisplayName xml:lang="en">ISPRA</OrganizationDisplayName>
	    <OrganizationURL xml:lang="it">https://www.isprambiente.gov.it/it</OrganizationURL>
	    <OrganizationURL xml:lang="en">https://www.isprambiente.gov.it/en</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
	    <EmailAddress>mailto:idp-ispra@isprambiente.it</EmailAddress>
    </ContactPerson>
</EntityDescriptor>
