Skip to content
Snippets Groups Projects
nefed.xml 2.43 MiB
Newer Older
<EntityDescriptor
        entityID="https://nebraska.delinea.app/identity-federation/sp/4f382e65-436d-48a3-923f-591680a531da"
        xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
                <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>unNUID</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Delinea</mdui:DisplayName>
                <mdui:Description xml:lang="en">Delinea</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://delinea.com/about</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://delinea.com/privacy-policy</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="true"
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                Location="https://nebraska.delinea.app/identity-federation/saml/logout-consumer" />
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:entity</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
            <AttributeConsumingService>
                <ServiceName xml:lang="en-US">Delinea Attribute Service</ServiceName>
                <RequestedAttribute isRequired="false" Name="Description" FriendlyName="Description" />
                <RequestedAttribute isRequired="false" Name="DisplayName" FriendlyName="DisplayName" />
                <RequestedAttribute isRequired="false" Name="EmailAddress"
                    FriendlyName="EmailAddress" />
                <RequestedAttribute isRequired="false" Name="Group" FriendlyName="Group" />
                <RequestedAttribute isRequired="false" Name="HomeNumber" FriendlyName="HomeNumber" />
                <RequestedAttribute isRequired="false" Name="LoginName" FriendlyName="LoginName" />
                <RequestedAttribute isRequired="false" Name="MobileNumber"
                    FriendlyName="MobileNumber" />
                <RequestedAttribute isRequired="false" Name="Name" FriendlyName="Name" />
                <RequestedAttribute isRequired="false" Name="OfficeNumber"
                    FriendlyName="OfficeNumber" />
                <RequestedAttribute isRequired="false" Name="Photo" FriendlyName="Photo"><!--Warning:
                    Photos should only be sent when using the
                    urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST binding because of URL length
                    restrictions.-->
                </RequestedAttribute>
                <RequestedAttribute isRequired="true" Name="UserPrincipalName"
                    FriendlyName="UserPrincipalName" />
            </AttributeConsumingService>
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://nebraska.delinea.app/identity-federation/saml/assertion-consumer"
                index="0" isDefault="true" />
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                Location="https://nebraska.delinea.app/identity-federation/saml/assertion-consumer"
                index="1" isDefault="false" />
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en-US">Delinea</OrganizationName>
            <OrganizationDisplayName xml:lang="en-US">Delinea</OrganizationDisplayName>
            <OrganizationURL xml:lang="en-US">https://delinea.com</OrganizationURL>
        </Organization>
    </EntityDescriptor>
    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
        xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
        xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
        entityID="https://sso.glean.co/auth/realms/glean" ID="ID_09582261-f4aa-4105-a7ce-b6caf0187646">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Glean</mdui:DisplayName>
                <mdui:Description xml:lang="en">Glean</mdui:Description>
                <mdui:InformationURL xml:lang="en">
                    https://glean.co</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">
                    https://glean.co/privacy-notice</mdui:PrivacyStatementURL>
                <mdui:Logo height="85" width="141" xml:lang="en">
                    https://d33v4339jhl8k0.cloudfront.net/docs/assets/5d0b46150428637fd7c53265/images/653108d3234cd75251327aab/Unknown-3.jpeg</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
            AuthnRequestsSigned="false" WantAssertionsSigned="false">
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://sso.glean.co/auth/realms/glean/broker/saml.shibboleth.nebraska-lincoln/endpoint"></SingleLogoutService>
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://sso.glean.co/auth/realms/glean/broker/saml.shibboleth.nebraska-lincoln/endpoint"
                isDefault="true" index="1"></AssertionConsumerService>
            <AttributeConsumingService isDefault="true" index="1">
                <ServiceName xml:lang=""></ServiceName>
                <RequestedAttribute FriendlyName="displayName"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"></RequestedAttribute>
            </AttributeConsumingService>
        </SPSSODescriptor>
    </EntityDescriptor>
    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_0a05f240d403d0bfbca9b8c37133afc6bafeb195" entityID="https://trueyou.nebraska.edu/shibboleth">
        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
          <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
          <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
          <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
          <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
          <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
          <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
          <mdattr:EntityAttributes>
              <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                  <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
              </saml:Attribute>
              <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>unNUID</saml:AttributeValue>
                </saml:Attribute>
          </mdattr:EntityAttributes>
          <mdui:UIInfo>
              <mdui:DisplayName xml:lang="en">TrueYou Self Service</mdui:DisplayName>
              <mdui:Description xml:lang="en">TrueYou Self Service</mdui:Description>
              <mdui:InformationURL xml:lang="en">https://trueyou.nebraska.edu</mdui:InformationURL>
              <mdui:PrivacyStatementURL xml:lang="en">https://nebraska.edu/privacy-statement</mdui:PrivacyStatementURL>
          </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
          <Extensions>
            <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://trueyou.nebraska.edu/Shibboleth.sso/Login"/>
            <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://trueyou.nebraska.edu/Shibboleth.sso/Login" index="1"/>
          </Extensions>
          <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
              <ds:KeyName>its-webprd1.nead.nebraska.edu</ds:KeyName>
              <ds:X509Data>
                <ds:X509SubjectName>CN=its-webprd1.nead.nebraska.edu</ds:X509SubjectName>
                <ds:X509Certificate>MIIEKTCCApGgAwIBAgIUb6ucmZ7uiV5+58l+TZOTmTq2gFswDQYJKoZIhvcNAQEL
      BQAwKDEmMCQGA1UEAxMdaXRzLXdlYnByZDEubmVhZC5uZWJyYXNrYS5lZHUwHhcN
      MjQwMzI1MTQ1NjM4WhcNMzQwMzIzMTQ1NjM4WjAoMSYwJAYDVQQDEx1pdHMtd2Vi
      cHJkMS5uZWFkLm5lYnJhc2thLmVkdTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCC
      AYoCggGBAKbbxBKUZMshapRZ4KNNf/jhSR548IuZUD2Q1CReTUVNuh0ZZ4on4HlZ
      3U56qTf25HnIftNPEff/ZIhfmLt+aiHm88pSoahMwMyVqfvXPluiltLouu7AmzBU
      htCtDf8ofQzm/TTYcebaEzEccZxCiBg28Q1cj7PBiPhPDrhdeT0z2APWOfIDaTt4
      pbN2Y9SfhQy7mA+e8TLJ7jznxuwRtagunhhXF7wQUM4ZhNLwcRZ2MkYaohjBazj5
      bVXZh+xcOKbX/FdXcYNwdNVIQV1l7MpMozkexC81V7m9huwxoLiuc/l9+9c9h0QW
      VwNoZS6SK6ZAd9fx5Gz4S4UqmJbSUKgRNCGycoFEj+X6/KmMFx80xk4IoFFZO6Zd
      dxBDM8NHAEJ/oq3/nrFw6yKxMUlSjE3tYvpp/cAQqL0OalLpStqfnmr2LBH/Af3y
      yMOTNwsbVyZ9G+xPxKfOXP58c1+/LGdj1lPX6KnobnoJ73jfi2p3n416kDckDpeT
      1CJgxzQy2wIDAQABo0swSTAoBgNVHREEITAfgh1pdHMtd2VicHJkMS5uZWFkLm5l
      YnJhc2thLmVkdTAdBgNVHQ4EFgQU6uuocC8jMlcZnb0pk73/P2utoPkwDQYJKoZI
      hvcNAQELBQADggGBAA5so6ZBtee0q5OlY9Fhxc3v9/ECrYuNJfFAe5ehvRBED931
      7niL4aW4kK9/vLx+gT8/55b2Z9gO0MqaSOcfVuOalBx6yq21mFZR5TNJezo8L33B
      tApwqJkKEsCmOiuq2ni8ymMRaIpwrjt3ZQRla09sszdSmR8YqJRu/8nhGU35zMRq
      6NDTtv5JiQvtF9VzvzY5K5D5vc72QMRQ2gW4YnDIEpo7QldUoOmKFBG26PP6swCZ
      XoTyIr20iE/5X8f/v+RSB9nnyPe+xu892Z1koOlEvzA60BsTR4WltLrfj5xmgMDS
      UdKu/kyxXJrboKFdEWy7dJKLiYlpsFZAeDJFPD2ypZIMjzjA3/ABP1+UysR4Z4k2
      OfaDcqtgY9alyuzE5ehnL49dJeiXh8CHlIJ0t1KY8+cmRLqcrCAafAgG7Apxt3fq
      GX4+HfUBGy4vFx3k8O8ldiAUul7ajh9aBta74GxwRrJ4UMRpG6JlHwMOup3i8B5B
      DmZYOCx6suGwyF93Lw==
      </ds:X509Certificate>
              </ds:X509Data>
            </ds:KeyInfo>
          </KeyDescriptor>
          <KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
              <ds:KeyName>its-webprd1.nead.nebraska.edu</ds:KeyName>
              <ds:X509Data>
                <ds:X509SubjectName>CN=its-webprd1.nead.nebraska.edu</ds:X509SubjectName>
                <ds:X509Certificate>MIIEKTCCApGgAwIBAgIUOZutmxFVgGT6ytykaWf+JLXVjbswDQYJKoZIhvcNAQEL
      BQAwKDEmMCQGA1UEAxMdaXRzLXdlYnByZDEubmVhZC5uZWJyYXNrYS5lZHUwHhcN
      MjQwMzI1MTQ1NjM1WhcNMzQwMzIzMTQ1NjM1WjAoMSYwJAYDVQQDEx1pdHMtd2Vi
      cHJkMS5uZWFkLm5lYnJhc2thLmVkdTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCC
      AYoCggGBALzj6TYPEugikKcRs1qr7YCZvaysZ8wNEHnjKe5O2ZDEF3KpKsGOSBNN
      x9m8/9LX8Cl8uatbnemWsQ8tgwIUnFrDKUQhOnKZPvTDKHiFbiVH6Y/6VzLyzGGB
      XvFervZrLZz3ddmTuyZr99zhdobhnQzxdqlooy4XlV0WF3gvDRITvqnLU7ilcmww
      4gFXJWDn4F1aJD38PHF3FXF3tdRWuW8ig0UaleAYZoCPPD41IXHxy1gjL8ZQ611p
      zC32WcYz+fzMwxe08IiL6waH33oj/Vvu3RA7h9a8c+CnD4mGybPOunCbFEV1Knb4
      GectZLjzCnZMf34eFyos3a4T1AAE7S5wC8m2AafWSpIVBy/xC9BxF4DKgaehBpj4
      G+aoep9839Ui2LFoVxFl4kDtqC8k2H7JU9B6JBUuo16Ob5Zklz0UXb4fTVQe+aRE
      b5EziyFJDsZHDz4RQN+41exMLwv8ypCSY3lc617hqS57LP2U7oGUbpBk28pQXa/B
      w40mKkdcDwIDAQABo0swSTAoBgNVHREEITAfgh1pdHMtd2VicHJkMS5uZWFkLm5l
      YnJhc2thLmVkdTAdBgNVHQ4EFgQUzy07T3RDFXwkxXQ+CY8MGCZJwJYwDQYJKoZI
      hvcNAQELBQADggGBACvuYbqJFgtzQ1JSpZE/io/5a148pGkekI2kFw7cIaUsFNNI
      TSIDOt06L5t3unvPHbURdU3bSyk0eqley3BPIFKJ0J4XLHEm0utU/dMCsmKr0qmc
      0nQgWDivoPpclCmIY7SUmeZUA6bf178RJv3MkU48ak1H8LVmcVDwF+JKID/ZeDhK
      a+c2F0aXL45rpPdpbvFLE5hW2seAvTDJ43yjag1T77mIrTZBbN2FA/3xFFwybKaT
      i83dVklut8qChSPKeq1Q5M4HeoAkcf1bpD5jtQepLMcuz6APw/DfzCa1h6V6YIKT
      jU4ddxiwB/GhqxV34Pj6GXyitaRusYeXYvE/1TN8Ll7AidjcokXRJDXeog4DvNTr
      CNkMQhaEbRUsLkeIdbN1/ZyVZrbVvblgnjfPL6CqhU7g8f3VdGc6rSeYZpTPjn90
      KRVLve1PLBPa6lhm2foaadqd+D+MW2KUfUzvmpYrEJ7L9DBdKGQtenFfySa5Bj6X
      a1TP4Go/xSefHdRb4A==
      </ds:X509Certificate>
              </ds:X509Data>
            </ds:KeyInfo>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
          </KeyDescriptor>
          <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://trueyou.nebraska.edu/Shibboleth.sso/Artifact/SOAP" index="1"/>
          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SLO/Artifact"/>
          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SLO/POST"/>
          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SLO/Redirect"/>
          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SLO/SOAP"/>
          <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SAML2/POST" index="1"/>
          <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
          <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SAML2/Artifact" index="3"/>
          <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://trueyou.nebraska.edu/Shibboleth.sso/SAML2/ECP" index="4"/>
        </SPSSODescriptor>
        <Organization>
          <OrganizationName xml:lang="en-US">
            TrueYou Self Service
          </OrganizationName>
          <OrganizationDisplayName xml:lang="en-US">
            TrueYou Self Service
          </OrganizationDisplayName>
          <OrganizationURL xml:lang="en-US">
              https://trueyou.nebraska.edu
          </OrganizationURL>
        </Organization>
        <ContactPerson contactType="technical">
            <GivenName>
                Eric Zoz
            </GivenName>
            <EmailAddress>
              ezoz@nebraska.edu
            </EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="support">
            <GivenName>
              Eric Zoz
            </GivenName>
            <EmailAddress>
              ezoz@nebraska.edu
            </EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="administrative">
            <GivenName>
                Jason Buzzell
            </GivenName>
            <EmailAddress>
              jbuzzell@nebraska.edu
            </EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="other"
            remd:contactType="http://refeds.org/metadata/contactType/security">
            <GivenName>
                ITS Security
            </GivenName>
            <EmailAddress>
                security@nebraska.edu
            </EmailAddress>
        </ContactPerson>
      </EntityDescriptor>
      <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    entityID="https://us1.teamdynamix.com">
    <Extensions>
        <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
        <mdattr:EntityAttributes>
            <saml:Attribute Name="http://macedir.org/entity-category"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>
                    https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdui:UIInfo>
            <mdui:DisplayName xml:lang="en">Team Dynamix iPaaS</mdui:DisplayName>
            <mdui:Description xml:lang="en">Team Dynamix iPaaS</mdui:Description>
            <mdui:InformationURL xml:lang="en">https://www.teamdynamix.com/careers/our-values/</mdui:InformationURL>
            <mdui:PrivacyStatementURL xml:lang="en">https://www.teamdynamix.com/privacy-policy-terms/</mdui:PrivacyStatementURL>
        </mdui:UIInfo>
    </Extensions>
    <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false"
        protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>
                        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</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://us1.teamdynamix.com/tdapp/SAML/SingleLogoutService?__cust=nebraska" />
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://us1.teamdynamix.com/tdapp/SAML/AssertionConsumerService?__cust=nebraska" />
    </SPSSODescriptor>
    <Organization>
        <OrganizationName xml:lang="en-US">TeamDynamix</OrganizationName>
        <OrganizationDisplayName xml:lang="en-US">TeamDynamix</OrganizationDisplayName>
        <OrganizationURL xml:lang="en-US">https://www.teamdynamix.com</OrganizationURL>
    </Organization>
</EntityDescriptor>
Ryan Rumbaugh's avatar
Ryan Rumbaugh committed
    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://admin-chicago2.bloxcms.com/">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">BLOX CMS attributes</mdui:DisplayName>
                <mdui:Description xml:lang="en">BLOX CMS attributes</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://www.bloxdigital.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://www.bloxdigital.com/about/privacy/townnews-privacy-statement/article_6c5e277c-b368-5fd2-b507-7d1ca6406a27.html</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                                        Location="https://admin-chicago2.bloxcms.com/-/login/saml/return"
                                        index="1" />
            <AttributeConsumingService index="1">
                <ServiceName xml:lang="en">BLOX CMS attributes</ServiceName>
                <ServiceDescription xml:lang="en">Auto-provisioning attributes for BLOX CMS SAML SSO</ServiceDescription>
                <RequestedAttribute Name="https://townnews.com/specs/blox/admin/saml/attr/domaingroup" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="domaingroup" isRequired="false">
                    <saml:AttributeValue xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">example.com:Administrators</saml:AttributeValue>
                    <saml:AttributeValue xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">example.org:Reporters</saml:AttributeValue>
                    <saml:AttributeValue xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">example.org:Classifieds Ads Managers</saml:AttributeValue>
                </RequestedAttribute>
            </AttributeConsumingService>
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en-US">BLOX CMS attributes</OrganizationName>
            <OrganizationDisplayName xml:lang="en-US">BLOX CMS attributes</OrganizationDisplayName>
            <OrganizationURL xml:lang="en-US">https://www.teamdynamix.com</OrganizationURL>
        </Organization>
        <ContactPerson contactType="support">
            <GivenName>Anna Berg</GivenName>
            <EmailAddress>aberg@nebraska.edu</EmailAddress>
        </ContactPerson>
    </EntityDescriptor>
    <EntityDescriptor entityID="https://unomaha.tfaforms.net/saml/metadata">
Rory Larson's avatar
Rory Larson committed
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
	        	<saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
			                	NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> 
		        	<saml:AttributeValue>unNUID</saml:AttributeValue> 
		        </saml:Attribute>
Rory Larson's avatar
Rory Larson committed
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">FormAssembly</mdui:DisplayName>
                <mdui:Description xml:lang="en">Form builder for UNO Salesforce. This is a demo instance.</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://www.formassembly.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://www.formassembly.com/privacy-policy/</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false"
                         WantAssertionsSigned="false"
                         protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <KeyDescriptor use="signing">
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
            MIIEIzCCAwugAwIBAgIJAO2XnCP5otxSMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQGEwJVU
            zEQMA4GA1UECAwHSW5kaWFuYTEUMBIGA1UEBwwLQmxvb21pbmd0b24xETAPBgNVBAoMCFZlZX
            JXZXN0MRkwFwYDVQQLDBBGb3JtQXNzZW1ibHkuY29tMRswGQYDVQQDDBIqLmZvcm1hc3NlbWJ
            seS5jb20xJTAjBgkqhkiG9w0BCQEWFmFkbWluQGZvcm1hc3NlbWJseS5jb20wHhcNMTUwNDI5
            MTYyMzIwWhcNMjUwNDI4MTYyMzIwWjCBpzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0luZGlhb
            mExFDASBgNVBAcMC0Jsb29taW5ndG9uMREwDwYDVQQKDAhWZWVyV2VzdDEZMBcGA1UECwwQRm
            9ybUFzc2VtYmx5LmNvbTEbMBkGA1UEAwwSKi5mb3JtYXNzZW1ibHkuY29tMSUwIwYJKoZIhvc
            NAQkBFhZhZG1pbkBmb3JtYXNzZW1ibHkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
            CgKCAQEA3XTuY4IULmLZQwGy1RFDIoWtNkQ4I7wZxX9Sg7nTgCWTbvRy2XBC8YqX8AA8BK67A
            LAOL0QiMyhkQdkjH7oJl5CGQQG9i2VNNaNfbDWw93edWvPDUSBXBpTCMzuf13C539aFj1NmbV
            YzVKdRuM6Awr1IVXQsiiifCir7Ajfq2u8nk1ZChacZfUYOJemREYgjQEn/xldGh33NaeFQJl4
            gZTIZ45rN3dmNEJK2mXa0xXD7x819IbJ0PNCljl9miLQncxxF+kw2jZH+luYH6tfzO2NEK4kx
            zndsv72FFBwhmaamK31RmmL/SO7sfgnhuMXll+YGEJLWp6JM2eSgOhBXWwIDAQABo1AwTjAdB
            gNVHQ4EFgQUuSgAE6AdASq/NgHmNKr3mCTePCEwHwYDVR0jBBgwFoAUuSgAE6AdASq/NgHmNK
            r3mCTePCEwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAYkVERZLPohQSq3fd2LE
            O3VozjEE2eYxrbDaq9LXIS0ufLUJGLgdL1Z36KtGgztBQRps/VNryilIrJ3rySsos+PAgJi2z
            7Od8QfWRXRETCg1k6xdW34CNoqsyiDxJnVMNA/2mljlTDlDodtQ7D8pp3ueFH+rP+au/gkfTV
            UQMKX8oGPZu1+mC4NmQIWJWdn4I8XCaxjzvXzZrP24aCSFr0ubsi/FvwGkb4DGyebyjyHOQ23
            v6Vu6tk+a5a+ZqdpoZIGN1GuWiQu4l4XqZOIu2Ipxo3NBY9gKGEs0FN+qo3kTvziNKu/j3T2e
            bBV75YYIo3FB9h1Xs1JI+eHrlR8fCRg==
                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
            </KeyDescriptor>
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                                     Location="https://unomaha.tfaforms.net/saml/index?sls"/>
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                                      Location="https://unomaha.tfaforms.net/saml/index?acs"
                                      index="1"/>
        </SPSSODescriptor>
    	<Organization>
        	<OrganizationName xml:lang="en-US">FormAssembly</OrganizationName>
        	<OrganizationDisplayName xml:lang="en-US">FormAssembly</OrganizationDisplayName>
        	<OrganizationURL xml:lang="en-US">https://www.formassembly.com</OrganizationURL>
    	</Organization>
    	<ContactPerson contactType="technical">
        	<GivenName>Josh Bowen</GivenName>
        	<EmailAddress>jbowen@nebraska.edu</EmailAddress>
    	</ContactPerson>
    	<ContactPerson contactType="administrative">
        	<GivenName>Alex Boryca</GivenName>
        	<EmailAddress>aboryca@nebraska.edu</EmailAddress>
        </ContactPerson>
    	<ContactPerson contactType="support">
        	<GivenName>ITS Support</GivenName>
            <EmailAddress>mailto:support@nebraska.edu</EmailAddress>
    	</ContactPerson>
    </EntityDescriptor>
    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
        entityID="https://unomaha.tfaforms.net/authenticator_saml/metadata">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
            <saml:Attribute Name="http://macedir.org/entity-category"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>
                https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>unNUID</saml:AttributeValue>
            </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
            <mdui:DisplayName xml:lang="en">FormAssembly</mdui:DisplayName>
            <mdui:Description xml:lang="en">Form builder for UNO Salesforce. This is a demo instance.</mdui:Description>
            <mdui:InformationURL xml:lang="en">https://www.formassembly.com</mdui:InformationURL>
            <mdui:PrivacyStatementURL xml:lang="en">https://www.formassembly.com/privacy-policy/</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false"
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                <ds:X509Certificate>
                    MIIEIzCCAwugAwIBAgIJAO2XnCP5otxSMA0GCSqGSIb3DQEBCwUAMIGnMQswCQYDVQQGEwJVUzEQMA4GA1UECAwHSW5kaWFuYTEUMBIGA1UEBwwLQmxvb21pbmd0b24xETAPBgNVBAoMCFZlZXJXZXN0MRkwFwYDVQQLDBBGb3JtQXNzZW1ibHkuY29tMRswGQYDVQQDDBIqLmZvcm1hc3NlbWJseS5jb20xJTAjBgkqhkiG9w0BCQEWFmFkbWluQGZvcm1hc3NlbWJseS5jb20wHhcNMTUwNDI5MTYyMzIwWhcNMjUwNDI4MTYyMzIwWjCBpzELMAkGA1UEBhMCVVMxEDAOBgNVBAgMB0luZGlhbmExFDASBgNVBAcMC0Jsb29taW5ndG9uMREwDwYDVQQKDAhWZWVyV2VzdDEZMBcGA1UECwwQRm9ybUFzc2VtYmx5LmNvbTEbMBkGA1UEAwwSKi5mb3JtYXNzZW1ibHkuY29tMSUwIwYJKoZIhvcNAQkBFhZhZG1pbkBmb3JtYXNzZW1ibHkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XTuY4IULmLZQwGy1RFDIoWtNkQ4I7wZxX9Sg7nTgCWTbvRy2XBC8YqX8AA8BK67ALAOL0QiMyhkQdkjH7oJl5CGQQG9i2VNNaNfbDWw93edWvPDUSBXBpTCMzuf13C539aFj1NmbVYzVKdRuM6Awr1IVXQsiiifCir7Ajfq2u8nk1ZChacZfUYOJemREYgjQEn/xldGh33NaeFQJl4gZTIZ45rN3dmNEJK2mXa0xXD7x819IbJ0PNCljl9miLQncxxF+kw2jZH+luYH6tfzO2NEK4kxzndsv72FFBwhmaamK31RmmL/SO7sfgnhuMXll+YGEJLWp6JM2eSgOhBXWwIDAQABo1AwTjAdBgNVHQ4EFgQUuSgAE6AdASq/NgHmNKr3mCTePCEwHwYDVR0jBBgwFoAUuSgAE6AdASq/NgHmNKr3mCTePCEwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAYkVERZLPohQSq3fd2LEO3VozjEE2eYxrbDaq9LXIS0ufLUJGLgdL1Z36KtGgztBQRps/VNryilIrJ3rySsos+PAgJi2z7Od8QfWRXRETCg1k6xdW34CNoqsyiDxJnVMNA/2mljlTDlDodtQ7D8pp3ueFH+rP+au/gkfTVUQMKX8oGPZu1+mC4NmQIWJWdn4I8XCaxjzvXzZrP24aCSFr0ubsi/FvwGkb4DGyebyjyHOQ23v6Vu6tk+a5a+ZqdpoZIGN1GuWiQu4l4XqZOIu2Ipxo3NBY9gKGEs0FN+qo3kTvziNKu/j3T2ebBV75YYIo3FB9h1Xs1JI+eHrlR8fCRg==</ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            </KeyDescriptor>
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://unomaha.tfaforms.net/authenticator_saml/index?sls" />

            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://unomaha.tfaforms.net/authenticator_saml/index?acs" index="1" />
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en-US">FormAssembly</OrganizationName>
            <OrganizationDisplayName xml:lang="en-US">FormAssembly</OrganizationDisplayName>
            <OrganizationURL xml:lang="en-US">https://www.formassembly.com</OrganizationURL>
        </Organization>
        <ContactPerson contactType="technical">
            <GivenName>Josh Bowen</GivenName>
            <EmailAddress>jbowen@nebraska.edu</EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="administrative">
            <GivenName>Alex Boryca</GivenName>
            <EmailAddress>aboryca@nebraska.edu</EmailAddress>
        </ContactPerson>
        <ContactPerson contactType="support">
            <GivenName>ITS Support</GivenName>
            <EmailAddress>mailto:support@nebraska.edu</EmailAddress>
        </ContactPerson>
    </EntityDescriptor>
Ryan Rumbaugh's avatar
Ryan Rumbaugh committed
    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
        entityID="https://unl-cyfs.unanet.biz/unl-cyfs">
        <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">UNL CYFS</mdui:DisplayName>
                <mdui:Description xml:lang="en">UNL CYFS</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://unl-cyfs.unanet.biz/unl-cyfs/action/home</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">https://unl-cyfs.unanet.biz/unl-cyfs/action/home</mdui:PrivacyStatementURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false"
            protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
Ryan Rumbaugh's avatar
Ryan Rumbaugh committed
                <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://unl-cyfs.unanet.biz/unl-cyfs/action/login/validate"
Ryan Rumbaugh's avatar
Ryan Rumbaugh committed
                index="1" />
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en">UNL CYFS</OrganizationName>
            <OrganizationDisplayName xml:lang="en">UNL CYFS</OrganizationDisplayName>
            <OrganizationURL xml:lang="en">https://unl-cyfs.unanet.biz/unl-cyfs/action/home</OrganizationURL>
        </Organization>
        <ContactPerson contactType="administrative">
            <GivenName>Tina Horan</GivenName>
            <EmailAddress>tina.horan@unl.edu</EmailAddress>
        </ContactPerson>
    </EntityDescriptor>
Ryan Rumbaugh's avatar
Ryan Rumbaugh committed
    <EntityDescriptor xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata"
        entityID="https://api.badgr.io/account/saml2/saml2.unk/acs/">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
                <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        unNUID</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">
                    UNK Badgr</mdui:DisplayName>
                <mdui:Description xml:lang="en">Canvas Badges</mdui:Description>
                <mdui:InformationURL xml:lang="en">
                    https://badgr.com</mdui:InformationURL>
                <mdui:PrivacyStatementURL xml:lang="en">
                    https://www.instructure.com/policies/privacy-badgr?domain=badgr</mdui:PrivacyStatementURL>
                <mdui:Logo height="85" width="141" xml:lang="en"></mdui:Logo>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
            AuthnRequestsSigned="false" WantAssertionsSigned="true">
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                Location="https://api.badgr.io/account/saml2/saml2.unk/acs/" index="1" />
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en">UNK Badgr</OrganizationName>
            <OrganizationURL xml:lang="en">https://badgr.com</OrganizationURL>
        </Organization>
        <ContactPerson contactType="support">
            <SurName>TBD</SurName>
            <EmailAddress>its-sec-iam@nebraska.edu</EmailAddress>
        </ContactPerson>
    </EntityDescriptor>
Rory Larson's avatar
Rory Larson committed
    <EntityDescriptor entityID="http://app.pantrysoft.com/saml/id"
                      ID="_f32841d81ed43c2faf72c15a13216bdc836a99facd">
        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"
                         WantAssertionsSigned="true">
            <KeyDescriptor use="signing">
                <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
                            MIIEsTCCAxmgAwIBAgIUd9tstbVzYAI1xmZmTbkrFRNiOZowDQYJKoZIhvcN
                            AQELBQAwaDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAk9SMRIwEAYDVQQHDAlD
                            b3J2YWxsaXMxEzARBgNVBAoMClBhbnRyeVNvZnQxIzAhBgkqhkiG9w0BCQEW
                            FGNocmlzQHBhbnRyeXNvZnQuY29tMB4XDTIxMDQwNzIyNTMzMloXDTMxMDQw
                            NzIyNTMzMlowaDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAk9SMRIwEAYDVQQH
                            DAlDb3J2YWxsaXMxEzARBgNVBAoMClBhbnRyeVNvZnQxIzAhBgkqhkiG9w0B
                            CQEWFGNocmlzQHBhbnRyeXNvZnQuY29tMIIBojANBgkqhkiG9w0BAQEFAAOC
                            AY8AMIIBigKCAYEArdveBksEs9zaCKgzV3g7ATTxaKQ5b+3ClaEsZ/upqx98
                            vrdDSoOLSUelDAVMtQ6A6nzZ2x+Jfi+4kkZ+TBHPH9+IRzXKzPWwjCn2zlmV
                            YDKoZeiPDPG8O/oh/zckrUL0DIM28Mzh6KbLPDzcHO0bIfvscckcwqEuQJzj
                            GdsKnjl496FgHQGlajNWdJYnvEw7pLCcbUgHLhBagfZAQ4ArpD8u45WTEXCn
                            lfFt0F1x2CgqVCsnvCG7+Wu7+D2xqyGkYVY9dMPxGwSZYTfQg/Z72t5NSxvd
                            AMEalV9DpE10EiTpmkn1C58DV+IfiQGFj6I/Jw+TkmkHZis6iZxOi4t31A8a
                            Y5PThcZgN+69hq8aRQysJ47bB5s3mc23AA60RmvSpdcycBLPNPFGWWnP9HEG
                            1jAvP0WoC8tF5YCb9rJmY16QJWBY940wKIsjboQjr5itE7XPKXViHQk8q6ih
                            g+XSUnvTmfbUjgKaCFKOa5s9BjLr9DxNwyBjDNjr2kIHc4vDAgMBAAGjUzBR
                            MB0GA1UdDgQWBBQLiwjHZbJ8Hv2MMokJx/n3U99vZTAfBgNVHSMEGDAWgBQL
                            iwjHZbJ8Hv2MMokJx/n3U99vZTAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3
                            DQEBCwUAA4IBgQALMo9gIcavwrb/KfcXPttoYWDyvHRD97s8XEVsL6JSyPEd
                            0I9j9o9qhUmUiPseebBNtbcuLs2g2yVm01wbJmtv4Pie6yYvMdbiAY6qm3iu
                            iEQYrncEncU5xFCCNH9yRLIGBi742GhMuQIJrLB2aL+xn2neJGVdhrodKQcM
                            QJRSNVUdI69ZKta3mymrdKN188wOW+f4EfMXISWOjgB2CBBA6lsXftLEbNzZ
                            iuNeuX2ViAWaPJ0EUxweWGv196LG/CfZZ1/SBSOpNmdoK0bY1dhIjkyC3XEm
                            bnPXsc1zkzHDp3S+2STK6FqeYvxdcoaBmPOBmU8juOIxQlN6vv+08HAc8ZuM
                            paBFBwxiY2Hg84WNPso8Wbni4L40XGMfHYXjSni+WdKMdM+r1IJMn0NTKBVW
                            BvT94T90Z0GlV0dFzl4oCcyYfhmVn9/EEyZCx1K+/XMVIJLMw8rjiiSOU/Em
                            r6WqA7WqsgwPZvcLEGrwbKuqQpO/PXHD24tkUftPLlHmK+Y=
                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
            </KeyDescriptor>
            <ContactPerson contactType="technical">
                <Company>PantrySoft</Company>
                <GivenName>Chris</GivenName>
                <SurName>Campbell</SurName>
                <EmailAddress>chris@pantrysoft.com</EmailAddress>
                <TelephoneNumber>406-549-0766</TelephoneNumber>
            </ContactPerson>
            <ContactPerson contactType="administrative">
                <Company>PantrySoft</Company>
                <GivenName>Bob</GivenName>
                <SurName>Jaffe</SurName>
                <EmailAddress>bob@pantrysoft.com</EmailAddress>
                <TelephoneNumber>406-549-0766</TelephoneNumber>
            </ContactPerson>
            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                                 Location="https://app.pantrysoft.com/logout"/>
            <AssertionConsumerService index="0"
                                      isDefault="true"
                                      Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                                      Location="https://app.pantrysoft.com/saml/login_check"/>
        </SPSSODescriptor>
    </EntityDescriptor>
Rory Larson's avatar
Rory Larson committed
    <EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
                      entityID="https://hotelengine.com">
        <Extensions>
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
                </saml:Attribute>
                <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
                    NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                    <saml:AttributeValue>
                        unNUID</saml:AttributeValue>
                </saml:Attribute>
            </mdattr:EntityAttributes>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">
                    HotelEngine</mdui:DisplayName>
                <mdui:Description xml:lang="en">HotelEngine</mdui:Description>
                <mdui:InformationURL xml:lang="en">
                    https://hotelengine.com</mdui:InformationURL>
            </mdui:UIInfo>
        </Extensions>
        <SPSSODescriptor AuthnRequestsSigned="false"
                         WantAssertionsSigned="false"
                         protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
Rory Larson's avatar
Rory Larson committed
            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
Rory Larson's avatar
Rory Larson committed
            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
                                      Location="https://api.hotelengine.com/users/auth/62242253-66af-44c1-8a88-0f5f9a5e06d6/saml"
                                      index="1" />
        
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en">HotelEngine</OrganizationName>
            <OrganizationURL xml:lang="en">https://hotelengine.com</OrganizationURL>
        </Organization>
        <ContactPerson contactType="administrative">
            <Company>University of Nebraska</Company>
            <GivenName>Roger</GivenName>
            <SurName>Korth</SurName>
            <EmailAddress>rdkorth@nebraska.edu</EmailAddress>
        </ContactPerson>
    </EntityDescriptor>
Rory Larson's avatar
Rory Larson committed
    <EntityDescriptor ID="_ba812aef2f9fb8a8b9b822dbc0109c4e15d06b5f"
                      entityID="https://nufoundation.events.alumniq.com/shibboleth">
    <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
        <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
        <mdattr:EntityAttributes>
            <saml:Attribute Name="http://macedir.org/entity-category"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>
                    https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>
                    unNUID</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdui:UIInfo>
            <mdui:DisplayName xml:lang="en">AlumnIQ</mdui:DisplayName>
            <mdui:Description xml:lang="en">AlumnIQ</mdui:Description>
            <mdui:InformationURL xml:lang="en">
                https://www.alumniq.com/#what-we-do</mdui:InformationURL>
            <mdui:PrivacyStatementURL xml:lang="en">
                https://www.alumniq.com/compliance/Privacy%20Policy%20-%20AlumnIQ%20Platform.pdf</mdui:PrivacyStatementURL>
        </mdui:UIInfo>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" />
        <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
                Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
                Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/Login" />
    </Extensions>
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>1f84026f1f87</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=1f84026f1f87</ds:X509SubjectName>
                    <ds:X509Certificate>MIID6zCCAlOgAwIBAgIJAKlkm2CJBUzxMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV
                        BAMTDDFmODQwMjZmMWY4NzAeFw0yMDA0MjExOTAwMzlaFw0zMDA0MTkxOTAwMzla
                        MBcxFTATBgNVBAMTDDFmODQwMjZmMWY4NzCCAaIwDQYJKoZIhvcNAQEBBQADggGP
                        ADCCAYoCggGBAPHOVkU6Zu4Q0Mpx1/YpGa+iDG3e8boT5D4ptJldP80cmh13MoA3
                        AyeQac86EC8dO1Z8XFmnwsSwT246kBVfLgr6gQgMy7Ql4zLpnFzhKFBPgHBCT/5e
                        or9qdn/b/ZPBC2sAeRecS7gFox66/s3+/FJ/XNHErrEDZi3XnDIz6UpOPFWR5WE1
                        IUWMnEY27GFX4dAqIaXGBELwvPKsyZYpJLGjovi0beFVlN6B39dDmZn5yUD00ekX
                        WSnYPSIYgXo5M1iM7tn5jRoaRo/KGbCK0q4/F3cCbzMSgfwkMAJ5GY0yhPUUXQGQ
                        5ieLPawBV5QCiNNF4+SJIdGuASTYiZr7o51bmcMTqjAxTqPRL34cd+Cddndf+sGU
                        24zPHfmjB79C0Xn+QgKmvkhujoi+n/pCgEtF1M75IsGY1djipqplOiph9vjQsD2x
                        HGe5Vi1RDPqCIMgbxARJh3NodbgLeM92SiJur6VDpOVgdVOich1JYBsL5O3Vlb5v
                        xKA6Sol8TneRywIDAQABozowODAXBgNVHREEEDAOggwxZjg0MDI2ZjFmODcwHQYD
                        VR0OBBYEFOxhICWI1bbhgXsMW4DNuNHLB4g4MA0GCSqGSIb3DQEBCwUAA4IBgQBU
                        0gKlnY0GzzFuYyWoF+tbLPKT9i3InG320A4H9V+VJ3ZgnXy+3kG2rIg09j04mgWF
                        YSrWb7BUwYk8WMLD5fbhQ99vpFpKiJnhWvISc3wstgo18k9xr09n4lVU2aYDwgoD
                        GTVj59KPu+KlwULvIMnvFbWZm3z2JqGzBMFv8zkID3YCGzyz1Ej7W05A12qcga+o
                        Pu5/PLuVY2iRRI2cYpbxG5+kYejNXqiNHph5ROmEEpfnMFHyfMZrpH+BUxVfSTkJ
                        K62rduZQabp4qKhIibyXw5fuANIXoGxsSC2IbBKl1jJ23j4aY1OUOqW7YBYkk94Q
                        hp77m7JILWdulKtE314/Iy+/5V0k05FsVnWdeRLFW08NK5klt7+x6zG5gTFczN4I
                        X+znZJ9LQKrr5VRwEx8aGBbpJ1OVXc5U5ARdtSMz/Nl+yRgZJD3kxID/1sjFRwmq
                        OGk1Wid/0g2ZjXSiVMjTi8WrUzw9OyyCi4w9AkBPVNHRvBy1qVjZIlCzcso4gEQ= </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>1f84026f1f87</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=1f84026f1f87</ds:X509SubjectName>
                    <ds:X509Certificate>MIID6zCCAlOgAwIBAgIJAOqc+LvB4m+VMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV
                        BAMTDDFmODQwMjZmMWY4NzAeFw0yMDA0MjExOTAwNDBaFw0zMDA0MTkxOTAwNDBa
                        MBcxFTATBgNVBAMTDDFmODQwMjZmMWY4NzCCAaIwDQYJKoZIhvcNAQEBBQADggGP
                        ADCCAYoCggGBAKcbX9lvwcBpG9qmza970xI4Vj537Aad7Fq7XNJfxRsXbPK+sRYV
                        0TwRok2HhCPt2fKrzE03JZtqA7GemihvDDgWiW/KiSU8mFiFeGap0JkxoRnNQOLu
                        y7AcZ9NrSh5jts+ko9SrJkVerNI7tF8njlmCR/19R1g/yp/ThLzr6PwfNg9zkFdo
                        RXDtzYd1Qq4GPMaHqC8VMKwnaiv2s4KPU/sKN0sEea4XaaziCI6Cf2iZR/rHLNHe
                        x9ST0VpuVODz/BOWmxsgTgeYrY3aGAwrB3lXlRkJL6KKabgC5cvrza1MfilzEart
                        ngT0ckzCiLoRp10P3pVINqM7unyDdSwgElWvH3AcI3zJDblNyzL0eZp9F/pudNSN
                        V4HVyqWPsGhRnDpLW/TS+Fnxv2DQqEe2Srxh61Un+8jZK7IWGeuCgPPuQrwzxq5c
                        X98oyNqeys5X3yHkor42RbX4qYQzjfbvjDg4ewcNpNtu9RKfgUXAaMSS6dH5wdrZ
                        fwo4Nuv0lCZB/QIDAQABozowODAXBgNVHREEEDAOggwxZjg0MDI2ZjFmODcwHQYD
                        VR0OBBYEFCG6Hg40T0gRUyl4IQdW3pcoOIvTMA0GCSqGSIb3DQEBCwUAA4IBgQCM
                        wJIMbAtcShEHhPOeZ72rGycR9Z7+yC72uSXyScgHME/kcLVqwzsHXvw37IkfbuvH
                        D9Gz34OI4gg5QZtbarp4GpSycnoNJDT5IRNKkFrPyv3QWvyiTBtFguSAr6xOO8Py
                        tBWetorrCcpqvnmiEDHIfs6g8vFq1HUDS1etDkrOk/e5RyHW7Yys3CBfRtLoRX/c
                        iiEcuQg/HPqlCTFlHFbaSFMjklomSfSYFytdFkqGNNgZobUCAaj3L2Zw3FEBVn0o
                        G0CcW9X3s+L+C3CAyofZBY0Nto2AOrAyaRW0wbGkcI3hI744f9rHArUyonTIe0hG
                        SS1pwkfzFbpWZmiBMnoA7CB1ma/xVF+ln/gEn1LS7yKIdHO84/etJ3Ve8yjZKSBD
                        e1TRefMMT5McNwoKEZdD0OhD8CBk95Pkhcl2limOzy6R7ekBlak2PclSLXyD6Hda
                        m1lmTwWWHX/Jt8iVZsV85PlLIbZC0PJaJk90yMtMTBVxyLTU+iNcdhD9qnjwVb8= </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" />
        </KeyDescriptor>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/Artifact/SOAP"
            index="1" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SLO/SOAP" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SLO/Redirect" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SLO/POST" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SLO/Artifact" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/POST" index="1" />
        <AssertionConsumerService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/POST-SimpleSign"
            index="2" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/Artifact"
            index="3" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
            Location="https://nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/ECP" index="4" />
    </SPSSODescriptor>
    <Organization>
        <OrganizationName xml:lang="en">AlumnIQ, LLC</OrganizationName>
        <OrganizationDisplayName xml:lang="en">AlumnIQ, LLC</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">https://alumniq.com</OrganizationURL>
    </Organization>
</EntityDescriptor>
<EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    ID="_4d6cd1337cb59fdc60807abf7e19fd07d6c85f3f"
    entityID="https://qa-nufoundation.events.alumniq.com/shibboleth">
    <Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
        <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
        <mdattr:EntityAttributes>
            <saml:Attribute Name="http://macedir.org/entity-category"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>
                    https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
            </saml:Attribute>
            <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
                NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>
                    unNUID</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
        <mdui:UIInfo>
            <mdui:DisplayName xml:lang="en">AlumnIQ QA</mdui:DisplayName>
            <mdui:Description xml:lang="en">AlumnIQ QA</mdui:Description>
            <mdui:InformationURL xml:lang="en">
                https://www.alumniq.com/#what-we-do</mdui:InformationURL>
            <mdui:PrivacyStatementURL xml:lang="en">
                https://www.alumniq.com/compliance/Privacy%20Policy%20-%20AlumnIQ%20Platform.pdf</mdui:PrivacyStatementURL>
        </mdui:UIInfo>
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" />
        <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
        <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" />
        <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
                Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
                Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/Login" />
    </Extensions>
    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>1f84026f1f87</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=1f84026f1f87</ds:X509SubjectName>
                    <ds:X509Certificate>MIID6zCCAlOgAwIBAgIJAKlkm2CJBUzxMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV
                        BAMTDDFmODQwMjZmMWY4NzAeFw0yMDA0MjExOTAwMzlaFw0zMDA0MTkxOTAwMzla
                        MBcxFTATBgNVBAMTDDFmODQwMjZmMWY4NzCCAaIwDQYJKoZIhvcNAQEBBQADggGP
                        ADCCAYoCggGBAPHOVkU6Zu4Q0Mpx1/YpGa+iDG3e8boT5D4ptJldP80cmh13MoA3
                        AyeQac86EC8dO1Z8XFmnwsSwT246kBVfLgr6gQgMy7Ql4zLpnFzhKFBPgHBCT/5e
                        or9qdn/b/ZPBC2sAeRecS7gFox66/s3+/FJ/XNHErrEDZi3XnDIz6UpOPFWR5WE1
                        IUWMnEY27GFX4dAqIaXGBELwvPKsyZYpJLGjovi0beFVlN6B39dDmZn5yUD00ekX
                        WSnYPSIYgXo5M1iM7tn5jRoaRo/KGbCK0q4/F3cCbzMSgfwkMAJ5GY0yhPUUXQGQ
                        5ieLPawBV5QCiNNF4+SJIdGuASTYiZr7o51bmcMTqjAxTqPRL34cd+Cddndf+sGU
                        24zPHfmjB79C0Xn+QgKmvkhujoi+n/pCgEtF1M75IsGY1djipqplOiph9vjQsD2x
                        HGe5Vi1RDPqCIMgbxARJh3NodbgLeM92SiJur6VDpOVgdVOich1JYBsL5O3Vlb5v
                        xKA6Sol8TneRywIDAQABozowODAXBgNVHREEEDAOggwxZjg0MDI2ZjFmODcwHQYD
                        VR0OBBYEFOxhICWI1bbhgXsMW4DNuNHLB4g4MA0GCSqGSIb3DQEBCwUAA4IBgQBU
                        0gKlnY0GzzFuYyWoF+tbLPKT9i3InG320A4H9V+VJ3ZgnXy+3kG2rIg09j04mgWF
                        YSrWb7BUwYk8WMLD5fbhQ99vpFpKiJnhWvISc3wstgo18k9xr09n4lVU2aYDwgoD
                        GTVj59KPu+KlwULvIMnvFbWZm3z2JqGzBMFv8zkID3YCGzyz1Ej7W05A12qcga+o
                        Pu5/PLuVY2iRRI2cYpbxG5+kYejNXqiNHph5ROmEEpfnMFHyfMZrpH+BUxVfSTkJ
                        K62rduZQabp4qKhIibyXw5fuANIXoGxsSC2IbBKl1jJ23j4aY1OUOqW7YBYkk94Q
                        hp77m7JILWdulKtE314/Iy+/5V0k05FsVnWdeRLFW08NK5klt7+x6zG5gTFczN4I
                        X+znZJ9LQKrr5VRwEx8aGBbpJ1OVXc5U5ARdtSMz/Nl+yRgZJD3kxID/1sjFRwmq
                        OGk1Wid/0g2ZjXSiVMjTi8WrUzw9OyyCi4w9AkBPVNHRvBy1qVjZIlCzcso4gEQ= </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:KeyName>1f84026f1f87</ds:KeyName>
                <ds:X509Data>
                    <ds:X509SubjectName>CN=1f84026f1f87</ds:X509SubjectName>
                    <ds:X509Certificate>MIID6zCCAlOgAwIBAgIJAOqc+LvB4m+VMA0GCSqGSIb3DQEBCwUAMBcxFTATBgNV
                        BAMTDDFmODQwMjZmMWY4NzAeFw0yMDA0MjExOTAwNDBaFw0zMDA0MTkxOTAwNDBa
                        MBcxFTATBgNVBAMTDDFmODQwMjZmMWY4NzCCAaIwDQYJKoZIhvcNAQEBBQADggGP
                        ADCCAYoCggGBAKcbX9lvwcBpG9qmza970xI4Vj537Aad7Fq7XNJfxRsXbPK+sRYV
                        0TwRok2HhCPt2fKrzE03JZtqA7GemihvDDgWiW/KiSU8mFiFeGap0JkxoRnNQOLu
                        y7AcZ9NrSh5jts+ko9SrJkVerNI7tF8njlmCR/19R1g/yp/ThLzr6PwfNg9zkFdo
                        RXDtzYd1Qq4GPMaHqC8VMKwnaiv2s4KPU/sKN0sEea4XaaziCI6Cf2iZR/rHLNHe
                        x9ST0VpuVODz/BOWmxsgTgeYrY3aGAwrB3lXlRkJL6KKabgC5cvrza1MfilzEart
                        ngT0ckzCiLoRp10P3pVINqM7unyDdSwgElWvH3AcI3zJDblNyzL0eZp9F/pudNSN
                        V4HVyqWPsGhRnDpLW/TS+Fnxv2DQqEe2Srxh61Un+8jZK7IWGeuCgPPuQrwzxq5c
                        X98oyNqeys5X3yHkor42RbX4qYQzjfbvjDg4ewcNpNtu9RKfgUXAaMSS6dH5wdrZ
                        fwo4Nuv0lCZB/QIDAQABozowODAXBgNVHREEEDAOggwxZjg0MDI2ZjFmODcwHQYD
                        VR0OBBYEFCG6Hg40T0gRUyl4IQdW3pcoOIvTMA0GCSqGSIb3DQEBCwUAA4IBgQCM
                        wJIMbAtcShEHhPOeZ72rGycR9Z7+yC72uSXyScgHME/kcLVqwzsHXvw37IkfbuvH
                        D9Gz34OI4gg5QZtbarp4GpSycnoNJDT5IRNKkFrPyv3QWvyiTBtFguSAr6xOO8Py
                        tBWetorrCcpqvnmiEDHIfs6g8vFq1HUDS1etDkrOk/e5RyHW7Yys3CBfRtLoRX/c
                        iiEcuQg/HPqlCTFlHFbaSFMjklomSfSYFytdFkqGNNgZobUCAaj3L2Zw3FEBVn0o
                        G0CcW9X3s+L+C3CAyofZBY0Nto2AOrAyaRW0wbGkcI3hI744f9rHArUyonTIe0hG
                        SS1pwkfzFbpWZmiBMnoA7CB1ma/xVF+ln/gEn1LS7yKIdHO84/etJ3Ve8yjZKSBD
                        e1TRefMMT5McNwoKEZdD0OhD8CBk95Pkhcl2limOzy6R7ekBlak2PclSLXyD6Hda
                        m1lmTwWWHX/Jt8iVZsV85PlLIbZC0PJaJk90yMtMTBVxyLTU+iNcdhD9qnjwVb8= </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
            <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" />
            <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" />
        </KeyDescriptor>
        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/Artifact/SOAP"
            index="1" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SLO/SOAP" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SLO/Redirect" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SLO/POST" />
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SLO/Artifact" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/POST"
            index="1" />
        <AssertionConsumerService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/POST-SimpleSign"
            index="2" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/Artifact"
            index="3" />
        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
            Location="https://qa-nufoundation.events.alumniq.com/Shibboleth.sso/SAML2/ECP" index="4" />
    </SPSSODescriptor>
    <Organization>
        <OrganizationName xml:lang="en">AlumnIQ, LLC</OrganizationName>
        <OrganizationDisplayName xml:lang="en">AlumnIQ, LLC</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">https://alumniq.com</OrganizationURL>
    </Organization>
</EntityDescriptor>
<EntityDescriptor entityID="https://unomaha.apparmor.com/Tools/SSO/Dashboard/SAML/default.aspx"
  xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
  <Extensions>
    <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
    <mdattr:EntityAttributes>
      <saml:Attribute Name="http://macedir.org/entity-category"
        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>https://nebraska.edu/category/registered-by-nefed</saml:AttributeValue>
      </saml:Attribute>
      <saml:Attribute Name="http://shibboleth.net/ns/attributes/releaseAllValues"
        NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>
          unNUID
        </saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
    <mdui:UIInfo>
      <mdui:DisplayName xml:lang="en">UNO SAFE App</mdui:DisplayName>
      <mdui:Description xml:lang="en">UNO SAFE App</mdui:Description>
      <mdui:InformationURL xml:lang="en">https://apparmor.com/about/</mdui:InformationURL>
      <mdui:PrivacyStatementURL xml:lang="en">https://apparmor.com/about/privacy/</mdui:PrivacyStatementURL>
      <mdui:Logo height="85" width="141" xml:lang="en">
      </mdui:Logo>
    </mdui:UIInfo>
  </Extensions>
  <SPSSODescriptor WantAssertionsSigned="true"
    protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor>
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>
            MIIDFzCCAf+gAwIBAgIUamur5CI73ZGm0VMoLmUzsbqzTwAwDQYJKoZIhvcNAQELBQAwGzEZMBcGA1UEAwwQc3NvLmFwcGFybW9yLmNvbTAeFw0yMDAyMTMxOTI5NTBaFw00MDAyMDgxOTI5NTBaMBsxGTAXBgNVBAMMEHNzby5hcHBhcm1vci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PQyruVx2MYT8k20qbF3aOWgQGS7Hsnj5QBl2lGOv96ScbviohehwYnI6l5qUr+YlgU95lfmPPpNxWODw+20lc+liH5YgyXJOhEl7AsMGqVWwFOfQKRA3ldbVhKoERp0QHj1EKsf2RiZRA1u80rW97orpLx2AT2//HGG+INjLHvEAs7O8YDk3JJha6C3CUTY6NGOhwS1P8D0zOaiTzQ69madjwZkE9kY7qc2DVg+enVhcfZ4lZVh9lM02QKlN3BXVwMo0EVBhhywRrD2FRqIznQZLE6+YqiysdJ/mzzNOBrzXxR//GNfCxOu9ERAQ2pHMUiFR3SWyJSG0uq3tPnYPAgMBAAGjUzBRMB0GA1UdDgQWBBQU2ohQaMC7DIJ/uH1k2XQIci5eIjAfBgNVHSMEGDAWgBQU2ohQaMC7DIJ/uH1k2XQIci5eIjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBhKBagIESLBBq7UKEPuKdtCr0hSqfQRC6eKk8AsCf1gwGNywQnGojpRjgBjloakxcpylV3K4D2WhWG47344VpYgUU+q/gYrQIBZ/LlGazmaqHVSk7usxkoMjFznTJn70t1uK+XqJLIXKbm0DXRCseZN0c9z2V3dQ/+Epj5Ce9p7qgZCqgcg4xbxJSwqsDmh1kY/mAPFoN4aHby3tMT8n9QUL1pIk/cPmm5VEBwlaLy1KUqSv8P0O7sejAnR5HccOz6CRseSaX1LrqEsjaSMarkPCtUGdRTmtawsi15EGRLvr4nlJpvAfKbw9yR6S17v5sH8/FvK0Xfe7JPqNYARUoo</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
      Location="https://unomaha.apparmor.com/Tools/SSO/Dashboard/SAML/SLOService.aspx" />
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
      Location="https://unomaha.apparmor.com/Tools/SSO/Dashboard/SAML/AssertionConsumerService.aspx" />
  </SPSSODescriptor>
  <ContactPerson contactType="technical">
    <GivenName>AppArmor Support</GivenName>
    <EmailAddress>support@apparmor.com</EmailAddress>
  </ContactPerson>
  <ContactPerson contactType="administrative">
    <GivenName>Matt Ware</GivenName>