Onboard Omaha Transact Dining Service
```xml
<EntityDescriptor entityID="https://mgmt-uno-sp.transactcampus.com/mgmt">
<!-- An SP supporting SAML 1 and 2 contains this element with protocol support as shown. -->
<SPSSODescriptor
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<KeyDescriptor>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" />
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" />
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" />
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-1_5" />
</KeyDescriptor>
<!-- This tells IdPs that Single Logout is supported and where/how to request it. -->
<!-- We are not supporting single logout at this time. -->
<!-- This tells IdPs that you only need transient identifiers. -->
<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
<NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
<!--
This tells IdPs where and how to send authentication assertions. Mostly
the SP will tell the IdP what location to use in its request, but this
is how the IdP validates the location and also figures out which
SAML version/binding to use.
-->
<AssertionConsumerService index="1" isDefault="true"
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://mgmt-uno-sp.transactcampus.com/mgmt/TransactSP/SSO/SAML2/POST" />
</SPSSODescriptor>
<!-- This is just information about the entity in human terms. -->
<Organization>
<OrganizationName xml:lang="en">TransactSP Service Provider</OrganizationName>
<OrganizationDisplayName xml:lang="en">TransactSP</OrganizationDisplayName>
<OrganizationURL xml:lang="en">http://www.transactcampus.com/</OrganizationURL>
</Organization>
</EntityDescriptor>
```
issue