<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
    xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr"
    xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
    xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
    xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://idp-staff-duomfa.belnet.be/idp/shibboleth">
    <md:Extensions>
        <mdrpi:RegistrationInfo registrationAuthority="http://federation.belnet.be/" registrationInstant="2012-03-27T12:00:00Z">
            <mdrpi:RegistrationPolicy xml:lang="en">http://federation.belnet.be/files/Belnet-metadata-registration-practice-statement.txt</mdrpi:RegistrationPolicy>
        </mdrpi:RegistrationInfo>
        <mdattr:EntityAttributes>
            <saml:Attribute Name="http://macedir.org/entity-category-support" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                <saml:AttributeValue>https://refeds.org/category/code-of-conduct/v2</saml:AttributeValue>
                <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
            </saml:Attribute>
        </mdattr:EntityAttributes>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">belnet.be</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Belnet Staff Login with Duo </mdui:DisplayName>
                <mdui:Description xml:lang="en">Belnet operates the Research and Education Network for Belgium.</mdui:Description>
                <mdui:Logo height="16" width="16">https://federation.belnet.be/images/smallbelnetlogo.png</mdui:Logo>
                <mdui:Logo height="75" width="145">https://federation.belnet.be/images/belnetlogo.png</mdui:Logo>
            </mdui:UIInfo>
            <mdui:DiscoHints>
                <mdui:IPHint>193.190.0.0/15</mdui:IPHint>
                <mdui:IPHint>2001:6a8::/32</mdui:IPHint>
                <mdui:DomainHint>belnet.be</mdui:DomainHint>
                <mdui:GeolocationHint>geo:50.825312,4.365471</mdui:GeolocationHint>
            </mdui:DiscoHints>
        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-staff-duomfa.belnet.be/idp/profile/SAML2/SOAP/Redirect/SLO"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-staff-duomfa.belnet.be/idp/profile/SAML2/POST/SLO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-staff-duomfa.belnet.be/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-staff-duomfa.belnet.be/idp/profile/SAML2/Redirect/SSO"/>
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-staff-duomfa.belnet.be/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
    <Organization>
        <OrganizationName xml:lang="en">Belnet</OrganizationName>
        <OrganizationDisplayName xml:lang="en">Belnet Staff Login with Duo</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">http://www.belnet.be/</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
        <GivenName>Belnet Federation Technical Staff</GivenName>
        <SurName>Belnet Federation</SurName>
        <EmailAddress>mailto:federation@belnet.be</EmailAddress>
    </ContactPerson>
</md:EntityDescriptor>