<?xml version="1.0" encoding="UTF-8"?>

<!--<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" validUntil="2032-06-23T07:59:32.506Z" entityID="https://idp.thairen.net.th/idp/shibboleth">-->

<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr" entityID="https://idp.thairen.net.th/idp/shibboleth">
	
	<!--<Extensions>
	<RegistrationInfo registrationAuthority="http://idf.thairen.net.th" registrationInstant="2022-06-09T13:02:00Z">
	    <RegistrationPolicy xml:lang="en">http://idf.thairen.net.th/pdf/MRPS-ThaiIDF-v0.1.pdf</RegistrationPolicy>
        </RegistrationInfo>
	</Extensions>-->

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">thairen.net.th</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">ThaiREN IDP at idp.thairen.net.th</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider for research and development institutes in Thailand</mdui:Description>
                <mdui:Logo height="120" width="260">https://idp.thairen.net.th/logo.png</mdui:Logo>
                <mdui:Logo height="16" width="16">https://idp.thairen.net.th/logo16.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel--> 
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIFMzCCAxugAwIBAgIUWdVLq84ipo6jmNwwL6XybHDbuWYwDQYJKoZIhvcNAQEL
BQAwHTEbMBkGA1UEAwwSaWRwLnRoYWlyZW4ubmV0LnRoMB4XDTIyMDYyMzA3MzM0
MFoXDTQyMDYyMzA3MzM0MFowHTEbMBkGA1UEAwwSaWRwLnRoYWlyZW4ubmV0LnRo
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkTqmf8qp4GdBpyS1/nSQ
x3k/PQMGPmc6AxHNhNQBdEaiS1kRWdQK+BKWJqEXZ9Vmfp1VDClRx/CYQXzU3aZt
nISEr0O7BkOCLOm/u9Ei3TEmXXT/o4+wPRO2rFTTLy50w6rAH8MQblY6Y3Vahmpc
69KywLBRn6p8AJoyAR9hU+Utuy5C8MGkTzPeiEDqKKIfAgZGbzCXckUBwmHECHep
l/S3/HQN87t9DM6/M/WcTc315d8XbAl7LHJ6CcChI1g2NiOmVVGSy+mWuMr8qZNQ
HuEa7ft4+HoKV4jXumF0kvNSMeYsfnTcqgN4U0phIJ8hbt3CyIPVnITq1wxHCPMG
3fAEQlUtpeBYwLzBUUQsNQ1yEHJv+H4vZuU5DmNCVP4Jx0I/zhHuWiSFhvM6bnVd
qThZl7JK0nKpvbC3+vFH1oaVe+rujwJ4Y6Ik3rWgZRWoauKssJACgBWTDgC0TRV3
hI2Xjt4QAWiYZY595gsodc3unnZ9iGQTXZGmrMA0XMf75G/DgnC8E83wBMWTEPXo
yxQrB/hYEqAaTRoTQhnKW9Bsb5R3ML8THBqAKv18kvB3z9MK1CNS/Xn3JsbfdBJt
1BPXHT1UZxP1fmfRFW07hRS/0E/xQrRiA/fmj8Es1pRVNL1FkuVDWtzCos+z8Zqf
6jy6F7UrUM+CCd42xYO/xk8CAwEAAaNrMGkwHQYDVR0OBBYEFCef3a58S8YdhOjj
jJss1zG9R2X8MEgGA1UdEQRBMD+CEmlkcC50aGFpcmVuLm5ldC50aIYpaHR0cHM6
Ly9pZHAudGhhaXJlbi5uZXQudGgvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL
BQADggIBAH66YEeKXl4kFScs5OxVagWRHsZ3F+uZRzSqOBK6R+y/oMluOjJz1mUy
ycpqvQnQfPhSZ4ND25jbF6VdO7waBlA5ezCOHFtBsXqDE1GI3bymXArNAVwYA/st
DNX79MJ5jMDdjB4KnLr+yHKzlstXskElAfYJKtdHYNX+OSe1RWL9mRjUxrvY3P5Y
mRGt+1tmJ4amC54eo5VO2a1TYeddChdzo29RsoQ/+aPuyKaC8Z8L+4z1Ac2Iul1t
yfwfmnpjWxItyMOU38Q+SanFnb/C+jPvZ1vnxzxRV9o3Fd0NWwXX426eJsO5Qqfj
okrPCNCya8oy+XfJ52C3L7/ylrOAANm1U0QaG5mWfo5q1Z5K7x3tKQF4Dh+CvUy2
2PK2jpI5eOESckOh+CfijGXz6BYd8GfO8B2WHv5a9poh0kwxEIR/dxIYmyRwsOcL
jtGjAK8gTkliB4YM+TGTnRuuB4JaMWuK4QW5wun1zl2cR1nFsMOQhaBmbgkCwyFs
nON9ldz8D92bBmGiBbX/ZVct3uRp1v8AeyPGFfLZNiKjjRozOg6OodQRZJSx+VT1
Z9V3gguRlk17lPPLUIcJX6HGpXPrcKqvlTHb+uxNbGpRVEtcsuIstJXV72B9gZ/X
7Y7OADEq2OxleLJlKYT8zVOYOslj+FyUL0Fcs0pGqQOyhSBoWXn3
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <!--<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.thairen.net.th/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
	-->         
	<ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.thairen.net.th/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"/>

	<!--
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.thairen.net.th/idp/profile/SAML2/SOAP/SLO"/>
	-->
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.thairen.net.th/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.thairen.net.th/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.thairen.net.th/idp/profile/SAML2/POST/SLO"/>
 

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.thairen.net.th/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.thairen.net.th/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <!--<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.thairen.net.th/idp/profile/Shibboleth/SSO"/>
-->     <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.thairen.net.th/idp/profile/SAML2/POST/SSO"/>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    </IDPSSODescriptor>


<!--    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">thairen.net.th</shibmd:Scope>
        </Extensions>

        --> <!-- First signing certificate is BackChannel, the Second is FrontChannel-->  <!--
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

	--> 
	<!--
	<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.thairen.net.th/idp/profile/SAML2/SOAP/AttributeQuery"/>  
	-->

	<!--
        --> <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above-->  <!--
        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.thairen.net.th/idp/profile/SAML1/SOAP/AttributeQuery"/>-->  <!--

    </AttributeAuthorityDescriptor>--> 

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">thairen.net.th</shibmd:Scope>
        </Extensions>

        <!-- First signing certificate is BackChannel, the Second is FrontChannel-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

	 
	
	<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.thairen.net.th/idp/profile/SAML2/SOAP/AttributeQuery"/>  

	<!--
        --> <!-- If you uncomment the above you should add urn:oasis:names:tc:SAML:2.0:protocol to the protocolSupportEnumeration above-->  <!--
        --> <!--<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.thairen.net.th/idp/profile/SAML1/SOAP/AttributeQuery"/>-->

    </AttributeAuthorityDescriptor>

    <Organization>
  	<OrganizationName xml:lang="en">ThaiREN IDP at idp.thairen.net.th</OrganizationName>
  	<OrganizationDisplayName xml:lang="en">Identity Provider for research and development institutes in Thailand</OrganizationDisplayName>
  	<OrganizationURL xml:lang="en">http://www.thairen.net.th/intro_th.php</OrganizationURL>
    </Organization>
    
    <ContactPerson contactType="support">
  	<GivenName>Kittinan</GivenName>
  	<SurName>Sriprasert</SurName>
  	<EmailAddress>mailto:kittinan@bknix.co.th</EmailAddress>
    </ContactPerson>

    <ContactPerson contactType="technical">
  	<GivenName>Thanapat</GivenName>
  	<SurName>Masnitas</SurName>
  	<EmailAddress>mailto:thanapat@bknix.co.th</EmailAddress>
    </ContactPerson>

    <ContactPerson contactType="administrative">
  	<GivenName>Nattanakit</GivenName>
  	<SurName>Panitsatapon</SurName>
  	<EmailAddress>mailto:nattanak@nectec.or.th</EmailAddress>
    </ContactPerson>
</EntityDescriptor>
