<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr"  entityID="https://idp.gxc.io/idp/shibboleth">

    <IDPSSODescriptor WantAuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">gxc.io</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">Onyx IdP</mdui:DisplayName>
                <mdui:Description xml:lang="en">Onyx IdP - GXC</mdui:Description>
                <mdui:Logo height="80" width="80">https://nms-images-1.s3.us-west-2.amazonaws.com/placeholder-gxc-logo.png</mdui:Logo>
            </mdui:UIInfo>
        </Extensions>

	<!-- First signing certificate is BackChannel, the Second is FrontChannel-->
	<!--Valid Until: Aug 24 08:04:44 2043 GMT-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
	
	<!--Valid Until: Aug 24 08:04:44 2043 GMT-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
	
	<!--Valid Until: Aug 24 08:04:44 2043 GMT-->
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIEEzCCAnugAwIBAgIUWI5+HkN1ouywsuKbY+HCnIfU7ZMwDQYJKoZIhvcNAQEL
BQAwFTETMBEGA1UEAwwKaWRwLmd4Yy5pbzAeFw0yMzA4MjQwODA0NDRaFw00MzA4
MjQwODA0NDRaMBUxEzARBgNVBAMMCmlkcC5neGMuaW8wggGiMA0GCSqGSIb3DQEB
AQUAA4IBjwAwggGKAoIBgQCyf92pAKarIdeeJt9XkiwPyzIfR7CkZNWKndXw4Zg6
vp2zefk7zfxgbfbfw4hi/fhfaefTOPOPvTy2QksbNor+XVOdBKgoW2mhb1BVz0CC
gOKgTECYLBnRgUQgBSv/UVr6vni4DgsuKk89I5h08HrRAkTUDI0cfrVOTyPZoE35
jz/JNII05MIkh+KPPPbIHXUkpZyR6kF5eCOuToa94UoQLL7nng6JhgvcjuNrMMHG
wXaB8Mcmwn/0QbCemM49IXZNA4FLuCg+qVvJmc3GTaLad+7FE76YHmrieyrIERqH
eiLSkMm4FkztxUFHmkCTpcZCM4BJr3LyKXEysjobvQ0IhRvoUh96JLBJfAg2BgQy
/vofCp6TQt+GyL8lryKiKuv/5WMwsSUxCKAfVWDfsAW0PtyeD4W8fbYC9BofvFcO
cFKCakeKFlwxJGcPxrh2HU3epiSe7A/5gbW2vDiVtJwJxe8fwFJ1Vkh6abGkWudn
BjxPdTWeSisEhGrM3rHgWBUCAwEAAaNbMFkwHQYDVR0OBBYEFL6vZHH4bZ8/4Z5t
CNAizAF3wUTcMDgGA1UdEQQxMC+CCmlkcC5neGMuaW+GIWh0dHBzOi8vaWRwLmd4
Yy5pby9pZHAvc2hpYmJvbGV0aDANBgkqhkiG9w0BAQsFAAOCAYEAUk8d8/zXuMPH
W7HUBvdvThxGIYBrcywJ4/EAAn9vZnaGn6RE5GnMRpn8KBQlq9vMp4HDd2o+112l
IHzEBmJSDcZO0/NgeYalVEfMocaZvHwvhm2oaWp9B8BTp/7sNNBDOJsxtaMCnG/x
Pw10zieRs1CLDyEPAbaejVFP5Px1FB2n+fhwejIScxmrxVvkHhEd1WHSA/tOBn7r
5C9UwFoUcvpwjfikuIj0y2BGOZGs7xcxLRz92k2KXCzlK/bP3Z/ISemDzo9ZCJiq
WWxOQG6GRJxZxScB6sLURgEuh/ShHwqR8HlhbQNqRWaulmatnX07pKYm3R8PsJ4G
1O8U62YFwlmZjuN4MhADe/162ujxSO4Lak7XV70JpjckwVO10+3SQfg6fBlDeoB3
vdIKKy4QkbWqj9SXnWPMef7MwIbfisZStmpGYIGrjSo6wBKiJWjSfW/DFaPosstZ
+sqkD6W4Fi6HTZGS0ZWFu32n7w25DMSpn1PMNM07RVqtyhvWq48L
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.gxc.io:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="1"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.gxc.io/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.gxc.io/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.gxc.io/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.gxc.io:8443/idp/profile/SAML2/SOAP/SLO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://idp.gxc.io/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://idp.gxc.io/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://idp.gxc.io/idp/profile/SAML2/POST/SSO"/>
    </IDPSSODescriptor>

    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">gxc.io</shibmd:Scope>
        </Extensions>

	<AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.gxc.io:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
    </AttributeAuthorityDescriptor> 

    <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"  WantAssertionsSigned="true" AuthnRequestsSigned="true">

	<!--Valid Until: Aug 24 08:04:44 2043 GMT-->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
			<ds:X509Certificate>
MIIEFDCCAnygAwIBAgIVAJNFLERWE0TU3pSnjJNDu7SRXiIoMA0GCSqGSIb3DQEB
CwUAMBUxEzARBgNVBAMMCmlkcC5neGMuaW8wHhcNMjMwODI0MDgwNDQzWhcNNDMw
ODI0MDgwNDQzWjAVMRMwEQYDVQQDDAppZHAuZ3hjLmlvMIIBojANBgkqhkiG9w0B
AQEFAAOCAY8AMIIBigKCAYEAnqSsNnebqwG5YYlbCulWZILf0RactSxywT1SEKiB
kUkfF1Y8uGljYPZ2hvBgoaWEnCx13HOJ7nDJ/9tXbTgL+EB6WhOIaB7NUpZqsDf2
02hKrlgVNC00Hwphn10SLXQsIi28aiYeM51OOQjIButlkxXtAlLPYk1R1lRBfihf
XlA5docC65WRW4g5JEztR27YPU3eqbowvhnyYLnj9tpQ5Wp3HjavP+u5ubUUp47+
ukLGlIDv6V1OgAvWrHSc9KYQ0Pb6pAAZwJxESkZveH+7HZJJjr4Qvd3daqSQA3Mi
Da2qV9iXV2+CDdroKHG/WCyZHvXkCyrfYzCE9JiksT2g9Z4sk3jyAwV/8F19Ku0z
uY3xxo9hlp+uIRBAyf1Emh/+H1/C6B5BV4w47WUsa5xdDo1Uya1+mpgBQxi6JnJU
rw03i8fwgMrBsndXdxEZf02yzwjSd8n/2f2eu1zh1TQwHe9/lUTZuBOXFZlEZiPK
X1OXR8R0mVXwfMMSDOuCMzXzAgMBAAGjWzBZMB0GA1UdDgQWBBTl0ifX7BNL5vmO
A6tlP9BmKHphezA4BgNVHREEMTAvggppZHAuZ3hjLmlvhiFodHRwczovL2lkcC5n
eGMuaW8vaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQELBQADggGBACUp0UHthDLt
Ry3VbxG5uvGxw+fR3X6FimhtyfaATdjwBXtZKoHHvOc3qawZKGoj4bgACua7IAb7
hM+G/x+y+PIqYON22Pge7K9U85OcI5sJ1MBsW+CEiT7deVDLdIr8y9Ohxi+KH8QE
3737jX9rrW6YFTQUawzkfwJ7d4gNVk0J9YP1Y1NUsKE+5RRwJl8wearxnXQ4CG3I
CCg16OU7tAXn5wNDKm1AjOru417Q2UBRAXW/ttE1DY8na6tJOjsKpnji4xDfMlQV
Ul9BV3CSSokO1jbaXDenyb9z7aOiSE6UKgKcWsjt+ZcwPpY5TI41LHwLmW24vQTX
qYRf2JxUxuksYm2cxTdBZrzJNrimuHE3i2BOHIs8C5ZuFF9LmOrwqaDUVbBbxQcA
1qHmGn1wXz4tqRbRB6rLJx86c8rg8u83fIN9SNlg9Pi/+l5iYEeCBebwuuiy2hw2
yH+Tsk8vobnOKrj1qUvOmTQ/N2GqNs/INKv6kIyifn0p0s0KlBm3hw==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
	
	<!--Valid Until: Aug 24 08:04:44 2043 GMT-->
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
			<ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.gxc.io/idp/profile/Authn/SAML2/POST/SSO" index="0"/>
    </SPSSODescriptor>
</EntityDescriptor>
