<?xml version="1.0"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://bestr.it/shibboleth" ID="https___bestr_it_shibboleth">
  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIC/jCCAeagAwIBAgIJAPpgF+20QQYSMA0GCSqGSIb3DQEBBQUAMBMxETAPBgNV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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIIC/jCCAeagAwIBAgIJAPpgF+20QQYSMA0GCSqGSIb3DQEBBQUAMBMxETAPBgNV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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
      
    </KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bestr.it/auth/logout"/>
    <AssertionConsumerService index="1" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://bestr.it/shibboleth/assert"/>
  </SPSSODescriptor>
</EntityDescriptor>