<?xml version="1.0" encoding="UTF-8" standalone="no"?>

<!--
	SPID Service Provider Metadata
	Valid as per "Regole Tecniche SPID v34.1.14"
-->

<EntityDescriptor
	xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:spid="https://spid.gov.it/saml-extensions"
	xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata https://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd
											http://www.w3.org/2000/09/xmldsig# https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd"
	ID="_9y50lcofyeooi3640mwpswxnhefrg3s38hq51qryzpw"
	entityID="https://www.unisa.it/spidp"
>

	<!-- SPID Metadata Signature -->
	<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
		<SignedInfo>
			<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
			<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
			<Reference URI="#_9y50lcofyeooi3640mwpswxnhefrg3s38hq51qryzpw">
				<Transforms>
					<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
					<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
				</Transforms>
				<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
				<DigestValue>
					ObN6NXQqgyDTuUVYnDEwuf4nivsY3YFV7/15zszctfJLewNqlyT3slbKwPZUuR4F28tUC8Vr1S1MLF9v7UlsHA==
				</DigestValue>
			</Reference>
		</SignedInfo>
		<SignatureValue>
			HW7A18wkEXrcrvt79zJxyU1PoxmUhCklOC6zE/fiOaIjmSdOtgJZYXdPCABlFp3yQF/yUQZN
			4YSyWqNs8aR+uFslZvz8FsFXGEiEp8HQ7Z1bjy+PEbrZT4tC/4WIxg3zdP++kskP9I5Y/JAR
			nS1znC98h7W5UmCKACNJTrQdVj72TAeRq7uEdsL2HcjBETxe3cI4HnJFnUC9T0XW78WIrfoN
			xXJmi0Jre9VbK0V1mSrhxzTcKyYHjSOWxXhRjVf3wKiJZtUztKlepE5Ab4pNvO4NaRRvqL2M
			4D6e5tHboGweUZOePurxg00/5AdJtB8N8Q+y0z9etQuYMQZ6lkMxbw==
		</SignatureValue>
		<KeyInfo>
			<KeyValue>
				<RSAKeyValue>
					<Modulus>
						pIyvpSBnd+m8SrJgSNTUqm/nlwWdqVJaxv3pXzLcgYHQKq56KiQS4Dp4DOibnCYsoa
			VsQLacvcRMW6yuEhoSbNJD1cfnEMEgvb1B5kq6aAsOBmg77d7joeR6FoSCIdef+/q7
			GXsxz2vdlmZA1o/1yT8tSYC3etXMSdIAA8yZr+ai+6/o820YgyiVhcnrQOF6ig/vyO
			e3Vp2Ovz/I8VEklOik1LcJPEEyZkiyW25mzYexyCvB5mTjkfDLHQEU+4/Bsnbyb73G
			zUnMfKvtTFgfGbhJs9nisUyj4lBrY1hrG5t+EnzRyGR2PNrjDjzHPlZIHjyiGqdee/
						k1hdA3XIxsaQ==
					</Modulus>
					<Exponent>AQAB</Exponent>
				</RSAKeyValue>
			</KeyValue>
			<X509Data>
				<X509Certificate>
					MIIEETCCAvmgAwIBAgIJAO8604yQdtxHMA0GCSqGSIb3DQEBCwUAMIGeMQswCQYDVQQG
			EwJJVDEOMAwGA1UECAwFSXRhbHkxEDAOBgNVBAcMB1NhbGVybm8xLTArBgNVBAoMJFVu
			aXZlcnNpdMODwqAgZGVnbGkgU3R1ZGkgZGkgU2FsZXJubzEcMBoGA1UEAwwTaHR0cDov
			L3d3dy51bmlzYS5pdDEgMB4GCSqGSIb3DQEJARYRYXNwYXJhbm9AdW5pc2EuaXQwHhcN
			MTcxMTMwMTAxNTAwWhcNMjcxMTMwMTAxNTAwWjCBnjELMAkGA1UEBhMCSVQxDjAMBgNV
			BAgMBUl0YWx5MRAwDgYDVQQHDAdTYWxlcm5vMS0wKwYDVQQKDCRVbml2ZXJzaXTDg8Kg
			IGRlZ2xpIFN0dWRpIGRpIFNhbGVybm8xHDAaBgNVBAMME2h0dHA6Ly93d3cudW5pc2Eu
			aXQxIDAeBgkqhkiG9w0BCQEWEWFzcGFyYW5vQHVuaXNhLml0MIIBIjANBgkqhkiG9w0B
			AQEFAAOCAQ8AMIIBCgKCAQEApIyvpSBnd+m8SrJgSNTUqm/nlwWdqVJaxv3pXzLcgYHQ
			Kq56KiQS4Dp4DOibnCYsoaVsQLacvcRMW6yuEhoSbNJD1cfnEMEgvb1B5kq6aAsOBmg7
			7d7joeR6FoSCIdef+/q7GXsxz2vdlmZA1o/1yT8tSYC3etXMSdIAA8yZr+ai+6/o820Y
			gyiVhcnrQOF6ig/vyOe3Vp2Ovz/I8VEklOik1LcJPEEyZkiyW25mzYexyCvB5mTjkfDL
			HQEU+4/Bsnbyb73GzUnMfKvtTFgfGbhJs9nisUyj4lBrY1hrG5t+EnzRyGR2PNrjDjzH
			PlZIHjyiGqdee/k1hdA3XIxsaQIDAQABo1AwTjAdBgNVHQ4EFgQUVXQVIZ8fPu+Wok9r
			FR0rw7h9tjUwHwYDVR0jBBgwFoAUVXQVIZ8fPu+Wok9rFR0rw7h9tjUwDAYDVR0TBAUw
			AwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAcCqDVnFCu1rIRa19kWkSRxUd+pseolAUgfjq
			bdoYPAnxl+keWuaoVI71Ypycmfaveut/pZk0pGWIB7YEHdopO+ZfotGosDAL6jOVb9hk
			YK3AUQMo8w2zpcTGsopz12L3OiA+JwR+Hi1lllFVv5F91ch9DxnrFeFfm7kGhShgPFca
			cHOQzh/dmLXoFims2VDEdkEEKMMeXqdndinM0qUxfrGNKztmu7RkaZfbP2NtBsRqDtzn
			yxdfWUhJi4T4Kde1NOBkmm6fM1vv/Z7MQI4aNGGN3LZBcZoSzq2IjngngP8UM4veVZXa
			pT3Wd0Gkzn3Ux9duwCNWo50qJBkb9wWxEA==
				</X509Certificate>
			</X509Data>
		</KeyInfo>
	</Signature>

	<SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true"
		protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

		<KeyDescriptor use="signing">
			<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
				<X509Data>
					<X509Certificate>
						MIIEETCCAvmgAwIBAgIJAO8604yQdtxHMA0GCSqGSIb3DQEBCwUAMIGeMQswCQYD
				VQQGEwJJVDEOMAwGA1UECAwFSXRhbHkxEDAOBgNVBAcMB1NhbGVybm8xLTArBgNV
				BAoMJFVuaXZlcnNpdMODwqAgZGVnbGkgU3R1ZGkgZGkgU2FsZXJubzEcMBoGA1UE
				AwwTaHR0cDovL3d3dy51bmlzYS5pdDEgMB4GCSqGSIb3DQEJARYRYXNwYXJhbm9A
				dW5pc2EuaXQwHhcNMTcxMTMwMTAxNTAwWhcNMjcxMTMwMTAxNTAwWjCBnjELMAkG
				A1UEBhMCSVQxDjAMBgNVBAgMBUl0YWx5MRAwDgYDVQQHDAdTYWxlcm5vMS0wKwYD
				VQQKDCRVbml2ZXJzaXTDg8KgIGRlZ2xpIFN0dWRpIGRpIFNhbGVybm8xHDAaBgNV
				BAMME2h0dHA6Ly93d3cudW5pc2EuaXQxIDAeBgkqhkiG9w0BCQEWEWFzcGFyYW5v
				QHVuaXNhLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIyvpSBn
				d+m8SrJgSNTUqm/nlwWdqVJaxv3pXzLcgYHQKq56KiQS4Dp4DOibnCYsoaVsQLac
				vcRMW6yuEhoSbNJD1cfnEMEgvb1B5kq6aAsOBmg77d7joeR6FoSCIdef+/q7GXsx
				z2vdlmZA1o/1yT8tSYC3etXMSdIAA8yZr+ai+6/o820YgyiVhcnrQOF6ig/vyOe3
				Vp2Ovz/I8VEklOik1LcJPEEyZkiyW25mzYexyCvB5mTjkfDLHQEU+4/Bsnbyb73G
				zUnMfKvtTFgfGbhJs9nisUyj4lBrY1hrG5t+EnzRyGR2PNrjDjzHPlZIHjyiGqde
				e/k1hdA3XIxsaQIDAQABo1AwTjAdBgNVHQ4EFgQUVXQVIZ8fPu+Wok9rFR0rw7h9
				tjUwHwYDVR0jBBgwFoAUVXQVIZ8fPu+Wok9rFR0rw7h9tjUwDAYDVR0TBAUwAwEB
				/zANBgkqhkiG9w0BAQsFAAOCAQEAcCqDVnFCu1rIRa19kWkSRxUd+pseolAUgfjq
				bdoYPAnxl+keWuaoVI71Ypycmfaveut/pZk0pGWIB7YEHdopO+ZfotGosDAL6jOV
				b9hkYK3AUQMo8w2zpcTGsopz12L3OiA+JwR+Hi1lllFVv5F91ch9DxnrFeFfm7kG
				hShgPFcacHOQzh/dmLXoFims2VDEdkEEKMMeXqdndinM0qUxfrGNKztmu7RkaZfb
				P2NtBsRqDtznyxdfWUhJi4T4Kde1NOBkmm6fM1vv/Z7MQI4aNGGN3LZBcZoSzq2I
				jngngP8UM4veVZXapT3Wd0Gkzn3Ux9duwCNWo50qJBkb9wWxEA==
					</X509Certificate>
				</X509Data>
			</KeyInfo>
		</KeyDescriptor>

		<SingleLogoutService
			Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
			Location="https://auth.unisa.it/iam/SLO/Redirect"
		/>

		<SingleLogoutService
			Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
			Location="https://auth.unisa.it/iam/SLO/POST"
		/>

		<NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>

		<AssertionConsumerService index="0" isDefault="true"
			Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
			Location="https://auth.unisa.it/iam/SAML2/POST"
		/>

		<AssertionConsumerService index="1"
			Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
			Location="https://auth.unisa.it/iam1/SAML2/POST"
		/>

		<AttributeConsumingService index="0">
			<ServiceName xml:lang="en">
				SPID Natural Person Registration Attribute Set
			</ServiceName>
			<RequestedAttribute Name="spidCode"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="name"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="familyName"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="placeOfBirth"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="dateOfBirth"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="gender"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="fiscalNumber"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="idCard"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="mobilePhone"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="email"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="address"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
		</AttributeConsumingService>

		<AttributeConsumingService index="1">
			<ServiceName xml:lang="en">
				SPID Natural Person Reduced Attribute Set
			</ServiceName>
			<RequestedAttribute Name="spidCode"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="name"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="familyName"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="fiscalNumber"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
		</AttributeConsumingService>

		<!-- eIDAS ACS 99 - As per "Avviso eIDAS 01/2018" -->
		<AttributeConsumingService index="99">
			<ServiceName xml:lang="en">
				eIDAS Natural Person Minimum Attribute Set
			</ServiceName>
			<RequestedAttribute Name="spidCode"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="name"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="familyName"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="dateOfBirth"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
		</AttributeConsumingService>

		<!-- eIDAS ACS 100 - As per "Avviso eIDAS 01/2018" -->
		<AttributeConsumingService index="100">
			<ServiceName xml:lang="en">
				eIDAS Natural Person Full Attribute Set
			</ServiceName>
			<RequestedAttribute Name="spidCode"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="name"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="familyName"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="dateOfBirth"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="placeOfBirth"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="address"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
			<RequestedAttribute Name="gender"
				NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" />
		</AttributeConsumingService>

	</SPSSODescriptor>

	<!-- SPID Organization Data - As per "Regole Tecniche SPID v34.1.14" -->
	<Organization>
		<OrganizationName xml:lang="it">
			Università degli Studi di Salerno
		</OrganizationName>
		<OrganizationDisplayName xml:lang="it">
			Università degli Studi di Salerno
		</OrganizationDisplayName>
		<!-- OrganizationURL: MUST contain the URL to the SPID information page -->
		<OrganizationURL xml:lang="it">
			https://web.unisa.it/servizi-on-line/spid
		</OrganizationURL>
	</Organization>

	<!-- SPID ContactPerson - As per "Regole Tecniche SPID v34.1.14" -->
	<ContactPerson contactType="other">
		<Extensions>
			<spid:Public />
			<spid:IPACode>uni_sa</spid:IPACode>
		</Extensions>
	</ContactPerson>

</EntityDescriptor>
