<?xml version="1.0" encoding="UTF-8" standalone="no"?><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:spid="https://spid.gov.it/saml-extensions" xmlns:xsi="http://www.w3.org/2001/XMLSchemainstance" ID="_602bea9b377bb7fc157ef9068ec1851e1fcfe074" entityID="https://idp-idm.unimib.it/sp/shibboleth"><ds:Signature>
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>fLNxKazXmkCZve/ezcIN4GZSxQOhh+m7aveEVWzj57M=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
xqzgt+f+DqgnkddhrArZ/C37TIEwP7rNRNlDFixqfNMPFN9BKqeQtaB55/EssvSgLp8euI3hCt3m
URCZKdXB4md37DDwwblx6tfvq/HHnmaPE9pfuIykqEpeG/9wkLDCyaMGeTH6kVban1VACPRjs/zd
IOPIAlvvd/f2PGTxxvDiQ9rpaBiizNFDteVnul7VEjKKL8ZMeYtxeLKntcScvn87vdh+Hf6Rilvq
jZyW0lQzEAxvIxTPMHwp90uWyJgD63KUlzj4uI9LxAmXiuGjZz0owKtt0dl8jT23engSFDQRfxhS
BSk47IEHxA9DOyaZ7HXp+Cacu+G2nF2/dI3CKA==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:KeyValue>
<ds:RSAKeyValue>
<ds:Modulus>
2m+eo3tgoloUfcjagrSIT4bUVvkNASftN1a5blT9zr2ose1QfsOznaDaJcLggBjWthPHe6dsQqaq
FNlbaQtpGb5tvkD7/o4JJV3V4KagfmcqnSqszKmV+QkUGDcoFGOKPjkCvZjm9f9knc+V485CLer+
RDjki+zRTvX31y9wbKbQs60932iq3APxej+088e4S/n4npslU0QFFUMb8vMl21BX6fFMAo5CyHJC
U9Ru98RqAhBC5tjvQ6DQ+r0mByypdOCtknq3N1lfWCYZClmd4NiYGP/+5+wmb0ZPF85b1CMJ5Vsm
AcCw5f1fqTXo3hT3KmRsi3UBm3bWwruNAj+tDw==
</ds:Modulus>
<ds:Exponent>AQAB</ds:Exponent>
</ds:RSAKeyValue>
</ds:KeyValue>
<ds:X509Data>
<ds:X509Certificate>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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>

  <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

  	<md:KeyDescriptor use="signing">
  		<ds:KeyInfo>
  			<ds:KeyName>idp-idm.unimib.it</ds:KeyName>
  			<ds:X509Data>
  				<ds:X509Certificate>
  					MIIEBzCCAu+gAwIBAgIUfCr+DelyqBFTNcKSw/dm0Rx5jAIwDQYJKoZIhvcNAQEL
  					BQAwgbAxCzAJBgNVBAYTAklUMQ8wDQYDVQQHDAZNaWxhbm8xNjA0BgNVBAoMLVVu
  					aXZlcnNpdMODwqAgZGVnbGkgU3R1ZGkgZGkgTWlsYW5vIC0gQmljb2NjYTEPMA0G
  					A1UEAwwGdW5pbWliMRUwEwYDVQRhDAxQQTpJVC11bmltaWIxMDAuBgNVBFMMJ2h0
  					dHBzOi8vaWRwLWlkbS51bmltaWIuaXQvc3Avc2hpYmJvbGV0aDAeFw0yMjA3MjEx
  					NjA3MThaFw00MjA3MjAxNjA3MThaMIGwMQswCQYDVQQGEwJJVDEPMA0GA1UEBwwG
  					TWlsYW5vMTYwNAYDVQQKDC1Vbml2ZXJzaXTDg8KgIGRlZ2xpIFN0dWRpIGRpIE1p
  					bGFubyAtIEJpY29jY2ExDzANBgNVBAMMBnVuaW1pYjEVMBMGA1UEYQwMUEE6SVQt
  					dW5pbWliMTAwLgYDVQRTDCdodHRwczovL2lkcC1pZG0udW5pbWliLml0L3NwL3No
  					aWJib2xldGgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7E3y8olaS
  					qtqWqD/4d7XKKKHiQLUwrDR8Hz5xCFaEMm5/eDL2zBwWuk1wGf43/QTlCuTsckws
  					GiW4qXi0qUAoV3GE+mNKPi/cJeqNzSXYyxpQ7YArIGrvOCiLwwmdM2qfMWiZAnCQ
  					vMh02mbgkSy0cDbcfRuMi07EV6IG0eF9WF9NIQLpqkqRw7AR/9xndDGj1zQQCbnY
  					Sg90A+BJ4NNsfeet5ce7d1tEj5LLiknVwyzbXXLFKnxIu5lv7aipTVAYYfq2WbmE
  					2c6sY9t/yTG+NV0JJSl1wEhGxoVVDiIO/Ci6vvees5/mbxYpqTh1gNoNelvSP7uq
  					9kFIiWL6AvZnAgMBAAGjFzAVMBMGA1UdIAQMMAowCAYGK0wQBAIBMA0GCSqGSIb3
  					DQEBCwUAA4IBAQACh0yiK+q1xYoNARcF983gQ2SKhJD5TqTNjmnqHHW5leDiqvne
  					RXXKB8veH2ZYQcZx2r289EnlSrToPlAF6/hHgKz26FhaJuRAjKotj87lzcnN7gnL
  					dUp6YPLGVcPU0AMVEO2QRAv194qJal8YWQXrgMHzSlnQG7953s3AjuQwYkgKSrzD
  					jbWcnvtHELNF1NFcPdD3x/1DAFDtlB+VjgOMoTHFx5+HQnGyoNLpc1eeRm4JdAUj
  					JZunTHTwmbF69rawLmuSK2LuT9kpWMZsnld6U6HJ+Fx1zXr5r2Gxw6DuuLZVu+RJ
  					eRWKnhr+dAjhAJVfEl3pJrtWA6EsnkfQPxJL
  				</ds:X509Certificate>
  			</ds:X509Data>
  		</ds:KeyInfo>
  	</md:KeyDescriptor>

  	<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unimib.idp.pp.cineca.it/Shibboleth.sso/SLO/POST"/>
  	<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://unimib.idp.pp.cineca.it/Shibboleth.sso/SLO/Redirect"/>

  	<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-idm.unimib.it/Shibboleth.sso/SLO/POST"/>
  	<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-idm.unimib.it/Shibboleth.sso/SLO/Redirect"/>

  	<md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>

  	<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-idm.unimib.it/Shibboleth.sso/SAML2/POST" index="0" isDefault="true"/>
  	<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://unimib.idp.pp.cineca.it/Shibboleth.sso/SAML2/POST" index="1"/>

  	<md:AttributeConsumingService index="1">
  		<md:ServiceName xml:lang="it">Unimib SPID - Login</md:ServiceName>
  		<md:RequestedAttribute Name="name"/>
  		<md:RequestedAttribute Name="familyName"/>
  		<md:RequestedAttribute Name="fiscalNumber"/>
  		<md:RequestedAttribute Name="spidCode"/>
  	</md:AttributeConsumingService>

  	<md:AttributeConsumingService index="2">
  		<md:ServiceName xml:lang="it">Unimib SPID - Intermediate set</md:ServiceName>
  		<md:RequestedAttribute Name="name"/>
  		<md:RequestedAttribute Name="familyName"/>
  		<md:RequestedAttribute Name="fiscalNumber"/>
  		<md:RequestedAttribute Name="spidCode"/>
  		<md:RequestedAttribute Name="email"/>
  	</md:AttributeConsumingService>

  	<md:AttributeConsumingService index="3">
  		<md:ServiceName xml:lang="it">Unimib SPID - Registrazione Prod</md:ServiceName>
  		<md:RequestedAttribute Name="name"/>
  		<md:RequestedAttribute Name="familyName"/>
  		<md:RequestedAttribute Name="fiscalNumber"/>
  		<md:RequestedAttribute Name="spidCode"/>
  		<md:RequestedAttribute Name="placeOfBirth"/>
  		<md:RequestedAttribute Name="dateOfBirth"/>
  		<md:RequestedAttribute Name="gender"/>
  		<md:RequestedAttribute Name="idCard"/>
  		<md:RequestedAttribute Name="mobilePhone"/>
  		<md:RequestedAttribute Name="email"/>
  		<md:RequestedAttribute Name="address"/>
  	</md:AttributeConsumingService>

  	<md:AttributeConsumingService index="99">
  		<md:ServiceName xml:lang="it">eIDAS Natural Person Minimum Attribute Set</md:ServiceName>
  		<md:RequestedAttribute Name="spidCode"/>
  		<md:RequestedAttribute Name="name"/>
  		<md:RequestedAttribute Name="familyName"/>
  		<md:RequestedAttribute Name="dateOfBirth"/>
  	</md:AttributeConsumingService>

  	<md:AttributeConsumingService index="100">
  		<md:ServiceName xml:lang="it">eIDAS Natural Person Full Attribute Set</md:ServiceName>
  		<md:RequestedAttribute Name="spidCode"/>
  		<md:RequestedAttribute Name="name"/>
  		<md:RequestedAttribute Name="familyName"/>
  		<md:RequestedAttribute Name="dateOfBirth"/>
  		<md:RequestedAttribute Name="placeOfBirth"/>
  		<md:RequestedAttribute Name="address"/>
  		<md:RequestedAttribute Name="gender"/>
  	</md:AttributeConsumingService>


  </md:SPSSODescriptor>

  <md:Organization>
  	<md:OrganizationName xml:lang="it">Universita' degli studi di Milano Bicocca</md:OrganizationName>
  	<md:OrganizationDisplayName xml:lang="it">Unimib</md:OrganizationDisplayName>
  	<md:OrganizationURL xml:lang="it">www.unimib.it</md:OrganizationURL>
  </md:Organization>

  <md:ContactPerson contactType="other">
  	<md:Extensions>
  		<spid:IPACode>unimib</spid:IPACode>
  		<spid:Public/>
  	</md:Extensions>
  	<md:EmailAddress>progetto.idm@unimib.it</md:EmailAddress>
  </md:ContactPerson>

  </md:EntityDescriptor>