<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<EntityDescriptor entityID="https://am.retarus.com" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
    <IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <ArtifactResolutionService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/ArtifactResolver/metaAlias/idp"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://am.retarus.com:443/openam/IDPSloRedirect/metaAlias/idp" ResponseLocation="https://am.retarus.com:443/openam/IDPSloRedirect/metaAlias/idp"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://am.retarus.com:443/openam/IDPSloPOST/metaAlias/idp" ResponseLocation="https://am.retarus.com:443/openam/IDPSloPOST/metaAlias/idp"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/IDPSloSoap/metaAlias/idp"/>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://am.retarus.com:443/openam/IDPMniRedirect/metaAlias/idp" ResponseLocation="https://am.retarus.com:443/openam/IDPMniRedirect/metaAlias/idp"/>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://am.retarus.com:443/openam/IDPMniPOST/metaAlias/idp" ResponseLocation="https://am.retarus.com:443/openam/IDPMniPOST/metaAlias/idp"/>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/IDPMniSoap/metaAlias/idp"/>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</NameIDFormat>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://am.retarus.com:443/openam/SSORedirect/metaAlias/idp"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://am.retarus.com:443/openam/SSOPOST/metaAlias/idp"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/SSOSoap/metaAlias/idp"/>
        <NameIDMappingService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/NIMSoap/metaAlias/idp"/>
        <AssertionIDRequestService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/AIDReqSoap/IDPRole/metaAlias/idp"/>
        <AssertionIDRequestService Binding="urn:oasis:names:tc:SAML:2.0:bindings:URI" Location="https://am.retarus.com:443/openam/AIDReqUri/IDPRole/metaAlias/idp"/>
    </IDPSSODescriptor>
    <SPSSODescriptor AuthnRequestsSigned="false" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <KeyDescriptor use="signing">
            <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                <ds:X509Data>
                    <ds:X509Certificate>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==
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://am.retarus.com:443/openam/SPSloRedirect/metaAlias/sp" ResponseLocation="https://am.retarus.com:443/openam/SPSloRedirect/metaAlias/sp"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://am.retarus.com:443/openam/SPSloPOST/metaAlias/sp" ResponseLocation="https://am.retarus.com:443/openam/SPSloPOST/metaAlias/sp"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/SPSloSoap/metaAlias/sp"/>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://am.retarus.com:443/openam/SPMniRedirect/metaAlias/sp" ResponseLocation="https://am.retarus.com:443/openam/SPMniRedirect/metaAlias/sp"/>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://am.retarus.com:443/openam/SPMniPOST/metaAlias/sp" ResponseLocation="https://am.retarus.com:443/openam/SPMniPOST/metaAlias/sp"/>
        <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://am.retarus.com:443/openam/SPMniSoap/metaAlias/sp" ResponseLocation="https://am.retarus.com:443/openam/SPMniSoap/metaAlias/sp"/>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:kerberos</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</NameIDFormat>
        <AssertionConsumerService index="0" isDefault="true" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://am.retarus.com:443/openam/Consumer/metaAlias/sp"/>
        <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://am.retarus.com:443/openam/Consumer/metaAlias/sp"/>
        <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://am.retarus.com:443/openam/Consumer/ECP/metaAlias/sp"/>
        <AttributeConsumingService index="1" isDefault="true">
            <ServiceName xml:lang="en">Retarus Enterprise Administration Services</ServiceName>
            <RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        </AttributeConsumingService>
    </SPSSODescriptor>
</EntityDescriptor>

