<EntityDescriptor entityID="urn:example:idp" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="signing">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data>
          <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://auto.sso.samlserver.net/saml/sso"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://auto.sso.samlserver.net/saml/sso"/>
    <Attribute Name="firstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="First Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="lastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Last Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="displayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Display Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="E-Mail Address" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="mobilePhone" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Mobile Phone" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Groups" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="userType" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="User Type" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
  </IDPSSODescriptor>
</EntityDescriptor>