<EntityDescriptor entityID="urn:example:idp" xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="signing">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data>
          <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sso.rwavault.bond/saml/sso"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.rwavault.bond/saml/sso"/>
    <Attribute Name="firstName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="First Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="lastName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Last Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="displayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Display Name" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="E-Mail Address" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="mobilePhone" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Mobile Phone" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="groups" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Groups" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
    <Attribute Name="userType" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="User Type" xmlns="urn:oasis:names:tc:SAML:2.0:assertion"/>
  </IDPSSODescriptor>
</EntityDescriptor>