<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor
    xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
    entityID="https://servizi.comune.sesto-calende.va.it"
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
    xmlns:spid="https://spid.gov.it/saml-extensions"
    ID="_spid-miocomune">
    
    <SPSSODescriptor
        AuthnRequestsSigned="true"
        WantAssertionsSigned="true"
        protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

        <!-- Certificato pubblico firmatario -->
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>                        
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
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <!-- Certificato pubblico di crittografia -->
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>
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
                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

	<!-- Endpoint per il logout SAML -->
        <SingleLogoutService
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
            Location="https://servizi.comune.sesto-calende.va.it/spid/logout"/>

        <!-- Endpoint Assertion Consumer Service (ACS) -->
        <AssertionConsumerService
            index="0"
            isDefault="true"
            Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
            Location="https://servizi.comune.sesto-calende.va.it/spid/acs"/>

       	<AttributeConsumingService index="0">
            <ServiceName xml:lang="it">Set 0</ServiceName>
            <RequestedAttribute Name="name"/>
            <RequestedAttribute Name="familyName"/>
            <RequestedAttribute Name="fiscalNumber"/>
            <RequestedAttribute Name="email"/>
        </AttributeConsumingService>
        <AttributeConsumingService index="1">
            <ServiceName xml:lang="it">Set 1</ServiceName>
            <RequestedAttribute Name="spidCode"/>
            <RequestedAttribute Name="fiscalNumber"/>
        </AttributeConsumingService>


        <!-- Estensioni SPID per Service Provider privati 
        <Extensions>
            <spid:SPType>private</spid:SPType>
        </Extensions>
        -->


    </SPSSODescriptor>

    <!-- Contatti obbligatori -->
    <Organization>
        <OrganizationName xml:lang="it">S3C S.R.L.</OrganizationName>
        <OrganizationDisplayName xml:lang="it">Miocomune</OrganizationDisplayName>
        <OrganizationURL xml:lang="it">https://www.miocomune.eu</OrganizationURL>
    </Organization>

    <ContactPerson contactType="other" xmlns:spid="https://spid.gov.it/saml-extensions" >
        <Company>S3C S.R.L.</Company>
        <EmailAddress>administrator@s3c.it</EmailAddress>
        <TelephoneNumber>+390292853751</TelephoneNumber>
	<Extensions>
            <spid:VATNumber>08792290960</spid:VATNumber>
            <spid:FiscalCode>08792290960</spid:FiscalCode>
            <spid:Public/>            
        </Extensions> 
    </ContactPerson>

</EntityDescriptor>
