<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://login.max.gov/idp/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">

        <Extensions>
            <shibmd:Scope regexp="false">max.gov</shibmd:Scope>
        </Extensions>
       <KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.max.gov/idp/profile/Shibboleth/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.max.gov/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://login.max.gov/idp/profile/SAML2/POST-SimpleSign/SSO"/>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.max.gov/idp/profile/SAML2/Redirect/SSO"/>
    </IDPSSODescriptor>
</EntityDescriptor>
