<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xml="http://www.w3.org/XML/1998/namespace"
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr"
validUntil="2026-01-31T00:00:01.000Z" entityID="https://shib.medvik.cz/idp/shibboleth">

    <Extensions>
          <eduidmd:RepublishRequest xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0">
              <eduidmd:RepublishTarget>http://edugain.org/</eduidmd:RepublishTarget>
          </eduidmd:RepublishRequest>
          <shibmd:Scope regexp="false">medvik.cz</shibmd:Scope>
          <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
            <mdui:DisplayName xml:lang="en">National Medical Library, Prague - Medvik</mdui:DisplayName>
            <mdui:DisplayName xml:lang="cs">Národní lékařská knihovna - Medvik</mdui:DisplayName>
            <mdui:Description xml:lang="en">Identity Provider for users of NML.</mdui:Description>
            <mdui:Description xml:lang="cs">Identity Provider pro uživatele NLK.</mdui:Description>
            <mdui:InformationURL xml:lang="en">https://nlk.cz/en/</mdui:InformationURL>
            <mdui:InformationURL xml:lang="cs">https://nlk.cz/</mdui:InformationURL>
            <mdui:Logo width="57" height="40">https://www.medvik.cz/images/medvik-logo.png</mdui:Logo>
          </mdui:UIInfo>
    </Extensions>

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:mace:shibboleth:1.0">

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>
MIIDIzCCAgugAwIBAgIUZHwtWy3i7rGrqoNqeEmxki1iyAEwDQYJKoZIhvcNAQEL
BQAwGTEXMBUGA1UEAwwOc2hpYi5tZWR2aWsuY3owHhcNMTYwOTA1MTgwMTQyWhcN
MzYwOTA1MTgwMTQyWjAZMRcwFQYDVQQDDA5zaGliLm1lZHZpay5jejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4F2V4WUD4rPq0a9ZWci0Qh4QeitOhq
XHPQ/B9FSzwfao6pQxdjIw1rgAnnXffcQ4RecMToTvFJz/abnhGElERJ09gjcG+x
eBtXbxmmWsZZNrfr5DhvSkTllYzW/mfmaNXLTVH+03gnIlMqA/kFuwEC1d/GHeF2
EZTdg4djmuXtMeoGZZCjGilWHJqA98r0Byq2kK6fZrvOELpSRLJ9IUoHdFYOaREv
fPXywanuo5kumUhCvT0Tlrt/qZd48iT8Xfyzcq+F4Y0i3JcGZLAs8q0aPjfdwcII
5kPd/pwoIHA41Du5w5GrSiLliorLL2GJSd3HHjCyNpbaMZYcNqG0E8sCAwEAAaNj
MGEwHQYDVR0OBBYEFK2YUge8QXLZ8BhRAnLI2frJ8SCVMEAGA1UdEQQ5MDeCDnNo
aWIubWVkdmlrLmN6hiVodHRwczovL3NoaWIubWVkdmlrLmN6L2lkcC9zaGliYm9s
ZXRoMA0GCSqGSIb3DQEBCwUAA4IBAQBuYsS2+YCfzvzg78xfEZBOugkbp6BpQB4x
yjly2r5FT+l2OfTKE1nc2XBN+fw7j85hL7JDzR6uWI6pow+Ggd2fBZsZzAiJxDcq
cllwMTNFrAQYyqLJH9y8E5Us8lTzPs2cpeP9YWx3+gWTaEVMcwdhr1pKFjBD779L
DuxrnU0B0DnLG+7WbzecWfxeQAU28+/p5kpn5JijpLP5lRhENiJtst4K7q3g8ZCf
MJc0h6E3ajUAZaKaD/YwYLyvxyRQrX8AESVyQzDpmUpB5rKO5AIBjNbnVcwWEz4l
9losfbUnmlOr+doo1cKqELxsc5KiL3+j9dMaM8hYOmeWiGTLt/qX
                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>
        <KeyDescriptor use="encryption">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.medvik.cz/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>

        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib.medvik.cz/idp/profile/SAML2/Redirect/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib.medvik.cz/idp/profile/SAML2/POST/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib.medvik.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://shib.medvik.cz/idp/profile/SAML2/SOAP/SLO"/>

        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>

        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://shib.medvik.cz/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://shib.medvik.cz/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://shib.medvik.cz/idp/profile/SAML2/Redirect/SSO"/>

    </IDPSSODescriptor>

  <Organization xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
    <OrganizationName xml:lang="en">National Medical Library</OrganizationName>
    <OrganizationName xml:lang="cs">Národní lékařská knihovna</OrganizationName>
    <OrganizationDisplayName xml:lang="en">National Medical Library, Prague - Medvik</OrganizationDisplayName>
    <OrganizationDisplayName xml:lang="cs">Národní lékařská knihovna - Medvik</OrganizationDisplayName>
    <OrganizationURL xml:lang="en">https://nlk.cz/en/</OrganizationURL>
    <OrganizationURL xml:lang="cs">https://nlk.cz/</OrganizationURL>
  </Organization>

  <ContactPerson  xmlns="urn:oasis:names:tc:SAML:2.0:metadata" contactType="technical">
    <GivenName>Filip</GivenName>
    <SurName>Kriz</SurName>
    <EmailAddress>mailto:medvik@nlk.cz</EmailAddress>
  </ContactPerson>
</EntityDescriptor>
