<!--
P@ja 10/2025
-->
<md:EntityDescriptor entityID="https://shib.zcu.cz/idp/shibboleth" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr">


  <md:Extensions>
    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
        <!-- Research and Scholarship -->
        <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
        <!-- Code of Conduct -->
        <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
      </saml:Attribute>
      <!-- Sirtfi -->
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification">
        <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
    </saml:Attribute>
    <!-- European Student Identifier Entity Category -->
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category-support">
                <saml:AttributeValue>https://myacademicid.org/entity-categories/esi</saml:AttributeValue>
      </saml:Attribute>
    </mdattr:EntityAttributes>
  </md:Extensions>

    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
        <md:Extensions>
            <shibmd:Scope regexp="false">zcu.cz</shibmd:Scope>


            	<!--P@ja -->
        	<mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">University of West Bohemia in Pilsen</mdui:DisplayName>
                <mdui:DisplayName xml:lang="cs">Západočeská univerzita v Plzni</mdui:DisplayName>
                <mdui:Description xml:lang="en">Identity Provider of the University of West Bohemia in Pilsen.</mdui:Description>
                <mdui:Description xml:lang="cs">Identity Provider Západočeské univerzity v Plzni.</mdui:Description>
                <mdui:InformationURL xml:lang="en">https://www.zcu.cz/en/</mdui:InformationURL>
                <mdui:InformationURL xml:lang="cs">https://www.zcu.cz/</mdui:InformationURL>
                <mdui:Logo height="102" width="102">https://shib.zcu.cz/idp/images/zcu_logo.png</mdui:Logo>
           </mdui:UIInfo>
           <!--P@ja end -->

        </md:Extensions>
        <md:KeyDescriptor use="signing">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>
        <md:KeyDescriptor use="encryption">
            <ds:KeyInfo>
                <ds:X509Data>
                    <ds:X509Certificate>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                    </ds:X509Certificate>
                </ds:X509Data>
            </ds:KeyInfo>
        </md:KeyDescriptor>

        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://shib.zcu.cz/idp/profile/SAML2/Redirect/SLO"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://shib.zcu.cz/idp/profile/SAML2/POST/SLO"/>
        <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://shib.zcu.cz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" req-attr:supportsRequestedAttributes="true" Location="https://shib.zcu.cz/idp/profile/SAML2/POST-SimpleSign/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" req-attr:supportsRequestedAttributes="true" Location="https://shib.zcu.cz/idp/profile/SAML2/Redirect/SSO" />
        <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" req-attr:supportsRequestedAttributes="true" Location="https://shib.zcu.cz/idp/profile/SAML2/POST/SSO" />
    </md:IDPSSODescriptor>


    <!--P@ja -->
    <md:Organization>
        <md:OrganizationName xml:lang="cs">Západočeská univerzita v Plzni</md:OrganizationName>
        <md:OrganizationName xml:lang="en">University of Pilsen</md:OrganizationName>
        <md:OrganizationDisplayName xml:lang="cs">Západočeská univerzita v Plzni</md:OrganizationDisplayName>
        <md:OrganizationDisplayName xml:lang="en">University of Pilsen</md:OrganizationDisplayName>
        <md:OrganizationURL xml:lang="cs">https://www.zcu.cz/</md:OrganizationURL>
        <md:OrganizationURL xml:lang="en">https://www.zcu.cz/en/</md:OrganizationURL>
    </md:Organization>
    
    <md:ContactPerson contactType="technical">
        <md:GivenName>Pavel</md:GivenName>
        <md:SurName>Jindra</md:SurName>
        <md:EmailAddress>mailto:paja@civ.zcu.cz</md:EmailAddress>
    </md:ContactPerson>

    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
        <md:GivenName>WEBnet-WIRT</md:GivenName>
        <md:EmailAddress>mailto:abuse@zcu.cz</md:EmailAddress>
    </md:ContactPerson>
<!--P@ja end -->

</md:EntityDescriptor>