<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://idp.ust.hk/idp/shibboleth">
    <md:Extensions>
      <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="https://hkaf.edu.hk" registrationInstant="2017-01-07T08:06:19Z">
        <mdrpi:RegistrationPolicy xml:lang="en">http://hkafaccessfed.github.io/info/policy/registration_policy</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
        <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category-support" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
        </saml:Attribute>
        <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
    </md:Extensions>
    <md:IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
          <mdui:DisplayName xml:lang="en">The Hong Kong University of Science and Technology</mdui:DisplayName>
          <mdui:Description xml:lang="en">HKUST Identity Provider</mdui:Description>
        </mdui:UIInfo>
        <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ust.hk</shibmd:Scope>
        <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">connect.ust.hk</shibmd:Scope>
        <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">alumni.ust.hk</shibmd:Scope>
      </md:Extensions>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509SubjectName>CN=idp.ust.hk</ds:X509SubjectName>
            <ds:X509Certificate>MIIDFDCCAfygAwIBAgIVAP5+WhGBzJxmxEQN/rBpzY44KzIWMA0GCSqGSIb3DQEB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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509SubjectName>CN=idp.ust.hk</ds:X509SubjectName>
            <ds:X509Certificate>MIIDEzCCAfugAwIBAgIURFJ15L9/9brDVHKzTB8Taws/rW4wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509SubjectName>CN=idp.ust.hk</ds:X509SubjectName>
            <ds:X509Certificate>MIIDFDCCAfygAwIBAgIVAM23MPp++4dkPFh9Br5UakIK4t29MA0GCSqGSIb3DQEB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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ust.hk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2" isDefault="true"></md:ArtifactResolutionService>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.ust.hk/idp/profile/SAML2/POST/SSO"></md:SingleSignOnService>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ust.hk/idp/profile/SAML2/Redirect/SSO"></md:SingleSignOnService>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ust.hk/idp/profile/SAML2/SOAP/ECP"></md:SingleSignOnService>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonEntitlement" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="surname" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="schacHomeOrganization" Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="commonName" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="organizationName" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
    </md:IDPSSODescriptor>
    <md:AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">ust.hk</shibmd:Scope>
        <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">connect.ust.hk</shibmd:Scope>
        <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">alumni.ust.hk</shibmd:Scope>
      </md:Extensions>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509SubjectName>CN=idp.ust.hk</ds:X509SubjectName>
            <ds:X509Certificate>MIIDFDCCAfygAwIBAgIVAP5+WhGBzJxmxEQN/rBpzY44KzIWMA0GCSqGSIb3DQEB
CwUAMBUxEzARBgNVBAMMCmlkcC51c3QuaGswHhcNMTYxMjEzMDUwMTM5WhcNMzYx
MjEzMDUwMTM5WjAVMRMwEQYDVQQDDAppZHAudXN0LmhrMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAlHSNfSsSlO+DbP1Prpv5VTIRJPIIURrwkR5eRCxo
lVkXmTT6EqEOnKp0gdJF0wyWiWm6GHrTcOa+wuYQQIVNWE+cNvGf93mvuKyiszGh
ZnSNfb0cSQFrXHvMi1yoFxoUcVv4hxJs7L9LAlg1EpQ6vBLWSKSXrpiODhg9x7mA
lfvwZlfH/xYiumwGOB9+gRS0v2c1huJm5S6IMhEjnFMToWP5z3HMloCkKai0IbHd
mphsyPZCnjkeXcensqOWwxurql4S+/cKON4iiwmZWENFPADqfIfkYcw9hnJUPUOi
oU9sudknCP+zXcwvvjWDDQaI1u7N2frpoolkiAKF307XRQIDAQABo1swWTAdBgNV
HQ4EFgQUyMAbZNbOEAbb45CzrdkhdxI8/bIwOAYDVR0RBDEwL4IKaWRwLnVzdC5o
a4YhaHR0cHM6Ly9pZHAudXN0LmhrL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB
CwUAA4IBAQB1NViBJQFOnEhF3HHOcO6vcZR+bJglkmogtLJ9HBbEl08wZnqYdaM5
1/JVQCjjosAcCXSZb9Q7sEQ379XyUqKLj8g9d/AGk7SIt+7wCds2lCkR/qaewOSP
AVFIoXZbFwkUZz8XpoOU8CkjfGx9vy9czBRz4ygu4NkZOCJ3tD01meshPH73MJOF
jNCSTmX1wyjNfNveqAlQtO0zy+WrCym/dPTuNburTG951+5DfYOP8xvxnCVhFWi3
2LFFEMLY1ZStvTPadpEFww4e0L0k7csUovgiq2/7ifPOJNJvR/GIqODlB+ag4i2f
gauAuzm/KQcB2Va7lgRPn8CCSl6d0oxU</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509SubjectName>CN=idp.ust.hk</ds:X509SubjectName>
            <ds:X509Certificate>MIIDEzCCAfugAwIBAgIURFJ15L9/9brDVHKzTB8Taws/rW4wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
          <ds:X509Data>
            <ds:X509SubjectName>CN=idp.ust.hk</ds:X509SubjectName>
            <ds:X509Certificate>MIIDFDCCAfygAwIBAgIVAM23MPp++4dkPFh9Br5UakIK4t29MA0GCSqGSIb3DQEB
CwUAMBUxEzARBgNVBAMMCmlkcC51c3QuaGswHhcNMTYxMjEzMDUwMTM5WhcNMzYx
MjEzMDUwMTM5WjAVMRMwEQYDVQQDDAppZHAudXN0LmhrMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA1fCS846vj3azHwxWBNsEaYCc5IKR+4qSq76MSUFB
KGTagmKw+w4q05aBFHrJxPTsVC0osPcz18n6ZFTybAXpMM/UHwwbfMubyk4Wz2Yv
eRXWZPQmfLQIHqciLF5VbgTp7nm2bsxQiDL3BvWGmGFJhWwynw3MMVQdrgm0RrzZ
yECw2QIRTFKW5zdsGcV35mSc/gEGakP9ElpP17LEzDlScxEYy04TEDPOxg5aMzMr
fVvNMWh2W7iRdhNaDHfFeWRYFQ2t4+B5lo19nJknoAQqTwLgHERmkUPILy3RQfr9
bOK4C7TRhjrWpAPQEaXuxe7qzu/j4vvHNL7BatpawZIBjQIDAQABo1swWTAdBgNV
HQ4EFgQUE8IZ+6Un9ktDSBpO/nNFMGzLlK4wOAYDVR0RBDEwL4IKaWRwLnVzdC5o
a4YhaHR0cHM6Ly9pZHAudXN0LmhrL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB
CwUAA4IBAQCs8B65njLmhj85AdjEUNgZpOZGTrkzO4ivgnR1TXJik9UshFiKXKW8
RZCFMQ9QO/k04mfnvvyva25O067t8uUrQqIfC7ZeTOqFDY4hDzQ0HdV73SvPXAxy
2UMURZLI8T3SsSho+0eeUZb3VxSMdS5jo2ahRvW62ai7DaqXFCeiJ8Fm3LhWJay3
dLR2KsNVHVt90yIgS7nKh3sGbaWwa3utqJoN//2Vn8SbJcGdZ7xRF/zcVmL+y9AV
T5cGsVGY1LJbuGYXY0LbdqK2AIf6xKWfRa5/Mia0glmugajNnjjDXW108YOFQL7i
/EqAEWAQcQ95pUz5BGpswhAO+j4OzhUy</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.ust.hk:8443/idp/profile/SAML2/SOAP/AttributeQuery"></md:AttributeService>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonEntitlement" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="surname" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="schacHomeOrganization" Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="commonName" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="organizationName" Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
      <saml:Attribute xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" FriendlyName="eduPersonAssurance" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.11" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"></saml:Attribute>
    </md:AttributeAuthorityDescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">ust.hk</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">The Hong Kong University of Science and Technology</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.ust.hk</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:Company>The Hong Kong University of Science and Technology</md:Company>
      <md:GivenName>Yiu-Fai</md:GivenName>
      <md:SurName>LAI</md:SurName>
      <md:EmailAddress>mailto:ccyflai@ust.hk</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:GivenName>IT Security Incident</md:GivenName>
      <md:EmailAddress>mailto:security@ust.hk</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>