<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="MITIDP20260911T142032" Name="https://shibboleth.mit.edu" validUntil="2026-10-09T00:00:00Z"><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#MITIDP20260911T142032">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>kGNJw10n8JOmxCQMbLyWPo2R5pXZuIJ8LMPlGPHFCEA=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
bwsW+L5J85NQuvedMhbuBAxcmkeGKtsx7drjobEvQ5MKci0YNnUPSEMnwEwXP7L41f3ZehnDZZGy
uAHcSfiQgFWR/locOB8KVofEIeVQs0liTrGUtmwYLYr1PsVn7ybcjfpCcSx/ZVhT7lSjTCNi3Nbi
kNaYdCW03RWDicPWK4pJTYaxUd5+sS6xOrqCKLCrzISoVQQPLGUbiLsBChxRL6jEJrya86tYC1eV
GV+TB542Gou/m5bhb7uGa49t+ot9TZrxmSjPfKEbbMSR/xhGGXjBmorxXrKr6Kqvi701zYMkFjlc
c7zhFA2g/XWPalkTLMTLQ+fJtZ9G90m2BGmN8Q==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:KeyValue>
<ds:RSAKeyValue>
<ds:Modulus>
uq3i/VyE0My+qLOPZu9FT9t4Sd37ekpJ3JWuyUK68erm3w5u9WFkTGcIedfUUx8mvG424TuebGCK
JM2UyoE4St85vs/MOLL31sL03Z4SgBx5m7rWah0VnPJuljESytT1i6yIwzBjTu1YWkMnUzSmjXIi
Z2b9l77rUFXM+EGV9CUXb8qa9qjyt97hk5+9FWJJOH+uVSDdWcMLTvpIiaOCybMBXst7m73ZVY/j
BViMDLH9FSz6h9gJ16Iwxmw2Dw1EIqlUMvQuv8+Agxkpt2bpqv4hSi2XPHVai0/k+0w247RjKORx
NNP9O3W4y0skQAURU4XVVEs6HBW2cZbEcS2hpQ==
</ds:Modulus>
<ds:Exponent>AQAB</ds:Exponent>
</ds:RSAKeyValue>
</ds:KeyValue>
<ds:X509Data>
<ds:X509Certificate>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==
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>

<!--
This is the set of metadata for MIT's Identity Providers.
-->

<!-- MIT's core IdP. -->
<EntityDescriptor entityID="https://idp.mit.edu/shibboleth">
	
	<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
		<Extensions>
			<!-- This is a Shibboleth extension to express attribute scope rules. -->
			<shibmd:Scope regexp="false">mit.edu</shibmd:Scope>
			<mdui:UIInfo>
				<mdui:DisplayName xml:lang="en">MIT's core IdP</mdui:DisplayName>
			</mdui:UIInfo>
		</Extensions>
		
		<!-- Serial AFF24B996D1A2ECC, expires Jul 25 21:50:17 2032 GMT -->
		<KeyDescriptor use="signing">
			<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</KeyDescriptor>

		<!-- back channel SSL, expires Dec  8 22:29:17 2032 GMT -->
		<KeyDescriptor use="signing">
			<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>
MIIC6DCCAdCgAwIBAgIJAP0eqSlRh9pKMA0GCSqGSIb3DQEBCwUAMBYxFDASBgNV
BAMTC2lkcC5taXQuZWR1MB4XDTIwMTIxMTIyMjkxN1oXDTMyMTIwODIyMjkxN1ow
FjEUMBIGA1UEAxMLaWRwLm1pdC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQC4by98s6BVftb37+L6Y/IDBTiFVZTkFBP7zkSaz7X/PyGKekqen3+o
7T8/vuj0K1oaqaEeBrJ6qsdOsTIepC3YVYXAfnt2k7iUyVUQITSmzUv2wBrdJvAO
FpUQbCoxtSFlyYTkvNG8/MdiuCz7BWWvCEHpqIQPFkSn/KlbNPqjsL4PibgCtoAa
MgG0uOU2h/LIHtCm/sR1FBQfkpVcgfapM4lZBCfW+A3Nuv/yjiK0SgDmg2sJZ6jD
YeF7ku8GoOyb5jYRSeDy66xc/3bjlJu7n35B8gyP1sOQuYmDZcZ19XbmvL1i+lI+
TKEFeqdGCeZXyEnj4cCumu0JBHTxlm8fAgMBAAGjOTA3MBYGA1UdEQQPMA2CC2lk
cC5taXQuZWR1MB0GA1UdDgQWBBSCEHZU2Af91f6OGvNzJCHoiusEmTANBgkqhkiG
9w0BAQsFAAOCAQEAIgy51GU2sHfkf0KLc+T0jvTfhd6hLgdfuK0k5FevFf3ijzWs
jDa0+GCqgCB7E3KdRW+91qAMurzL+w1TG0Xg7ZR/i9fkLqPCXd+QNOA0+pLAJbw3
9ewadCWa/RcS+S/U6C+dM6UI76Y6s+oKRlvnywgg6gVTmB22JdDzQwbW31X57PBa
w78HRLa31qjcr8scSpxHAiNXNkhyng+0M6BdVXfZ1tUpmAbTZu1dtr9hjwb5g3Xp
muf+0uu0+jmpuLFq/rYipCsTRgbTNnFcaWRSGvcnjA+GUNtUm+9Byty51jC3xbGL
VQI9rNbePGBuIdl+YdM9zCoRJSDnT9P+ZKyxmQ==
					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</KeyDescriptor>

		<!-- This tells SPs how and where to request authentication. -->
		<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.mit.edu/idp/profile/Shibboleth/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.mit.edu/idp/profile/SAML2/POST/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.mit.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.mit.edu/idp/profile/SAML2/Redirect/SSO"/>

	</IDPSSODescriptor>
	
	<!-- This is just information about the entity in human terms. -->
	<Organization>
	    <OrganizationName xml:lang="en">MIT IS&amp;T</OrganizationName>
	    <OrganizationDisplayName xml:lang="en">MIT Information Systems and Technology</OrganizationDisplayName>
	    <OrganizationURL xml:lang="en">http://ist.mit.edu</OrganizationURL>
	</Organization>
	<ContactPerson contactType="technical">
	    <EmailAddress>touchstone-support@mit.edu</EmailAddress>
	</ContactPerson>

</EntityDescriptor>

<!-- MIT's core staging IdP. -->
<EntityDescriptor entityID="https://idp-staging.mit.edu/shibboleth">
	
	<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
		<Extensions>
			<!-- This is a Shibboleth extension to express attribute scope rules. -->
			<shibmd:Scope regexp="false">mit.edu</shibmd:Scope>
			<mdui:UIInfo>
				<mdui:DisplayName xml:lang="en">MIT's core staging IdP</mdui:DisplayName>
			</mdui:UIInfo>
		</Extensions>
		
		<!-- expires Nov. 10 2033 -->
		<KeyDescriptor use="signing">
			<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</KeyDescriptor>

		<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp-staging.mit.edu/idp/profile/Shibboleth/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-staging.mit.edu/idp/profile/SAML2/POST/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-staging.mit.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-staging.mit.edu/idp/profile/SAML2/Redirect/SSO"/>

	</IDPSSODescriptor>
	
	<!-- This is just information about the entity in human terms. -->
	<Organization>
	    <OrganizationName xml:lang="en">MIT IS&amp;T</OrganizationName>
	    <OrganizationDisplayName xml:lang="en">MIT Information Systems and Technology</OrganizationDisplayName>
	    <OrganizationURL xml:lang="en">http://ist.mit.edu</OrganizationURL>
	</Organization>
	<ContactPerson contactType="technical">
	    <EmailAddress>touchstone-support@mit.edu</EmailAddress>
	</ContactPerson>

</EntityDescriptor>

<!-- idp-cams-staging.mit.edu, CAMS staging IdP. -->
<EntityDescriptor entityID="https://idp-cams-staging.mit.edu/shibboleth-idp">

	<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
		
		<Extensions>
			<!-- This is a Shibboleth extension to express attribute scope rules. -->
			<shibmd:Scope regexp="false">touchstonenetwork.net</shibmd:Scope>
			<mdui:UIInfo>
				<mdui:DisplayName xml:lang="en">MIT's CAMS staging IdP</mdui:DisplayName>
			</mdui:UIInfo>
		</Extensions>

		<KeyDescriptor use="signing">
			<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</KeyDescriptor>

		<!-- This tells SPs how and where to request authentication. -->
		<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp-cams-staging.mit.edu/idp/profile/Shibboleth/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-cams-staging.mit.edu/idp/profile/SAML2/POST/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-cams-staging.mit.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        
		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-cams-staging.mit.edu/idp/profile/SAML2/Redirect/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp-cams-staging.mit.edu/idp/profile/SAML2/SOAP/ECP"/>

	</IDPSSODescriptor>
	
	<!-- This is just information about the entity in human terms. -->
	<Organization>
	    <OrganizationName xml:lang="en">MIT IS&amp;T</OrganizationName>
	    <OrganizationDisplayName xml:lang="en">MIT Information Systems and Technology</OrganizationDisplayName>
	    <OrganizationURL xml:lang="en">http://ist.mit.edu</OrganizationURL>
	</Organization>
	<ContactPerson contactType="technical">
	    <EmailAddress>touchstone-support@mit.edu</EmailAddress>
	</ContactPerson>

</EntityDescriptor>

<!-- idp.touchstonenetwork.net, CAMS IdP. -->
<EntityDescriptor entityID="https://idp.touchstonenetwork.net/shibboleth-idp">
	
	<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:2.0:protocol">
		
		<Extensions>
			<!-- This is a Shibboleth extension to express attribute scope rules. -->
			<shibmd:Scope regexp="false">touchstonenetwork.net</shibmd:Scope>
			<mdui:UIInfo>
				<mdui:DisplayName xml:lang="en">MIT's Collaboration Accounts IdP</mdui:DisplayName>
			</mdui:UIInfo>
		</Extensions>

		<KeyDescriptor use="signing">
			<ds:KeyInfo>
				<ds:X509Data>
					<ds:X509Certificate>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					</ds:X509Certificate>
				</ds:X509Data>
			</ds:KeyInfo>
		</KeyDescriptor>

		<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.touchstonenetwork.net/idp/profile/Shibboleth/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.touchstonenetwork.net/idp/profile/SAML2/POST/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.touchstonenetwork.net/idp/profile/SAML2/POST-SimpleSign/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.touchstonenetwork.net/idp/profile/SAML2/Redirect/SSO"/>

		<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.touchstonenetwork.net/idp/profile/SAML2/SOAP/ECP"/>

	</IDPSSODescriptor>
	
	<!-- This is just information about the entity in human terms. -->
	<Organization>
	    <OrganizationName xml:lang="en">MIT IS&amp;T</OrganizationName>
	    <OrganizationDisplayName xml:lang="en">MIT Information Systems and Technology</OrganizationDisplayName>
	    <OrganizationURL xml:lang="en">http://ist.mit.edu</OrganizationURL>
	</Organization>
	<ContactPerson contactType="technical">
	    <EmailAddress>touchstone-support@mit.edu</EmailAddress>
	</ContactPerson>

</EntityDescriptor>

<!-- Alum staging IdP -->
<EntityDescriptor entityID="https://idp-alum-staging.mit.edu/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">alum.mit.edu</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">MIT's Alumni staging IdP</mdui:DisplayName>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>
        </KeyDescriptor>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp-alum-staging.mit.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-alum-staging.mit.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-alum-staging.mit.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-alum-staging.mit.edu/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp-alum-staging.mit.edu/idp/profile/SAML2/SOAP/ECP"/>

    </IDPSSODescriptor>

    <Organization>
        <OrganizationName xml:lang="en">MIT IS&amp;T</OrganizationName>
        <OrganizationDisplayName xml:lang="en">MIT Information Systems and Technology</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">http://ist.mit.edu</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
        <EmailAddress>touchstone-support@mit.edu</EmailAddress>
    </ContactPerson>

</EntityDescriptor>

<!-- Production Alum IdP -->
<EntityDescriptor entityID="https://idp-alum.mit.edu/shibboleth">

    <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">

        <Extensions>
            <shibmd:Scope regexp="false">alum.mit.edu</shibmd:Scope>
            <mdui:UIInfo>
                <mdui:DisplayName xml:lang="en">MIT's Alumni IdP</mdui:DisplayName>
            </mdui:UIInfo>
        </Extensions>

        <KeyDescriptor use="signing">
            <ds:KeyInfo>
                    <ds:X509Data>
                        <ds:X509Certificate>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                        </ds:X509Certificate>
                    </ds:X509Data>
            </ds:KeyInfo>

        </KeyDescriptor>

        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp-alum.mit.edu/idp/profile/Shibboleth/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-alum.mit.edu/idp/profile/SAML2/POST/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-alum.mit.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-alum.mit.edu/idp/profile/SAML2/Redirect/SSO"/>
        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp-alum.mit.edu/idp/profile/SAML2/SOAP/ECP"/>

    </IDPSSODescriptor>

    <Organization>
        <OrganizationName xml:lang="en">MIT IS&amp;T</OrganizationName>
        <OrganizationDisplayName xml:lang="en">MIT Information Systems and Technology</OrganizationDisplayName>
        <OrganizationURL xml:lang="en">http://ist.mit.edu</OrganizationURL>
    </Organization>
    <ContactPerson contactType="technical">
        <EmailAddress>touchstone-support@mit.edu</EmailAddress>
    </ContactPerson>

</EntityDescriptor>

</EntitiesDescriptor>