<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
    entityID="https://idp-account-takeover-poc.onedoesnotsimplyhide.com/metadata">
  <md:IDPSSODescriptor WantAuthnRequestsSigned="false"
      protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
    <md:SingleSignOnService
        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
        Location="https://idp-account-takeover-poc.onedoesnotsimplyhide.com/saml/sso"/>
    <md:SingleSignOnService
        Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
        Location="https://idp-account-takeover-poc.onedoesnotsimplyhide.com/saml/sso"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>