<?xml version="1.0" encoding="UTF-8" standalone="no"?><!--
	U K   F E D E R A T I O N   M E T A D A T A

	Aggregate built 2026-04-08T15:00:27Z

	Aggregate valid for 21 days, until 2026-04-29T15:00:27Z
-->
<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:elab="http://eduserv.org.uk/labels" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:shibmeta="urn:mace:shibboleth:metadata:1.0" xmlns:ukfedlabel="http://ukfederation.org.uk/2006/11/label" xmlns:wayf="http://sdss.ac.uk/2006/06/WAYF" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="uk20100825T175806Z" Name="http://ukfederation.org.uk" validUntil="2010-09-08T17:58:06Z" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata sstc-saml-schema-metadata-2.0.xsd   urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd   http://www.w3.org/2001/04/xmlenc# xenc-schema.xsd   http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd">
  <EntityDescriptor ID="uk001155" entityID="https://hefce-shib.hefce.ac.uk/idp/shibboleth">
    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
      <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://hefce-shib.hefce.ac.uk:8443/idp/profile/SAML1/SOAP/AttributeQuery" />
      <Extensions>
        <shibmd:Scope regexp="false">hefce.ac.uk</shibmd:Scope>
      </Extensions>
      <KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
  					MIIDQzCCAiugAwIBAgIUd3eeqMwn7Gk2wcl0ANILseGZbTMwDQYJKoZIhvcNAQEL
  					BQAwITEfMB0GA1UEAwwWaGVmY2Utc2hpYi5oZWZjZS5hYy51azAeFw0xNjAxMDcw
  					ODUzMTlaFw0zNjAxMDcwODUzMTlaMCExHzAdBgNVBAMMFmhlZmNlLXNoaWIuaGVm
  					Y2UuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkNG9y7mT
  					CsOD22iVG8OPusPVOgFcNRZsoATevN0R77gtqMcPlv33Zw1LlrlMekgyjlbSg8+A
  					P8y0ZAWAmxnPuTv2WrWCwJCsKXEJB/4w5A2y94epfjwq8rrZnjWCi7kyQ37Ex3RB
  					QAWyIcfn6+vKLwd112gGmKcMNsyPm+HzF2r9fD+3UGr/OnBVEVfRhgY9IfDvz/W4
  					vXt7ZtHaW+LyyIZrTDnyphPxdm0nZ0wUNtnXNEsXCAPgynrg9e6a3+pggpFePmLy
  					v3NJMt8vwjJ/kHahcAfMdnAGiz7ugpg35WewukG7DmqrRl/QtAoNy9Rqopls2o7+
  					gH2kg3teyUZ7AgMBAAGjczBxMB0GA1UdDgQWBBTCr+KNrPdZ1bb/RzQnnkjmPez+
  					ETBQBgNVHREESTBHghZoZWZjZS1zaGliLmhlZmNlLmFjLnVrhi1odHRwczovL2hl
  					ZmNlLXNoaWIuaGVmY2UuYWMudWsvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL
  					BQADggEBABUKnJNd3K6ndpW0Sq/fJYQ7SeYbFMP02n4PiLCBDUbvliTzdrNqrAQw
  					2cOHZ1QBW1JyzBFAOOtb2KBfFH192HU19XnFwu/3TLvCHijMDsq3sxAVsHp/yNPW
  					vZrxwiy5CxGuoF0dC23tAZRlhUHba+ajx9fVnxoAoBVMJbud6uzdAG4bSohIbLSs
  					g6dKIR7fsNayNpMVNgJznr7AYzFT+/OEtpTspBKSaQINu/h2Z2A9/AZW+oUkEUKS
  					L6XzHSDH7nJz+f8/6m7VLr6SEevybOPiuF31oMi9+nPcdevTK1jijAwbmV7YAvg5
  					tf7o9r1RncMSSHP6t48r1PTmuB+r02I=
  				</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
  					MIIDRDCCAiygAwIBAgIVAKdUokAt0edGYQbZGpn+Z0fBlMChMA0GCSqGSIb3DQEB
  					CwUAMCExHzAdBgNVBAMMFmhlZmNlLXNoaWIuaGVmY2UuYWMudWswHhcNMTYwMTA3
  					MDg1MzE2WhcNMzYwMTA3MDg1MzE2WjAhMR8wHQYDVQQDDBZoZWZjZS1zaGliLmhl
  					ZmNlLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYD8436r
  					dxvJjlxh6rRgaPdm3oW6mPqUiRmAbSGUEYXvmwa0LIb4RgbaBpUi8QK+5rSzSB6D
  					jmMErwgSoikGWn93C5r+h+RZPYW31b9jqM9KjSzDsXSXqteMhlaGtZgmzYaDURJz
  					uG/WpsVijkkChT69YDoV2CWAqpPuh0GUd9afxZevdz70/7UFjanjkiH/GUEDzSKa
  					Bx81v6/aRPBoiJwqq0Fokwf5F01y+u/seIAPz2wC6kHpMnyvxdChZcWbzo8/lg3z
  					YuIxEf7JfiihfZQuZ5SbabdrIUU+4oUB/MXU6IKBMndtmWc3zScxlLAlk7F6Ut/0
  					lWUW7Rdb1zI3AQIDAQABo3MwcTAdBgNVHQ4EFgQUCi0QBEyv/SzZvL0QjzOaXtY2
  					0MQwUAYDVR0RBEkwR4IWaGVmY2Utc2hpYi5oZWZjZS5hYy51a4YtaHR0cHM6Ly9o
  					ZWZjZS1zaGliLmhlZmNlLmFjLnVrL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB
  					CwUAA4IBAQAONw8e0BuPmSC1DnlFAT2kxh4UNXBBJ+QkKJEiyUMGY8kZwFNU5mtn
  					LWShbLhYBm3jKZVMTbDPP62OHb4wiRD5WqKDW+c5GIj7BVI6vnIBlZYFc6Ovxolm
  					EezcSuxqPkMtpj5m2SlQcUmXvkkY+1f2YbXFCU+4zsOuludu8t+E/zuWEHYFqPEC
  					WGffimthu80CRbmeehHCS3SI7EBl16cWqQBTLklIniXQWDurVdQgGMswL1kpAii8
  					Q4sCx2jJ0fwyL7PpqrrL1WzXwtU1Q7L7IFyJp638LgkKrQdI0WE1yAoDTSkh++8K
  					FZtFNtmBVBWov5MSfrY7Jgim7u1VS2fq
  				</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
  					MIIDQzCCAiugAwIBAgIURtGpLnxwX0+8kXuklWDHCYd82wowDQYJKoZIhvcNAQEL
  					BQAwITEfMB0GA1UEAwwWaGVmY2Utc2hpYi5oZWZjZS5hYy51azAeFw0xNjAxMDcw
  					ODUzMTdaFw0zNjAxMDcwODUzMTdaMCExHzAdBgNVBAMMFmhlZmNlLXNoaWIuaGVm
  					Y2UuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZBauEvAE
  					WQDmcI7AkLDgU9JBL2/s/pAtljdUtHzKdcXsliiqxMB0tSrVuwEKtiDSAN2MuyZz
  					oQNIm8WvnjDi/xUVhAR7EqtFbMvcSE7KT+2BMkB5w40YCeq2DrDzJgsmCc+pI916
  					cDzJi7Mtlfo5Jdzpa2Wz+q2jZO3FV0lSA+Pot9nzBw3e+KaarEa2MZ4+Xhj+pysS
  					9I/O7uZobBpVzwArOTMwRtl/bVfXIDgKUarKLy+NzlVHpXeqfjXsHgfmgVvNhktM
  					WFzBCfMSzXeaz3sdwwRC8GC5c0imcw27sy8aZS9sGy4SPiVukgTl1zFe+qt2JVO+
  					h3e1k1kvufUpAgMBAAGjczBxMB0GA1UdDgQWBBQ6wpI2siZlBMlYHWqT6t92Pahi
  					VTBQBgNVHREESTBHghZoZWZjZS1zaGliLmhlZmNlLmFjLnVrhi1odHRwczovL2hl
  					ZmNlLXNoaWIuaGVmY2UuYWMudWsvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL
  					BQADggEBAHu2/CAseO0xir1kazYYGGlR7idPqtzzVQW+QKLshputbZeWTWToLo2A
  					pfDOIP5yQfJKLBVWGJb+oX7yCDb17LHbLBYk+kePn8el2HCAFZsw1UEuNE2Tp/PZ
  					V+7SfYFXFzLuACL90nO1fOzxMvHgQWRW6AuuP/2Rcb7OAmRJEgEEcLGqZwIBZtbO
  					WcMiWEjibA0Z6WC4PUH5hYJI/bM8l+b8xKkc1GTEDrp3s6nqRwZGwN3wh+CNGYsQ
  					vWpIynhpAzqFl+TPKTr+WVVk6ckMTDIh3vDqM5jMwPwedMDF1x+Et3Vgq5OdcvNb
  					ivVwIqHl7GlENvD8by7jEZVCZIPVuaY=
  				</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    </AttributeAuthorityDescriptor>
    <ContactPerson contactType="support">
      <EmailAddress>mailto:Andrew.Beaton@officeforstudents.org.uk</EmailAddress>
      <GivenName>Andrew</GivenName>
      <SurName>Beaton</SurName>
    </ContactPerson>
    <ContactPerson contactType="technical">
      <EmailAddress>mailto:Andrew.Beaton@officeforstudents.org.uk</EmailAddress>
      <GivenName>Andrew</GivenName>
      <SurName>Beaton</SurName>
    </ContactPerson>
    <Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://ukfederation.org.uk" />
      <ukfedlabel:AccountableUsers></ukfedlabel:AccountableUsers>
    </Extensions>
    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
      <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://hefce-shib.hefce.ac.uk:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1" />
      <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://hefce-shib.hefce.ac.uk:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2" />
      <Extensions>
        <mdui:UIInfo>
          <mdui:Description xml:lang="en">Office For Students</mdui:Description>
          <mdui:DisplayName xml:lang="en">Office For Students</mdui:DisplayName>
        </mdui:UIInfo>
        <shibmd:Scope regexp="false">hefce.ac.uk</shibmd:Scope>
      </Extensions>
      <KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
  					MIIDQzCCAiugAwIBAgIUd3eeqMwn7Gk2wcl0ANILseGZbTMwDQYJKoZIhvcNAQEL
  					BQAwITEfMB0GA1UEAwwWaGVmY2Utc2hpYi5oZWZjZS5hYy51azAeFw0xNjAxMDcw
  					ODUzMTlaFw0zNjAxMDcwODUzMTlaMCExHzAdBgNVBAMMFmhlZmNlLXNoaWIuaGVm
  					Y2UuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkNG9y7mT
  					CsOD22iVG8OPusPVOgFcNRZsoATevN0R77gtqMcPlv33Zw1LlrlMekgyjlbSg8+A
  					P8y0ZAWAmxnPuTv2WrWCwJCsKXEJB/4w5A2y94epfjwq8rrZnjWCi7kyQ37Ex3RB
  					QAWyIcfn6+vKLwd112gGmKcMNsyPm+HzF2r9fD+3UGr/OnBVEVfRhgY9IfDvz/W4
  					vXt7ZtHaW+LyyIZrTDnyphPxdm0nZ0wUNtnXNEsXCAPgynrg9e6a3+pggpFePmLy
  					v3NJMt8vwjJ/kHahcAfMdnAGiz7ugpg35WewukG7DmqrRl/QtAoNy9Rqopls2o7+
  					gH2kg3teyUZ7AgMBAAGjczBxMB0GA1UdDgQWBBTCr+KNrPdZ1bb/RzQnnkjmPez+
  					ETBQBgNVHREESTBHghZoZWZjZS1zaGliLmhlZmNlLmFjLnVrhi1odHRwczovL2hl
  					ZmNlLXNoaWIuaGVmY2UuYWMudWsvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL
  					BQADggEBABUKnJNd3K6ndpW0Sq/fJYQ7SeYbFMP02n4PiLCBDUbvliTzdrNqrAQw
  					2cOHZ1QBW1JyzBFAOOtb2KBfFH192HU19XnFwu/3TLvCHijMDsq3sxAVsHp/yNPW
  					vZrxwiy5CxGuoF0dC23tAZRlhUHba+ajx9fVnxoAoBVMJbud6uzdAG4bSohIbLSs
  					g6dKIR7fsNayNpMVNgJznr7AYzFT+/OEtpTspBKSaQINu/h2Z2A9/AZW+oUkEUKS
  					L6XzHSDH7nJz+f8/6m7VLr6SEevybOPiuF31oMi9+nPcdevTK1jijAwbmV7YAvg5
  					tf7o9r1RncMSSHP6t48r1PTmuB+r02I=
  				</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
  					MIIDRDCCAiygAwIBAgIVAKdUokAt0edGYQbZGpn+Z0fBlMChMA0GCSqGSIb3DQEB
  					CwUAMCExHzAdBgNVBAMMFmhlZmNlLXNoaWIuaGVmY2UuYWMudWswHhcNMTYwMTA3
  					MDg1MzE2WhcNMzYwMTA3MDg1MzE2WjAhMR8wHQYDVQQDDBZoZWZjZS1zaGliLmhl
  					ZmNlLmFjLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYD8436r
  					dxvJjlxh6rRgaPdm3oW6mPqUiRmAbSGUEYXvmwa0LIb4RgbaBpUi8QK+5rSzSB6D
  					jmMErwgSoikGWn93C5r+h+RZPYW31b9jqM9KjSzDsXSXqteMhlaGtZgmzYaDURJz
  					uG/WpsVijkkChT69YDoV2CWAqpPuh0GUd9afxZevdz70/7UFjanjkiH/GUEDzSKa
  					Bx81v6/aRPBoiJwqq0Fokwf5F01y+u/seIAPz2wC6kHpMnyvxdChZcWbzo8/lg3z
  					YuIxEf7JfiihfZQuZ5SbabdrIUU+4oUB/MXU6IKBMndtmWc3zScxlLAlk7F6Ut/0
  					lWUW7Rdb1zI3AQIDAQABo3MwcTAdBgNVHQ4EFgQUCi0QBEyv/SzZvL0QjzOaXtY2
  					0MQwUAYDVR0RBEkwR4IWaGVmY2Utc2hpYi5oZWZjZS5hYy51a4YtaHR0cHM6Ly9o
  					ZWZjZS1zaGliLmhlZmNlLmFjLnVrL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB
  					CwUAA4IBAQAONw8e0BuPmSC1DnlFAT2kxh4UNXBBJ+QkKJEiyUMGY8kZwFNU5mtn
  					LWShbLhYBm3jKZVMTbDPP62OHb4wiRD5WqKDW+c5GIj7BVI6vnIBlZYFc6Ovxolm
  					EezcSuxqPkMtpj5m2SlQcUmXvkkY+1f2YbXFCU+4zsOuludu8t+E/zuWEHYFqPEC
  					WGffimthu80CRbmeehHCS3SI7EBl16cWqQBTLklIniXQWDurVdQgGMswL1kpAii8
  					Q4sCx2jJ0fwyL7PpqrrL1WzXwtU1Q7L7IFyJp638LgkKrQdI0WE1yAoDTSkh++8K
  					FZtFNtmBVBWov5MSfrY7Jgim7u1VS2fq
  				</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
  					MIIDQzCCAiugAwIBAgIURtGpLnxwX0+8kXuklWDHCYd82wowDQYJKoZIhvcNAQEL
  					BQAwITEfMB0GA1UEAwwWaGVmY2Utc2hpYi5oZWZjZS5hYy51azAeFw0xNjAxMDcw
  					ODUzMTdaFw0zNjAxMDcwODUzMTdaMCExHzAdBgNVBAMMFmhlZmNlLXNoaWIuaGVm
  					Y2UuYWMudWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcZBauEvAE
  					WQDmcI7AkLDgU9JBL2/s/pAtljdUtHzKdcXsliiqxMB0tSrVuwEKtiDSAN2MuyZz
  					oQNIm8WvnjDi/xUVhAR7EqtFbMvcSE7KT+2BMkB5w40YCeq2DrDzJgsmCc+pI916
  					cDzJi7Mtlfo5Jdzpa2Wz+q2jZO3FV0lSA+Pot9nzBw3e+KaarEa2MZ4+Xhj+pysS
  					9I/O7uZobBpVzwArOTMwRtl/bVfXIDgKUarKLy+NzlVHpXeqfjXsHgfmgVvNhktM
  					WFzBCfMSzXeaz3sdwwRC8GC5c0imcw27sy8aZS9sGy4SPiVukgTl1zFe+qt2JVO+
  					h3e1k1kvufUpAgMBAAGjczBxMB0GA1UdDgQWBBQ6wpI2siZlBMlYHWqT6t92Pahi
  					VTBQBgNVHREESTBHghZoZWZjZS1zaGliLmhlZmNlLmFjLnVrhi1odHRwczovL2hl
  					ZmNlLXNoaWIuaGVmY2UuYWMudWsvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL
  					BQADggEBAHu2/CAseO0xir1kazYYGGlR7idPqtzzVQW+QKLshputbZeWTWToLo2A
  					pfDOIP5yQfJKLBVWGJb+oX7yCDb17LHbLBYk+kePn8el2HCAFZsw1UEuNE2Tp/PZ
  					V+7SfYFXFzLuACL90nO1fOzxMvHgQWRW6AuuP/2Rcb7OAmRJEgEEcLGqZwIBZtbO
  					WcMiWEjibA0Z6WC4PUH5hYJI/bM8l+b8xKkc1GTEDrp3s6nqRwZGwN3wh+CNGYsQ
  					vWpIynhpAzqFl+TPKTr+WVVk6ckMTDIh3vDqM5jMwPwedMDF1x+Et3Vgq5OdcvNb
  					ivVwIqHl7GlENvD8by7jEZVCZIPVuaY=
  				</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </KeyDescriptor>
      <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
      <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
      <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://hefce-shib.hefce.ac.uk/idp/profile/Shibboleth/SSO" />
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://hefce-shib.hefce.ac.uk/idp/profile/SAML2/POST/SSO" />
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://hefce-shib.hefce.ac.uk/idp/profile/SAML2/POST-SimpleSign/SSO" />
      <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://hefce-shib.hefce.ac.uk/idp/profile/SAML2/Redirect/SSO" />
    </IDPSSODescriptor>
    <Organization>
      <OrganizationDisplayName xml:lang="en">Office For Students</OrganizationDisplayName>
      <OrganizationName xml:lang="en">Office for Students</OrganizationName>
      <OrganizationURL xml:lang="en">http://www.hefce.ac.uk/</OrganizationURL>
    </Organization>
  </EntityDescriptor>
</EntitiesDescriptor>
