<md:EntityDescriptor entityID="https://sso.licensehq.com/" ID="_34c872dc-15e9-4062-bf8d-e519823a7281" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /><Reference URI="#_34c872dc-15e9-4062-bf8d-e519823a7281"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><InclusiveNamespaces PrefixList="#default md saml ds xs xsi" xmlns="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><DigestValue>rSIX1t3c5PM70CgEkgUOZZn1S2w=</DigestValue></Reference></SignedInfo><SignatureValue>ooEMwxQzcq6+HY8rNDCfVAgamyLAD6DjX94PZOltSOUJjDaxEpWW3EbAbKftCNnLI7aRhOYsQRlirSxYznmVkxv21x/GlQKliklpaksEV+rjKIhvu7r3jQAa88cCL25ztoHCfZCPqbMCy6yXuUCrSuigX5fN/y6CWvvXPevdzaLikG1V7H/5hNA2csDMy1G4Bz9WcWI/lWFSiBlHbn5IGBQLUNQp7m4ilga+5kPjE3IseXl71NwO2P51WB3GUO0yrE2KnYXrEoiWrnF1KZzEq1/EVZn6OMxpmas0EV02TevyxGNRyiKEj9xgiUTSjWrQAPi7pe5DSAUY+qMPp3XrhA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDCzCCAfegAwIBAgIQu/68MM3Bcq5H2nWsi7tgUDAJBgUrDgMCHQUAMBwxGjAYBgNVBAMTEXNzby5saWNlbnNlaHEuY29tMB4XDTE2MDMwOTIxMjAxM1oXDTM5MTIzMTIzNTk1OVowHDEaMBgGA1UEAxMRc3NvLmxpY2Vuc2VocS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OBhmY21+6XhQLG1sLgAkD/2C5PRaG2YaIkSCdus+LXCxPzXYruU1/x+XMa3F38BmX+xv31JlSSPGCAhmNvsh9gvNQMXqNC/33/DVlQNBRRqqTAL3IK6HC38j4vDLjYU+itGNVfOCzvKRRPcDROKaHi+FA4pA57uAaCpcs4IjaYyMyQRdfLVisfY5/71VQ5S2A4jaK37n0W7wMm7SPIR8h74sz0+SdoCShIC/ds8BUdcdmS03toqSZa9XmNZE9SRGvD7CptwUMXb9t74mKlDlZ6Zzqh/GZpGq4JqIzjmuT8pcxbbwoOtJsXDkR8h3T5uyCMakG9gfrdXIXV/ABh13AgMBAAGjUTBPME0GA1UdAQRGMESAEBuX1f+aKfVqIsSlWsJ5cYqhHjAcMRowGAYDVQQDExFzc28ubGljZW5zZWhxLmNvbYIQu/68MM3Bcq5H2nWsi7tgUDAJBgUrDgMCHQUAA4IBAQBLi3AvErg1aRUzPqknPUGW3idT0oEN5EYK0FUHW0xyxMnVAUA16fOEJvfHIU4eb/4D/m8YnJpRE8Z3cWcXebZxwK1erMuy6DFhwv6dIlSY5eW0NRgWlss3pFIKr6dxMBeegoQ7EYvabMnvp+2kg451VlOt/UmumhEYfRn0X4pzzsw2YQaT89bGco71KV8H64ON2PwfYAjBnwAnZXL73c08GuywlinxnXa6sVJWV909j7I2oukOaLm0BVFOqFbqpd/ydDk/+yNJys8ofzMET9LokQ+X/YqD52XBJPXXOyFNUtl/2FBcNHFPUtNXXvqK58xeMxcEQJQrEvtSoi+VXeFw</X509Certificate></X509Data></KeyInfo></Signature><md:SPSSODescriptor ID="_a13a0ae6-85c8-4e5c-a8a9-e1dff7741b8c" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true"><md:KeyDescriptor><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo><md:EncryptionMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /></md:KeyDescriptor><md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sso.licensehq.com/signin.aspx" index="1" isDefault="true" /><md:AttributeConsumingService index="1" isDefault="true"><md:ServiceName xml:lang="en">LicenseHQ SSO Saml2.0 assertion consumer service</md:ServiceName><md:ServiceDescription xml:lang="en">LicenseHQ SSO Saml2.0 assertion consumer service</md:ServiceDescription><md:RequestedAttribute isRequired="true" Name="OrganizationName" FriendlyName="This is the full Organization name recognized by LicenseHQ.  This is a hard-coded string value, eg. 'Acme Company, Inc.'" /><md:RequestedAttribute isRequired="true" Name="OrganizationKey" FriendlyName="This is a 256-bit Organization key recognized by LicenseHQ.  This is a hard-coded string value, generated by LicenseHQ, shared with the partner IdP, passed back with the Saml assertion and used to validate that this Organization has licensed SSO access to LicenseHQ." /><md:RequestedAttribute isRequired="true" Name="Username" FriendlyName="Authenticated User Username, matching the pre-provisioned Username in LicenseHQ for this user." /><md:RequestedAttribute isRequired="true" Name="Email" FriendlyName="Authenticated User Email Address, matching the pre-provisioned Email in LicenseHQ for this user." /></md:AttributeConsumingService></md:SPSSODescriptor><md:Organization><md:OrganizationName xml:lang="en">LicenseHQ</md:OrganizationName><md:OrganizationDisplayName xml:lang="en">LicenseHQ</md:OrganizationDisplayName><md:OrganizationURL xml:lang="en">www.licensehq.com</md:OrganizationURL></md:Organization></md:EntityDescriptor>