<?xml version='1.0' encoding='UTF-8'?>
<md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:pyff="http://pyff.io/NS" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ser="http://eidas.europa.eu/metadata/servicelist" xmlns:eidas="http://eidas.europa.eu/saml-extensions" xmlns:ti="https://seamlessaccess.org/NS/trustinfo" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:xi="http://www.w3.org/2001/XInclude" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:remd="http://refeds.org/metadata" xmlns:hoksso="urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser" Name="https://rafiki.ke/rafiki" ID="_20260824T125528Z" validUntil="2026-09-02T12:55:28Z" cacheDuration="PT1H">
  <ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_20260824T125528Z"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>itUbcNVd+QiUuTkh6AO7HiU3oEzGil07yF9WC84d/4A=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>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</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFITCCAwmgAwIBAgIUbsQnPVUy7ek2UL8o6LLRgZ4x+bcwDQYJKoZIhvcNAQEL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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><md:EntityDescriptor entityID="https://idp-01.federation.ke/simplesaml/saml2/idp/metadata.php" ID="_a75b659d8b8b32471ede34c1fb7c65b21e92f5b7a6126752babd07beeef136d9">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_a75b659d8b8b32471ede34c1fb7c65b21e92f5b7a6126752babd07beeef136d9">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>VSQ6A10m8GDsilEt0BatmNWE/lYZxTLKLYm3VbBZqWg=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>DFGdgy2NL3itpdOCma5/fPioZGHaP2+IfyXIu4AIu+qlMZUzEgNqqD+Te4nvoyR6C0VjQ+iZCztlIGe3lWGNsRym7r+Ny8v6FCCRkC0r9fWgAY8cmkAmNPpt3hmppFA3GRqj9s5+p1YWAORd9g2ME6A/9o/QT3ROZyJVYGmFfmwNr5EmnVaNkr772ZLRcwwbd99AEoMrUOKUM/mJUsDVqdP9DzTsjzI82Kxvj+MewOTBew+XteThboCg15cedkyzvB38eyClKQdl58buC8jHzyUgUN/2Hgcwzs+3tYKEYy4gUwaY2fcgvw031j7tOldNFWWCQCaXOIjtQLhlg2wqsQ==</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">federation.ke</shibmd:Scope>
        <shibmd:Scope regexp="false">kenet.or.ke</shibmd:Scope>
        <shibmd:Scope regexp="false">vlab.ac.ke</shibmd:Scope>
        <shibmd:Scope regexp="false">rafiki.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">KENET Identity Provider</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by KENET staff</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://www.kenet.or.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://rafiki.ke/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:DomainHint>federation.ke</mdui:DomainHint>
          <mdui:DomainHint>kenet.or.ke</mdui:DomainHint>
          <mdui:DomainHint>vlab.ac.ke</mdui:DomainHint>
          <mdui:GeolocationHint>geo:-1.27972,36.81603</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-01.federation.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-01.federation.ke/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network Trust (KENET)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">KENET Identity Provider</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.kenet.or.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>KENET Help Desk</md:GivenName>
      <md:EmailAddress>mailto:support@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:GivenName>KENET CERT</md:GivenName>
      <md:EmailAddress>mailto:csirt@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>KENET Support</md:GivenName>
      <md:EmailAddress>mailto:support@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp-k4.federation.ke/idp/shibboleth">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">kenet.or.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Kenya Education Network</mdui:DisplayName>
          <mdui:Description xml:lang="en">Kenya Education Network - KENET</mdui:Description>
          <mdui:Logo xml:lang="en" width="80" height="80">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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                    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
MIIEPDCCAqSgAwIBAgIVAIOobKcerA5d5Sk6G7WPQwx0fxviMA0GCSqGSIb3DQEBCwUAMB8xHTAb
BgNVBAMMFGlkcC1rNC5mZWRlcmF0aW9uLmtlMB4XDTI0MDgzMDEzMzI1MVoXDTQ0MDgzMDEzMzI1
MVowHzEdMBsGA1UEAwwUaWRwLWs0LmZlZGVyYXRpb24ua2UwggGiMA0GCSqGSIb3DQEBAQUAA4IB
jwAwggGKAoIBgQD4tkJj4EcPJBAIv3Jvyizt+uzv5sGKVuRsAdo5OamQK0VMbiAITpx4OgYBZeJA
QBhaU4pxiw7ew68oVQplSF7Xn6pgtYPsuJQU7zIG8Kpvo0iGMas3TBUEA3+Cs8GyxeuAYk2mEum3
qDiLGZ/7MUKspLJsn4BSyI5czLrsiW4rknXbZA9Y5/R3V85FXgTigxRK7z0va9Qzz4xJQUvsx8Yb
MpsWe+9weA4ww5GFQZ7t8xNMVTsx1Cloe0eigDVQxYlayFcQYdIXWyuTT7bLZRQfmV5xGVTiRty6
mlp6LuByNMQZyPzBWjUxmNM2Y4TkfDoAh+DbGCMhD70lUBdaRyEwF6OEqQBIhMbWFiojuzKf954g
ZX/uMXAqkvKeT4hzhqiFwWue48qKsrZC+/vjhCAWt1kXTu7bsFLV/G6pdehP0Tc5U+XgoY03iLXp
O6TVbjUyz/+RO5zRORstTUT7lFPGOQKToCbkTv10/+g5fsRKGmT++/0bJ0Z33pbYXnWc6ScCAwEA
AaNvMG0wHQYDVR0OBBYEFCOeZj/Swp1rzIpOneBb1k7UtQBIMEwGA1UdEQRFMEOCFGlkcC1rNC5m
ZWRlcmF0aW9uLmtlhitodHRwczovL2lkcC1rNC5mZWRlcmF0aW9uLmtlL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBgQCHU9n2H7k6aRQFbnKWvTEeD1k5HC5RIwXRv/2THLpgvXGTdAxA
5cmd8QLuDETFrtEHAmY5Q/iamwarWrePXafTUppEKTU6muiSEXC79qCWFBRjrR00qFqU5DQXHwmP
wUFkO+CFakytDX5+MMlKugwSjAFTfeNNOq27O0w1Rsxk09uxqdMfLki3hM1e9Z32VGGHSY/DDzFE
gGN5sL7KNLVdHhmTnkg2o2gPQ+6Q0hmMp9Ob3qBy9i4/Nm+mbvsL8YN6UnTrrSFzCzL83iTzhT+A
QgZh+N599pCruwgxMH/sTzXVwHo0MHv+E6qNycNyW2MwbAvo1aWR0ctoHLAsp7r3Pon7u76x0MNY
qtSVCCPI6CmMOEzVWN2F799TW9cF+9HXw0RxI2NVKGO/esfkzvWf2UWGFqLNQLJYoz3Yya3Tjd2F
aVSugHD2OVYiEqj/4k0wpMfOOPIlJVSedRv+04y7fLB7T2yArONvdmE+D0sqtoxQOVMiSJcoJb5F
vh8t2eg=
                    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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                    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp-k4.federation.ke/idp/profile/SAML2/SOAP/ArtifactResolution"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k4.federation.ke/idp/profile/SAML2/Redirect/SLO"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-k4.federation.ke/idp/profile/SAML2/POST-SimpleSign/SSO"/>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k4.federation.ke/idp/profile/SAML2/Redirect/SSO"/>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-k4.federation.ke/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp.icipe.org/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://idp.icipe.org/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">icipe.org</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">icipe</mdui:DisplayName>
          <mdui:Description xml:lang="en">The International Centre of Insect Physiology and Ecology is an international scientific research institute, headquartered in Nairobi, Kenya that works towards improving lives and livelihoods of people in Africa.</mdui:Description>
          <mdui:InformationURL xml:lang="en">http://library.icipe.org/</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">http://www.icipe.org/publications/policy-briefs/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://scholarships.icipe.org/storage/icipe-logo.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://scholarships.icipe.org/storage/icipe-logo.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://scholarships.icipe.org/storage/icipe-logo.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:GeolocationHint>geo:-1.221660565240175, 36.89673382703733;u=100</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.icipe.org/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.icipe.org/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.icipe.org/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">International Centre of Insect Physiology and Ecology</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">icipe</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.icipe.org/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>icipe Help Desk</md:GivenName>
      <md:EmailAddress>mailto:ictsupport@icipe.org</md:EmailAddress>
      <md:TelephoneNumber>+254-20-8632000</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Wilberforce Wanjala</md:GivenName>
      <md:EmailAddress>mailto:wwanjala@icipe.org</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp-k3.federation.ke/idp" ID="_180fd335e4245cedf43b38c95732e41c3900fd1caa9d57bbe6cba5c306f00197">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_180fd335e4245cedf43b38c95732e41c3900fd1caa9d57bbe6cba5c306f00197">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>qo+sdJUaebn/+6+cpQW8XZGVgW17XmjJIoQfuR9lFM0=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>RNjzYseYX0B53jACDvCqJUy6yyFEjkezBEnNWvZi9wOTY7wvD18f76VwSC9eRluOQ339/eFGv3KLNm/lc0pJcRzjBZ1wQWd8a5TI5o6OyC+B70C7kMCUiO+bRUEamLLCMPgWYOJs9t+XZ0VyXaYgLcjFQMjviGs7MmBJ7FGW9l632Pov6tS4O0kNGf71vzAADVQr9dwQKfUuKaWf8JPATW72CtiwLRNKIkZULcpsVSnwR3bYVjDM7OvqBaPaIsiRbOVAJ0fKuJY6CVW74//dSWYWz43fJl3Zs9wcIo6dGU1RqMgFbgFhOZt8E0LpUzl1U7qdIUBmNRB7Phn9UOHteA==</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>MIID8TCCAtmgAwIBAgIUNLS2W1KZMRZGTpR3I4rdftwyjBEwDQYJKoZIhvcNAQELBQAwgYcxCzAJBgNVBAYTAktFMRMwEQYDVQQIDApTb21lLVN0YXRlMRAwDgYDVQQHDAdOYWlyb2JpMQ4wDAYDVQQKDAVLRU5FVDEdMBsGA1UEAwwUaWRwLWszLmZlZGVyYXRpb24ua2UxIjAgBgkqhkiG9w0BCQEWE2FraW1hbmlAa2VuZXQub3Iua2UwHhcNMjQwODIxMTQzNDU1WhcNMjUwODIxMTQzNDU1WjCBhzELMAkGA1UEBhMCS0UxEzARBgNVBAgMClNvbWUtU3RhdGUxEDAOBgNVBAcMB05haXJvYmkxDjAMBgNVBAoMBUtFTkVUMR0wGwYDVQQDDBRpZHAtazMuZmVkZXJhdGlvbi5rZTEiMCAGCSqGSIb3DQEJARYTYWtpbWFuaUBrZW5ldC5vci5rZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN73Uxfvxgq7R2QM8qbjBQRrAv5BpF0C3sQpixXyb9+f7HH0mDhjNrK7rZXoM6UIcnBjyv1ijHUKxrwmwvleJRAdpzO9GT38GOn6bQKReG2RFIbcBVV7EN8WZbnsr7kYB0hcavzjZUw1WQXixaglTIqTKivW2hg5C0Nx8l39AlLtlu38DqYKavyUOfBI2GrbXllCzVPX5DuTRdcLCjx0kEWCFMajpFvn7KJY6l2d7DCv1MK9Hnx1ejDK2+kZCHO2Y55qaFQHcJX4gTObnRLnerKPTmRjW4PMz6osgQYszLpnvW1ldNf2rLeWX8oe+ASZshTOpEUsB3cMeqXEJyMKersCAwEAAaNTMFEwHQYDVR0OBBYEFM4CSTv8fIUJublXKM8I0ezRjiAiMB8GA1UdIwQYMBaAFM4CSTv8fIUJublXKM8I0ezRjiAiMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBANJOjGcxAc/S9PTXssnYu1eoO+Yhqo3WoHsXrCr/SAzOORe3/vgcGLbjHjiEkpr2UHuZDd4NgOG1XqXEokHZaJPrHuP7RqhorF4t55FKuwtRgymqoy0nx4cS8s0fMqNUn4oltfx8dxmoAVuoNaEPic8U6w7Bvy8XJY9NOhLmR5yir+dx9YufZ7852E+snVSAP8Yd33Pbvu9ymQTS8AqzhB782dXemWGulHGG3lDVlkG/bMe90753K1uu8lCTtd9uORRADOpTTL08gvSujzUdClEAmthglePSSsalirMgK0w0/V0OezkPxrX0unOzs4UlrrA/cZPR1cu2S/LXP08sGCY=</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://idp-k3.federation.ke/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">kenet.or.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">KENET Staff Identity Provider</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by KENET staff</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://rafiki.federation.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://rafiki.federation.ke/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:GeolocationHint>geo:-1.27972,36.81603;u=100</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k3.federation.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k3.federation.ke/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network Trust (KENET)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">KENET Staff Identity Provider</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.kenet.or.ke/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>KENET Help Desk</md:GivenName>
      <md:EmailAddress>mailto:support@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:GivenName>KENET CERT</md:GivenName>
      <md:EmailAddress>mailto:csirt@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>admin</md:GivenName>
      <md:EmailAddress>mailto:akimani@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp.ku.ac.ke/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">ku.ac.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Kenyatta University</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by Kenyatta University</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://www.ku.ac.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://www.ku.ac.ke/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://www.ku.ac.ke/images/kunew6-3.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://www.ku.ac.ke/images/kunew6-3.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://www.ku.ac.ke/images/kunew6-3.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ku.ac.ke/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ku.ac.ke/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenyatta University</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Kenyatta University</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.ku.ac.ke/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>Director ICT</md:GivenName>
      <md:EmailAddress>mailto:director-ict@ku.ac.ke</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="other">
      <md:GivenName>Director ICT</md:GivenName>
      <md:EmailAddress>mailto:director-ict@ku.ac.ke</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>admin</md:GivenName>
      <md:EmailAddress>mailto:kamau.henry@ku.ac.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://rafiki.strathmore.edu/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://rafiki.strathmore.edu/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">strathmore.edu</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Strathmore University</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by Strathmore University</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://.edu</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://.edu/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://strathmore.edu/wp-content/themes/strathmore/images/logo.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://strathmore.edu/wp-content/themes/strathmore/images/logo.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://strathmore.edu/wp-content/themes/strathmore/images/logo.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:GeolocationHint>geo:-1.307,36.812;u=100</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rafiki.strathmore.edu/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rafiki.strathmore.edu/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Strathmore University</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Strathmore University</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://strathmore.edu/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>netAdmin</md:GivenName>
      <md:EmailAddress>mailto:networkadministrator@strathmore.edu</md:EmailAddress>
      <md:TelephoneNumber>+254 703 034000/2236</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>admin</md:GivenName>
      <md:EmailAddress>mailto:networkadministrator@strathmore.edu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp.uonbi.ac.ke/saml2/idp/metadata.php" ID="_9543dfb77355e1b864398f6d2ccd27f9d7d89528c30da472f58dac4871885c24">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_9543dfb77355e1b864398f6d2ccd27f9d7d89528c30da472f58dac4871885c24">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>LmgSk9CJlKSL+hnqzQMwIuNUMBe5Ml1ej2rSLkbKWD4=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>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</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://idp.uonbi.ac.ke/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">uonbi.ac.ke
			</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">University of Nairobi</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by University</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://uonbi.ac.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://uonbi.ac.ke/data-privacy</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://uonbi.ac.ke/sites/default/files/UoN_Logo.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://uonbi.ac.ke/sites/default/files/UoN_Logo.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://uonbi.ac.ke/sites/default/files/UoN_Logo.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.uonbi.ac.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.uonbi.ac.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.uonbi.ac.ke/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">University of Nairobi</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">University of Nairobi Identity Provider</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https:uonbi.ac.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Administrator</md:GivenName>
      <md:EmailAddress>mailto:sysadmin@uonbi.ac.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
</md:EntitiesDescriptor>