<?xml version='1.0' encoding='UTF-8'?>
<md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:pyff="http://pyff.io/NS" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ser="http://eidas.europa.eu/metadata/servicelist" xmlns:eidas="http://eidas.europa.eu/saml-extensions" xmlns:ti="https://seamlessaccess.org/NS/trustinfo" Name="https://rafiki.ke/rafiki" ID="_20260824T125532Z" validUntil="2026-09-02T12:55:32Z" cacheDuration="PT1H">
  <ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_20260824T125532Z"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>wkTAFyt4SJtJU0RLNb1jxe3y8IAZPd6PTU7O93FGFm4=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>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</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFITCCAwmgAwIBAgIUbsQnPVUy7ek2UL8o6LLRgZ4x+bcwDQYJKoZIhvcNAQEL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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><md:EntityDescriptor ID="_61b6e40885c199a19594bb4cde3f44f685299e2a" entityID="https://filesender.vlab.ac.ke/shibboleth">
    <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/Login"/>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:KeyName>filesender.vlab.ac.ke</ds:KeyName>
          <ds:KeyName>https://filesender.vlab.ac.ke/shibboleth</ds:KeyName>
          <ds:X509Data>
            <ds:X509SubjectName>CN=filesender.vlab.ac.ke</ds:X509SubjectName>
            <ds:X509Certificate>MIIEPTCCAqWgAwIBAgIUK2g6063iwI5S9cBGVcWuAgQ/pggwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:KeyName>filesender.vlab.ac.ke</ds:KeyName>
          <ds:KeyName>https://filesender.vlab.ac.ke/shibboleth</ds:KeyName>
          <ds:X509Data>
            <ds:X509SubjectName>CN=filesender.vlab.ac.ke</ds:X509SubjectName>
            <ds:X509Certificate>MIIEPTCCAqWgAwIBAgIUKtI2PWupDNS082mrDP7JBTkh4IcwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
      </md:KeyDescriptor>
      <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/Artifact/SOAP" index="1"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/SOAP"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/Redirect"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/POST"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/Artifact"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/POST" index="1"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/Artifact" index="3"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/ECP" index="4"/>
    </md:SPSSODescriptor>
  </md:EntityDescriptor>
  <md:EntityDescriptor ID="_397f25859c9c6aabe6ea291d1630c4b946aaff499c83754eed365db53dfe7214" entityID="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/metadata.php/default-sp">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">KENET FileSender</mdui:DisplayName>
          <mdui:Description xml:lang="en">File shairing service for the Kenyan research and education community</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://filesender.kenet.or.ke/?s=about</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://filesender.kenet.or.ke/?s=privacy</mdui:PrivacyStatementURL>
          <mdui:Logo height="723" width="149">https://filesender.kenet.or.ke/images/banner900.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">KENET FileSender</md:ServiceName>
        <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
        <md:RequestedAttribute FriendlyName="cn" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network Trust (KENET)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">KENET FileSender</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://kenet.or.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Anthony K. Kimani</md:GivenName>
      <md:EmailAddress>mailto:akimani@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
</md:EntitiesDescriptor>