<?xml version='1.0' encoding='UTF-8'?>
<md:EntitiesDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0" xmlns:pyff="http://pyff.io/NS" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ser="http://eidas.europa.eu/metadata/servicelist" xmlns:eidas="http://eidas.europa.eu/saml-extensions" xmlns:ti="https://seamlessaccess.org/NS/trustinfo" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:xi="http://www.w3.org/2001/XInclude" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:remd="http://refeds.org/metadata" xmlns:hoksso="urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser" xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" Name="https://rafiki.ke/rafiki" ID="_20260824T125530Z" validUntil="2026-09-02T12:55:30Z" cacheDuration="PT1H">
  <ds:Signature><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI="#_20260824T125530Z"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>/HyB0htjk/+py7a8NN8lXVM6gGYDbmVeiftZsL40eEo=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>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</ds:SignatureValue><ds:KeyInfo><ds:X509Data><ds:X509Certificate>MIIFITCCAwmgAwIBAgIUbsQnPVUy7ek2UL8o6LLRgZ4x+bcwDQYJKoZIhvcNAQEL
BQAwIDEeMBwGA1UEAwwVYWdncmVnYXRvci52bGFiLmFjLmtlMB4XDTI0MDkxNzIw
NTIzOVoXDTM0MDkxNTIwNTIzOVowIDEeMBwGA1UEAwwVYWdncmVnYXRvci52bGFi
LmFjLmtlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo0jN+qyGcG0Z
1WeKEVtncbTjAmBnuUr4CqC5hm1IEuNe2onM3BdkpXghduTDP5OF2YPTbFR7SZet
mt+VPHFdbBC2ube7QYe+xWSupZ1MnV4eo8oshxRe58ZBaJqz9hPrXyv3NBHoaBzC
DazsTSYqGp6Y3GcILDnGQr59u1KFjNgHwrXoAckcaZv1Vp2a3wZvAYR3/Lo/Pw8v
8V9BVL1VY/NTEm48fMcnsOIu9DxLcy/cRA3A9KHhOPOxPQBZIOtupAErnfgtpfVR
dV4XBwJbfPizpvOlGnxrzJuUZy9jIdKdt2LsMUeh5oLFX6J9LFa161PfdqImuF4D
9OdbXoTMNqfy+v8K4ARPGlNU+xPB61QHd6TRWXHc4h9We3tqYDQeu/3sxEjTOvmV
EEGWgh1eMxz8o5k2MkLudza4dEuzBqyggYkLe5kdYB00eovuhC/eQqQiBaQAI2Jo
urfPhgnSI7S5sQ/IoDaacSLbZdphvx8lkdpcn+nMhQ86vYGxnTqcdnx7UB5H9yAb
GJ7baOrcB+44YpVaXOlG6ReKgWhc3/G8QPVL2Il5C57V9Wb3IBNDVftx351CNWYF
fS5sjYYv+1woAnj6xtYcFUbTLN/iqh0aC48S04SCkg99yt6IBbXSFRl07hRmhMg1
YxH2RIepENp8WhFr6EBUJ8St+nff82ECAwEAAaNTMFEwHQYDVR0OBBYEFPW2T3zn
zkaVhw6TP3Yp45CqOCnDMB8GA1UdIwQYMBaAFPW2T3znzkaVhw6TP3Yp45CqOCnD
MA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAJj8eBUYEk7a7U/Y
PzWAj9yMZ3bzEDVPL0+aZ0qf79DNwu0IroOenTJOUNWrkXYgiWCrGnz0yFekFUDc
FJNfkwTgQYfejefsdxzQj0y0yswv56daZUSpUlS6KZvKZ1PFEuqvKTgkI8ImLVYE
JADM0s4nA/uaktRFa19NhYabEHZG3eDNZKTp9WWz6TpQ/MKjOwHNqhenhHM1mEOK
54YyVWgHYQVY3BxJO2n2x2Kl/TQlkBtOVs1dICue06E7pQDPA48EvZicmRS0Umt2
6lFnUh0EeOwMsTU0AmuIyIzFottfWtcpATEMHgS9Cq8/O3Zery7ixOTvZvX2n04p
09UJ7luWIoI/7fkYioGtT7D4kCrhzhtQJBX+loO8PO+uITYSysjTeeYFuJo8zGi0
LsU4AZ9S6gOWQUYE/ziQQ+xzOSS1ErnLfPTzTBMyEtJz6z1az47/2eMAt4SVPnFh
XQzqB7LQX7t5Zt02rMuBQxMIhCj41+cPiQAioT3J9FATjuRsKDJXPa+W6SAqKNcV
Ee+PbI7kUAaTXjhvwXomDDGcbnrc+aXKmvK7Lb+RKuEcPt+foDTtVNqRnGw62ZHX
6sCmhO9RIiEREcB5Z5fa2sVXAoe018lrkLNVPCFIIpZASQkH8LQ69HxUZm9xtR36
w6GdMvklI5tTenY3tfylsWvnbQda</ds:X509Certificate></ds:X509Data></ds:KeyInfo></ds:Signature><md:EntityDescriptor entityID="https://idp-01.federation.ke/simplesaml/saml2/idp/metadata.php" ID="_a75b659d8b8b32471ede34c1fb7c65b21e92f5b7a6126752babd07beeef136d9">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_a75b659d8b8b32471ede34c1fb7c65b21e92f5b7a6126752babd07beeef136d9">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>VSQ6A10m8GDsilEt0BatmNWE/lYZxTLKLYm3VbBZqWg=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>DFGdgy2NL3itpdOCma5/fPioZGHaP2+IfyXIu4AIu+qlMZUzEgNqqD+Te4nvoyR6C0VjQ+iZCztlIGe3lWGNsRym7r+Ny8v6FCCRkC0r9fWgAY8cmkAmNPpt3hmppFA3GRqj9s5+p1YWAORd9g2ME6A/9o/QT3ROZyJVYGmFfmwNr5EmnVaNkr772ZLRcwwbd99AEoMrUOKUM/mJUsDVqdP9DzTsjzI82Kxvj+MewOTBew+XteThboCg15cedkyzvB38eyClKQdl58buC8jHzyUgUN/2Hgcwzs+3tYKEYy4gUwaY2fcgvw031j7tOldNFWWCQCaXOIjtQLhlg2wqsQ==</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">federation.ke</shibmd:Scope>
        <shibmd:Scope regexp="false">kenet.or.ke</shibmd:Scope>
        <shibmd:Scope regexp="false">vlab.ac.ke</shibmd:Scope>
        <shibmd:Scope regexp="false">rafiki.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">KENET Identity Provider</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by KENET staff</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://www.kenet.or.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://rafiki.ke/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:DomainHint>federation.ke</mdui:DomainHint>
          <mdui:DomainHint>kenet.or.ke</mdui:DomainHint>
          <mdui:DomainHint>vlab.ac.ke</mdui:DomainHint>
          <mdui:GeolocationHint>geo:-1.27972,36.81603</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-01.federation.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-01.federation.ke/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network Trust (KENET)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">KENET Identity Provider</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.kenet.or.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>KENET Help Desk</md:GivenName>
      <md:EmailAddress>mailto:support@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:GivenName>KENET CERT</md:GivenName>
      <md:EmailAddress>mailto:csirt@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>KENET Support</md:GivenName>
      <md:EmailAddress>mailto:support@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp-k4.federation.ke/idp/shibboleth">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">kenet.or.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Kenya Education Network</mdui:DisplayName>
          <mdui:Description xml:lang="en">Kenya Education Network - KENET</mdui:Description>
          <mdui:Logo xml:lang="en" width="80" height="80">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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                    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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                    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
MIIEPDCCAqSgAwIBAgIVAMLdE28o7GgO65pwS8nCmbCaBMdBMA0GCSqGSIb3DQEBCwUAMB8xHTAb
BgNVBAMMFGlkcC1rNC5mZWRlcmF0aW9uLmtlMB4XDTI0MDgzMDEzMzI1MloXDTQ0MDgzMDEzMzI1
MlowHzEdMBsGA1UEAwwUaWRwLWs0LmZlZGVyYXRpb24ua2UwggGiMA0GCSqGSIb3DQEBAQUAA4IB
jwAwggGKAoIBgQCTexAIqEw/y9wCp4wZHxJxxmgUZ1b8Ee2BhaWzBh+pCWA//feTiR0vxTw8oi2x
Iht0Rsm4XMSqc+M8aFEg3vRu9KM1Y71NWWi9fBrS3n1MXongaZWWARejWSZz6DB/69SuSPwuZmqk
CZ06ahN0+hogEPF7W4r6CYvz5W0Qg33NImXTZujCGVTaXqhcxJqiZIcBjHcX4J6JZe06G3QQVjLy
HdHO4c06hqWF2ubLyaDGvEonzX0E8ZvLeBeIVFdzQ5c5BcPiwnt1eh6AgUdlOPum/yls1tNTZTze
CQlc/zhIkNyTYfIjY+zsuobCWRIrrnd4PH73D3vS4Xy7406PWgfMQ/r9kHUWP7+4TgNwnPS+D0Pp
RezNz2Qf5/7mm9HfU8acxPVNlh8GgoOg5Tgp21srvVPZ3y1U6E1jVu2o/Cx4m0K2sxuHTb8olbhU
qhe3riH9JSNuCf0AXd2bs/HaVeQZZK9IGNaPV1bCkYMaP0MiTB6g+AmsPtL0e8t/3R0YyC8CAwEA
AaNvMG0wHQYDVR0OBBYEFKCzg0F3BKumSKV6feSmstrK9wArMEwGA1UdEQRFMEOCFGlkcC1rNC5m
ZWRlcmF0aW9uLmtlhitodHRwczovL2lkcC1rNC5mZWRlcmF0aW9uLmtlL2lkcC9zaGliYm9sZXRo
MA0GCSqGSIb3DQEBCwUAA4IBgQAbt9FaTBykfmyKHyRDqSfFa74ebBm9LiXe5EMlcs0+Y1jeMn4v
pEHPP9iDPotWSm3ml9w6L+XzWZSjGugEGqI6fLDQVTHep8b3QgrcjgqUzSLydwhmVEpZTisOw6oh
QhKbtr0MTakLWabvYfygyos2PXJ7ejuoKWOdarh05Osw4AhXFcRwLCzEgm2r2iIaUrER49MCIj/e
C0DCMRuMWxLqqshgdnFzx81K/AHYyfIx/JaeA+pixTy14qrfVvO9lRetoX6IcQU1nQmuex7W99DK
IFsor4m+xQcZDZzcj5a6bknVp3gesEvBLUgd0ZqLJCAQhY8wDFl4W8myRgMV1E8PUEiL6BFOc2VM
f7ZL4Qv3faEOuJFr8werajpItaZiWJz7lDaqLfwCEEHoktSQmFmb/ETqzTGQikTOWqWXz9lSA21+
yhZVTiK94NMKnuZdPyhoqdrFaZahSzkshOETvi9PS/wuSLfZiZEpUtK4AxpSgSUP8zxkQfr9/pJD
UNp+aDU=
                    </ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp-k4.federation.ke/idp/profile/SAML2/SOAP/ArtifactResolution"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k4.federation.ke/idp/profile/SAML2/Redirect/SLO"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp-k4.federation.ke/idp/profile/SAML2/POST-SimpleSign/SSO"/>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k4.federation.ke/idp/profile/SAML2/Redirect/SSO"/>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp-k4.federation.ke/idp/profile/SAML2/POST/SSO"/>
    </md:IDPSSODescriptor>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp.icipe.org/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://idp.icipe.org/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">icipe.org</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">icipe</mdui:DisplayName>
          <mdui:Description xml:lang="en">The International Centre of Insect Physiology and Ecology is an international scientific research institute, headquartered in Nairobi, Kenya that works towards improving lives and livelihoods of people in Africa.</mdui:Description>
          <mdui:InformationURL xml:lang="en">http://library.icipe.org/</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">http://www.icipe.org/publications/policy-briefs/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://scholarships.icipe.org/storage/icipe-logo.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://scholarships.icipe.org/storage/icipe-logo.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://scholarships.icipe.org/storage/icipe-logo.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:GeolocationHint>geo:-1.221660565240175, 36.89673382703733;u=100</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.icipe.org/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.icipe.org/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.icipe.org/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">International Centre of Insect Physiology and Ecology</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">icipe</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">http://www.icipe.org/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>icipe Help Desk</md:GivenName>
      <md:EmailAddress>mailto:ictsupport@icipe.org</md:EmailAddress>
      <md:TelephoneNumber>+254-20-8632000</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Wilberforce Wanjala</md:GivenName>
      <md:EmailAddress>mailto:wwanjala@icipe.org</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp-k3.federation.ke/idp" ID="_180fd335e4245cedf43b38c95732e41c3900fd1caa9d57bbe6cba5c306f00197">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_180fd335e4245cedf43b38c95732e41c3900fd1caa9d57bbe6cba5c306f00197">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>qo+sdJUaebn/+6+cpQW8XZGVgW17XmjJIoQfuR9lFM0=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>RNjzYseYX0B53jACDvCqJUy6yyFEjkezBEnNWvZi9wOTY7wvD18f76VwSC9eRluOQ339/eFGv3KLNm/lc0pJcRzjBZ1wQWd8a5TI5o6OyC+B70C7kMCUiO+bRUEamLLCMPgWYOJs9t+XZ0VyXaYgLcjFQMjviGs7MmBJ7FGW9l632Pov6tS4O0kNGf71vzAADVQr9dwQKfUuKaWf8JPATW72CtiwLRNKIkZULcpsVSnwR3bYVjDM7OvqBaPaIsiRbOVAJ0fKuJY6CVW74//dSWYWz43fJl3Zs9wcIo6dGU1RqMgFbgFhOZt8E0LpUzl1U7qdIUBmNRB7Phn9UOHteA==</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://idp-k3.federation.ke/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">kenet.or.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">KENET Staff Identity Provider</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by KENET staff</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://rafiki.federation.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://rafiki.federation.ke/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://www.kenet.or.ke/sites/default/files/kenelogomedium.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:GeolocationHint>geo:-1.27972,36.81603;u=100</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIFCTCCA3GgAwIBAgIUcIUe4+Em1JhC9dYRKifg0xlPFeUwDQYJKoZIhvcNAQELBQAwgZMxCzAJBgNVBAYTAkFVMQswCQYDVQQIDAJLRTEQMA4GA1UEBwwHTmFpcm9iaTEOMAwGA1UECgwFS0VORVQxEjAQBgNVBAsMCVRlY2huaWNhbDEdMBsGA1UEAwwUaWRwLWszLmZlZGVyYXRpb24ua2UxIjAgBgkqhkiG9w0BCQEWE2FraW1hbmlAa2VuZXQub3Iua2UwHhcNMjQwNTA3MTcxNjM0WhcNMzQwNTA3MTcxNjM0WjCBkzELMAkGA1UEBhMCQVUxCzAJBgNVBAgMAktFMRAwDgYDVQQHDAdOYWlyb2JpMQ4wDAYDVQQKDAVLRU5FVDESMBAGA1UECwwJVGVjaG5pY2FsMR0wGwYDVQQDDBRpZHAtazMuZmVkZXJhdGlvbi5rZTEiMCAGCSqGSIb3DQEJARYTYWtpbWFuaUBrZW5ldC5vci5rZTCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBALdoTNyHYpMWtJUTV8CdZHjKfYb8Sl1vbxAlcfLIdWSGLE6PcxhIGqpqa2dvAyli1CC86FLBLyWuqowNwa/oduxqHfP1eu1SPAB4tyBTMcKlQVUbgPnDFg+P+kMBT9K7iyWLd4tPj7DJ3IUR2UbP/vtU5WMHzvyp5YRavjasGSlxZ3sps5KOWpTMOXA9bba0pjPtz2Vhf8GC79kGHYkMzC4YJPhAZptdMUjNZY6NuVPkJjCQczzV48nKhXXxONykHuqowTeV+nelMRnhhhmo2ZxD1NMNn8g3p6/Njy7WU7FqJxP/x474Q0ydA+2G7+CLoR63kdzjKdrvIRKyQZzXPbrIRjbG10721q4bOt23as8Sl4FEfUhOW8u7oLFItz50YYnB2chpCs2axc6c3VDZom6dw0pSeUK5zcPQsoZkJe2ttHbHdpRt0elz2nT0SB+6zl3vQ34ay/8BCPwoDuRzHFLydUsepYM+5gTdSWvKh5QEnKqMkAe1mR3iwHJyEvedZwIDAQABo1MwUTAdBgNVHQ4EFgQUo80yOHxbswYxkf0NVM/eS5gQjl4wHwYDVR0jBBgwFoAUo80yOHxbswYxkf0NVM/eS5gQjl4wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAYEAiJc5Upr/QvbJI63HG3LAH1wdB6hO9nZtj+DgwS2j5UidpyEW7cM2WmjPjo588g8g9ID7GgwlfudJV8wO+0Mm+0z2UyAakwtPK2JHdy0HrpsAemTr31qrW9mPyAJfTtL7bzMkcQn0OmOOQeUsGUb6H4poP6+0OqMG+wtGvSt/bk6r9kjasGt29jAYVXmbe+DqnR3CfEJSrcaZtFg5YNLyl9Pyy7T0+e39bYSq7r2cb354ZUwzWt2TiyUR5nmvnLsDU1WeQDvysvLkyJF+zvP3gVh5NXKRIPOuxJ/y7+FX74XUT2BKIsBQQjQCvFlQ68FeBhps29fknt5RryDNmoCvqxf9CKdke/ovTXDUKMtiGHHojuJKu4ZPgk2u5K9JiZSpApPnMjn8sihzVxYBh3Xf0X6zr6FolhRFjk73+2vmWeYQU3EUHYiuY5kSnFp9o4CADwJOl7ELx56XlX6Ac+Zbcnghjv1d80e32lXj9Mu4Lz4Wh2dVVdizLkk/ln5azfLk</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k3.federation.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp-k3.federation.ke/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network Trust (KENET)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">KENET Staff Identity Provider</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.kenet.or.ke/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>KENET Help Desk</md:GivenName>
      <md:EmailAddress>mailto:support@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
      <md:GivenName>KENET CERT</md:GivenName>
      <md:EmailAddress>mailto:csirt@kenet.or.ke</md:EmailAddress>
      <md:TelephoneNumber>0732 150 500</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>admin</md:GivenName>
      <md:EmailAddress>mailto:akimani@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp.ku.ac.ke/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">ku.ac.ke</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Kenyatta University</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by Kenyatta University</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://www.ku.ac.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://www.ku.ac.ke/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://www.ku.ac.ke/images/kunew6-3.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://www.ku.ac.ke/images/kunew6-3.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://www.ku.ac.ke/images/kunew6-3.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>
MIIE/zCCA2egAwIBAgIUauePsZJtNnAJwKVz3YZpdJnRpVgwDQYJKoZIhvcNAQEL
BQAwgY4xCzAJBgNVBAYTAktFMRMwEQYDVQQIDApTb21lLVN0YXRlMRAwDgYDVQQH
DAdOYWlyb2JpMRwwGgYDVQQKDBNLZW55YXR0YSBVbml2ZXJzaXR5MRUwEwYDVQQD
DAxpZHAua3UuYWMua2UxIzAhBgkqhkiG9w0BCQEWFGthbWF1LmhlbnJ5QGt1LmFj
LmtlMB4XDTI0MDUwODEyMzkxNloXDTM0MDUwODEyMzkxNlowgY4xCzAJBgNVBAYT
AktFMRMwEQYDVQQIDApTb21lLVN0YXRlMRAwDgYDVQQHDAdOYWlyb2JpMRwwGgYD
VQQKDBNLZW55YXR0YSBVbml2ZXJzaXR5MRUwEwYDVQQDDAxpZHAua3UuYWMua2Ux
IzAhBgkqhkiG9w0BCQEWFGthbWF1LmhlbnJ5QGt1LmFjLmtlMIIBojANBgkqhkiG
9w0BAQEFAAOCAY8AMIIBigKCAYEAvD3Kjmv8kcsy0uZzhb6CFjnhhUVT9RepUJHq
UZ7uVWo/Qz75StkrnxigoCnr1KZZYO8WSo+ypqc9hh+icPuUwFlhceX1HskUwu/O
vfryAZpqnmvQHhg8ln5ySkm7Q7GG7qkBUww/JQdHIn+jXsTZX+taqHUI4Yb9uGXJ
tslQEYSBL76OML4M5cn/EcjBxCniIgpov0GZglB9VhaSfEBIgqAi/NzloKoVo5zE
991SX0SMB6RocQTsEcPGbpFDjZYnBP7PFAyfuYyPYa5FVYjFsP3BwCmwbOMaZY7C
MFhWpNvuN/Ia/DY+kHxhyxPQ6nmrepvLwhsScRDTMPENAGet/HRoP8HauvdEf+/n
knSO3wrPHhvDMqGE58gToYX1Z89AQBhSSnxdTVU/2JHs2uO/nZzWOxg9ecQMZRkM
INZ7idgc+kvTqk3UqmRe2sdMSCRzCwKUTY0G8OhtE6A32+Sjs/FPp1/GXnWjDHBa
F0XtqzA0zUzqq6Oyj0HDoLbhvppPAgMBAAGjUzBRMB0GA1UdDgQWBBTFWAZM8RC7
jmoT3sD6bMHfO2+RVzAfBgNVHSMEGDAWgBTFWAZM8RC7jmoT3sD6bMHfO2+RVzAP
BgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBgQA2nJSibXjZPbRS4WXR
NQonH4u3zud4k0pgveCBfmZC7P7b3D6LP/acb1xJSDM6bpVpxs1i1SwwDyoCiIFT
AHcZvkUQdPGoImAmadJVQ8RL95w5IsldTZycQ8fE4chFpuXHHvMDs6Sqtt/FN6EZ
ULZuQVHa0D2z+rZ8Uw1Qgsj+tERwS2mLxh9LbyJ0+zV/IgYNSKVZ1OQl86O+pS3m
2ie/X9YyHxUvxgxSKB8Kf+PrlYUQx0gchI0hmMMxoaNE4Kjou0IDngILhRpMXe6z
QldpRnHv//4nkv100FOtSFVkidDsZF+TTjoRpw6dJtO5FxDnVwFk+70Gez3Z2Tyb
4W2SBZRFNLw8/JPWOa3FBSNojebgw4eZR5EM9QYjYRxz++0PNdYt4vQFQnueWPqo
Bv0qCG0t71rEsutBYFzEN0IlelUBQJBhyApvVv1rsPTmVrhWWmbY9y78A48PfgsE
Q4dmlKUO5w82L5P8ScJXAmNjCWfJgAfU9RwXDopwkqkKIgk=
</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ku.ac.ke/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.ku.ac.ke/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenyatta University</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Kenyatta University</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://www.ku.ac.ke/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>Director ICT</md:GivenName>
      <md:EmailAddress>mailto:director-ict@ku.ac.ke</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="other">
      <md:GivenName>Director ICT</md:GivenName>
      <md:EmailAddress>mailto:director-ict@ku.ac.ke</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>admin</md:GivenName>
      <md:EmailAddress>mailto:kamau.henry@ku.ac.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://rafiki.strathmore.edu/simplesaml/saml2/idp/metadata.php">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://rafiki.strathmore.edu/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">strathmore.edu</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Strathmore University</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by Strathmore University</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://.edu</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://.edu/</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://strathmore.edu/wp-content/themes/strathmore/images/logo.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://strathmore.edu/wp-content/themes/strathmore/images/logo.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://strathmore.edu/wp-content/themes/strathmore/images/logo.png</mdui:Logo>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:GeolocationHint>geo:-1.307,36.812;u=100</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rafiki.strathmore.edu/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rafiki.strathmore.edu/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Strathmore University</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Strathmore University</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://strathmore.edu/</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>netAdmin</md:GivenName>
      <md:EmailAddress>mailto:networkadministrator@strathmore.edu</md:EmailAddress>
      <md:TelephoneNumber>+254 703 034000/2236</md:TelephoneNumber>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>admin</md:GivenName>
      <md:EmailAddress>mailto:networkadministrator@strathmore.edu</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://idp.uonbi.ac.ke/saml2/idp/metadata.php" ID="_9543dfb77355e1b864398f6d2ccd27f9d7d89528c30da472f58dac4871885c24">
    <ds:Signature>
      <ds:SignedInfo>
        <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
        <ds:Reference URI="#_9543dfb77355e1b864398f6d2ccd27f9d7d89528c30da472f58dac4871885c24">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
          <ds:DigestValue>LmgSk9CJlKSL+hnqzQMwIuNUMBe5Ml1ej2rSLkbKWD4=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>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</ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </ds:Signature>
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" errorURL="https://idp.uonbi.ac.ke/simplesaml/module.php/core/error/ERRORURL_CODE?ts=ERRORURL_TS&amp;rp=ERRORURL_RP&amp;tid=ERRORURL_TID&amp;ctx=ERRORURL_CTX">
      <md:Extensions>
        <shibmd:Scope regexp="false">uonbi.ac.ke
			</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">University of Nairobi</mdui:DisplayName>
          <mdui:Description xml:lang="en">Identity Provider for use by University</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://uonbi.ac.ke</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://uonbi.ac.ke/data-privacy</mdui:PrivacyStatementURL>
          <mdui:Logo width="16" height="16">https://uonbi.ac.ke/sites/default/files/UoN_Logo.png</mdui:Logo>
          <mdui:Logo width="80" height="60">https://uonbi.ac.ke/sites/default/files/UoN_Logo.png</mdui:Logo>
          <mdui:Logo width="300" height="300">https://uonbi.ac.ke/sites/default/files/UoN_Logo.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIGJTCCBA2gAwIBAgIUE8QZGdnHogrPW+H9EWpRgAya1nkwDQYJKoZIhvcNAQELBQAwgaExCzAJBgNVBAYTAktFMRMwEQYDVQQIDApTb21lLVN0YXRlMRAwDgYDVQQHDAdOYWlyb2JpMR4wHAYDVQQKDBVVbml2ZXJzaXR5IG9mIE5haXJvYmkxDDAKBgNVBAsMA0lDVDEYMBYGA1UEAwwPaWRwLnVvbmJpLmFjLmtlMSMwIQYJKoZIhvcNAQkBFhRzeXNhZG1pbkB1b25iaS5hYy5rZTAeFw0yNDEwMDgwODIwNTlaFw0zNDEwMDgwODIwNTlaMIGhMQswCQYDVQQGEwJLRTETMBEGA1UECAwKU29tZS1TdGF0ZTEQMA4GA1UEBwwHTmFpcm9iaTEeMBwGA1UECgwVVW5pdmVyc2l0eSBvZiBOYWlyb2JpMQwwCgYDVQQLDANJQ1QxGDAWBgNVBAMMD2lkcC51b25iaS5hYy5rZTEjMCEGCSqGSIb3DQEJARYUc3lzYWRtaW5AdW9uYmkuYWMua2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDPdJuy2wYoP9qRMI5cGEW2bhveM9gsgYx7d0COC8nsI2r9srK2fydXN5LoZC1WH7SegZ0h/GpkGnYR8EYw8ahnrrxDibVJpUW9ta4j2x0kPYFe5qscC1egUFjnaNsvu46qUJCzSPwGQ8ZygIZZwau0r4JpRghvVyifJRYN1yPmdOReZgKiNnEWFu9PPq/dW31nwhKyyQRJXRhECX2mPccqxzzJNxZH75v+ao/1TNdJ2tQ7Z/86rAeC3U0FqSwXxEWsDoYvQOzSwwgbxjz7Y9fJqiXvTq381ewhwMqw9BbsSJCIS5u012T1DyBWfCJDKCdhYe/GjmREQTewcLVC7lJojbI5f1wv86fIXqbSGS3YzauwwbcmsvUKJwMP5VPDENvi+D5l9TkTnxJp5ke7oByf7dufpeltyYZOTlSUNNl9Yr9rAtoqCWTkXCdN4CkhtiaWV4gfERvAwc4Tn9bzY28sl8aJ8sCoSVMxbLCq/c2bgkWqo7IMVnfs9RXm7QMOw1uQYGuvb3yiuG91hYDmdjCNc2lz7oTqUyuh2yO2MwRabClSfaMf5YyajsIeCmgHy+FT0dkTSniLdwJePr7sSzoY37fxLAqGNhAGC785gWYqCJVrcEHqXsbkFU5/XARXx7LjdG6kH7MKDG6R6JtEANuPYZkr+YSi4rls4UdIMwkFDwIDAQABo1MwUTAdBgNVHQ4EFgQUzb//hlluuRqwgfG/5v3G7DOvY08wHwYDVR0jBBgwFoAUzb//hlluuRqwgfG/5v3G7DOvY08wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAmvCqacefQKPanB0PRab1ehgUxbRmz3eDEPTfz2loTFX+yzvvSBJj1N3WdOF5sn+X3WkSeCGmJaJWdiM6bYy5Ot9enJov7AdvVophZOo45CaIZ3veH8vxP6rX3GZlu0MbJXvoIOqCFS/7KqvqDlTzxK2653eeomV7wLx+TatMnmz6YoD/SMfV4MRAIoDwA59A5bFTcHKLCgqqYI4ifZus8mEGQJB2PhSIHuX89y1NV54Qt1S7SuNBYj+tJMT5R9R81qvB1jEKbCbcPk1LopeghT7yhIXp2T8fTN66MpjBt1i73KYO9MEx/8nlqGWX/GRm7z6mqBem0tpSBk6yvAYFnEPhKqWbhga57qtRLUg0NER8EvIJ3G3ADGiDAlit0WjPv4l7Rk1mGuitPrD8K/KMSbAT9LBpfny207jzNHnJ44u3XWHDv7LIBmZyEbDTlC7qN0sYfhfCs9Oes2yAKIErldC2cfa45gusEuGQ9tD78BxlRDSiPbmrPuEyVBZacgxXubY9Tx21C9hiq15KoyTUiOT27UfsXKtKKF0siH+OyRDowou0XEdtgZIhdMYv80jZTI2pGsnUkNr0pCpA8dPVOlcZEuaK85VCHjWOHd1l4bBKeXa1TbRRTWeur+SWcfHSuWxRr+1l67T9RgwIqTMgA33MyxG7dJLAKSZtAH9g3r8=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.uonbi.ac.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.uonbi.ac.ke/simplesaml/module.php/saml/idp/singleLogout"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.uonbi.ac.ke/simplesaml/module.php/saml/idp/singleSignOnService"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">University of Nairobi</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">University of Nairobi Identity Provider</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https:uonbi.ac.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Administrator</md:GivenName>
      <md:EmailAddress>mailto:sysadmin@uonbi.ac.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor entityID="https://conference.ke/sso/metadata/">
    <md:Extensions>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="true">
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIID/zCCAuegAwIBAgIUOIRsuPCpP1p13NIg6bsen/boV7wwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIID/zCCAuegAwIBAgIUOIRsuPCpP1p13NIg6bsen/boV7wwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://conference.ke/sso/ls/"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://conference.ke/sso/ls/post"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://conference.ke/sso/acs/" index="1"/>
      <md:AttributeConsumingService index="1">
        <md:ServiceName xml:lang="en">KENET Web Conference</md:ServiceName>
        <md:ServiceDescription xml:lang="en">KENET web conference application for online meetings and classes</md:ServiceDescription>
        <md:RequestedAttribute Name="mail" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
        <md:RequestedAttribute Name="displayName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        <md:RequestedAttribute Name="eduPersonAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        <md:RequestedAttribute Name="eduPersonPrimaryAffiliation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
        <md:RequestedAttribute Name="uid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Kenya Education Network (KENET)</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://kenet.or.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:Company>KENET</md:Company>
      <md:GivenName>KENET</md:GivenName>
      <md:SurName>Support</md:SurName>
      <md:EmailAddress>sysadmins@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:Company>KENET</md:Company>
      <md:GivenName>Emanuel</md:GivenName>
      <md:SurName>Wanyonyi</md:SurName>
      <md:EmailAddress>ewanyonyi@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
  <md:EntityDescriptor ID="_61b6e40885c199a19594bb4cde3f44f685299e2a" entityID="https://filesender.vlab.ac.ke/shibboleth">
    <md:Extensions>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
      <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
      <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/Login"/>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:KeyName>filesender.vlab.ac.ke</ds:KeyName>
          <ds:KeyName>https://filesender.vlab.ac.ke/shibboleth</ds:KeyName>
          <ds:X509Data>
            <ds:X509SubjectName>CN=filesender.vlab.ac.ke</ds:X509SubjectName>
            <ds:X509Certificate>MIIEPTCCAqWgAwIBAgIUK2g6063iwI5S9cBGVcWuAgQ/pggwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:KeyName>filesender.vlab.ac.ke</ds:KeyName>
          <ds:KeyName>https://filesender.vlab.ac.ke/shibboleth</ds:KeyName>
          <ds:X509Data>
            <ds:X509SubjectName>CN=filesender.vlab.ac.ke</ds:X509SubjectName>
            <ds:X509Certificate>MIIEPTCCAqWgAwIBAgIUKtI2PWupDNS082mrDP7JBTkh4IcwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
        <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
      </md:KeyDescriptor>
      <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/Artifact/SOAP" index="1"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/SOAP"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/Redirect"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/POST"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SLO/Artifact"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/POST" index="1"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/Artifact" index="3"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://filesender.vlab.ac.ke/Shibboleth.sso/SAML2/ECP" index="4"/>
    </md:SPSSODescriptor>
  </md:EntityDescriptor>
  <md:EntityDescriptor ID="_397f25859c9c6aabe6ea291d1630c4b946aaff499c83754eed365db53dfe7214" entityID="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/metadata.php/default-sp">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="https://rafiki.ke/">
        <mdrpi:RegistrationPolicy xml:lang="en">https://rafiki.ke/sites/default/files/2022-01/RAFIKI_Identity_Federation_Policy.pdf</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
    </md:Extensions>
    <md:SPSSODescriptor AuthnRequestsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">KENET FileSender</mdui:DisplayName>
          <mdui:Description xml:lang="en">File shairing service for the Kenyan research and education community</mdui:Description>
          <mdui:InformationURL xml:lang="en">https://filesender.kenet.or.ke/?s=about</mdui:InformationURL>
          <mdui:PrivacyStatementURL xml:lang="en">https://filesender.kenet.or.ke/?s=privacy</mdui:PrivacyStatementURL>
          <mdui:Logo height="723" width="149">https://filesender.kenet.or.ke/images/banner900.png</mdui:Logo>
        </mdui:UIInfo>
      </md:Extensions>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIF9TCCA92gAwIBAgIUA+6mQd4TxmAlOwmiVqDh98qGqu4wDQYJKoZIhvcNAQELBQAwgYkxCzAJBgNVBAYTAktFMRMwEQYDVQQIDApTb21lLVN0YXRlMRAwDgYDVQQHDAdOYWlyb2JpMQ4wDAYDVQQKDAVLRU5FVDEfMB0GA1UEAwwWZmlsZXNlbmRlci5rZW5ldC5vci5rZTEiMCAGCSqGSIb3DQEJARYTYWtpbWFuaUBrZW5ldC5vci5rZTAeFw0yNDEwMDUxOTAxMjFaFw0zNDEwMDUxOTAxMjFaMIGJMQswCQYDVQQGEwJLRTETMBEGA1UECAwKU29tZS1TdGF0ZTEQMA4GA1UEBwwHTmFpcm9iaTEOMAwGA1UECgwFS0VORVQxHzAdBgNVBAMMFmZpbGVzZW5kZXIua2VuZXQub3Iua2UxIjAgBgkqhkiG9w0BCQEWE2FraW1hbmlAa2VuZXQub3Iua2UwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDwF11D3bvFX8pBk2IZqXwStW5rtFXHz2bsy/Rluwnw5moBvh5RwPOVsJttgkCwjoYfdcRlc4KIyAzhmjnxJHjTlQ8/87D1tdRwZbwfGThLP96zJWqPphFxgo4/9rli5tRU0VEmXFtzYwgR5gN8LmJltVOKcSm2xVcdUiduazPCPMRqMpa36FdHMkgCFdpb+cC+Zts11TrWVaUgk/U6HqzwwTlRcUl1qlGC3W51auRXiQ/gaTfvraBcFzaKDLDeO+TJszgjDsqekFCOKedNM+qcCVTZzLE6QwEsxF2rgul3am5pIvulK7eJqcYrSo2JdFUVV/9E+k+DKGPeJnmzivsT59h7XDlbBYcJ5+aFfPEHmW3z0sxz/IHyg9RkfpYAmPqqMHC0KMyyrKLniRyghLZsDNETtYY9kBZFYvM5nrAoFSt6hiPIYZi/vVkUBXdF8AQQcoTaAQUpEoT73lUnnQecwYfORd7rwXFD7i7w1genbfzgto5iaY1tGlM29kwFLcA0Q6PPNZIbEbYwSM+/WTvpRxs1Lq8JDtRMqsyh9/zxO7UdCSWRc+AxD/eKyh4K0xUAg8OojCw9TZ9wcVvBB/ninm/N9jXDqRQFJ+ClTSqM6+4vJLEuggZ7KUA6uylNVApS6zzcQi+pmknYyoe1o6KSgttNaWi8xBBzS89ygQu3DQIDAQABo1MwUTAdBgNVHQ4EFgQUJnE53rvrFbDOatC3lpn8PXSpDSMwHwYDVR0jBBgwFoAUJnE53rvrFbDOatC3lpn8PXSpDSMwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAyWNgF7WIV6fy8++U5MZtT/PXnzywsq9LUJZpqvsgstpjGG0WSuOI23WP9GiZlS5yFdYYl8nxJl8/AOTc6+VnjaKU2Z9IgITTvs5hUkcyn5LEN/3lckEm6P88NgIhyCNVeLYMhvFN9yUdoLJNk1FjF8vACKm/MY9ml2XeJ/J/kQzKO4q10Se6gUhG10FlgKGw8gf42+2iCxKlepHneIauH+91k+WmuJ+zdFMvX7r+a+rhV1CBt/LX/MdYLGFaIg1ODimE2GND2696rLJVgZP4XBs2iS1KrKkYOm6z8Z+NbjWNFS8IuV2L0vBX7fS4XJqPChoZzxcMtDFr7G5hqhVqHYN/ZZKz7uNklaLTIxJK2ET/0qEdaHMNSfwea3ZUxYiIme7E/oKgdoomXIg8FatRBzqsHzo3USdCFNAIDYxagf20n3RaRSlnEl7wDfcX46cey0IU7EhT8G9x/+NN8Ub7r0dyiqsOMk2yPcNKOO/TdvMgYDWQjfz/uMJuD5VxwM45w1heXTIUx53Ha5HxCuJCEZrEahgRdoQMx1cQgcXZz+3byc1UiUh0TBKQ+dUd1sEqEE16Hz4omLTK5oNDkpa970+1QNrO1iqRVt7ULAJ3tegHWR+hygZWEogIc21gInMFVv9XZkC4pdvgsQS08L1JOvFuz43w1/y1OEz28OtGyqM=</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/saml2-logout.php/default-sp"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="0"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://filesender.kenet.or.ke/simplesaml/module.php/saml/sp/saml2-acs.php/default-sp" index="1"/>
      <md:AttributeConsumingService index="0">
        <md:ServiceName xml:lang="en">KENET FileSender</md:ServiceName>
        <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
        <md:RequestedAttribute FriendlyName="cn" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"/>
        <md:RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      </md:AttributeConsumingService>
    </md:SPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">Kenya Education Network Trust (KENET)</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">KENET FileSender</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://kenet.or.ke</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Anthony K. Kimani</md:GivenName>
      <md:EmailAddress>mailto:akimani@kenet.or.ke</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>
</md:EntitiesDescriptor>