<EntityDescriptor ID="_95a1847b-ba50-46fd-9f00-cf2018fda047" entityID="http://ssp.PureSTS" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI="#_95a1847b-ba50-46fd-9f00-cf2018fda047"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>UP+ktHOSNP7GRgB5ZNzMAqiWP2C3CmL7tA5hEFZg8YI=</DigestValue></Reference></SignedInfo><SignatureValue>pVBbNToJ0SOfGl2nSWaYHQtX878KFe9UWfakt1XgUWtPPNku4nPcLagqklF9YcPpxLvk0owFfjiWF+1np5eAWYZKtEP/uwJzUwmxRD8kzEiQPdEPbVDgtSCjhpkHDoaGGjbde0R1bOg3d/gTdzIQ6lqxkG8wBdCCCwKgwPNH9qrWry2kNILlEO+yCzIjFhHXKSWUJlOo35pBjMqV4g9E6r62ORiKuDwSyuMaUVA6a9MO6Plihp6yKonLSxcA45NaASn6FmRjX0zsp+dCt5WLJoJXRXFDoWw6EHzuMhTn//3Cms0P0t3rg+vZ1REAqWQDswXlodtz8Gz49dpyNNH6ow==</SignatureValue><KeyInfo><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></Signature><RoleDescriptor xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" ServiceDescription="SSP Pure Authentication Service" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:TokenTypesOffered><fed:TokenType Uri="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1" /><fed:TokenType Uri="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0" /></fed:TokenTypesOffered><fed:ClaimTypesOffered><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" /><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" /><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" /><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" /></fed:ClaimTypesOffered><fed:SecurityTokenServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.ando.co.nz/issue/wstrust/mixed/username</wsa:Address></wsa:EndpointReference></fed:SecurityTokenServiceEndpoint><fed:SecurityTokenServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.ando.co.nz/issue/wstrust/mixed/certificate</wsa:Address></wsa:EndpointReference></fed:SecurityTokenServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.ando.co.nz/issue/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor></EntityDescriptor>