<?xml version="1.0"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" ID="_def22e74-4613-4eb0-a764-681cd3de88d2" entityID="http://fs.wflab.io/adfs/services/trust">
  <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    <ds:SignedInfo>
      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
      <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
      <ds:Reference URI="#_def22e74-4613-4eb0-a764-681cd3de88d2">
        <ds:Transforms>
          <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
          <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        </ds:Transforms>
        <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
        <ds:DigestValue>g+DxBj9l4/5bo+lj28ISEUHgpfbhDnq8aP6TWadnAGE=</ds:DigestValue>
      </ds:Reference>
    </ds:SignedInfo>  <ds:SignatureValue>L02pyx/vZ4FP3Cq/n/l+mH4aSaGECI6ucRZLWzGAWRxXOB4patC1s8UrgHnRnDwlDziiMyDhPv56e5OgWBCuJqxTaHa2fk1vBQhhSndmkhWYDcnoVbePq4UIrdc/+DSuadZAg6fz1OnIGZ8vXdM6ePFUkPWFjl3n3j5249F1yXAmhjeYSLk8FwwqnX5QcuIWxYAhNwSiPUuiuouFFRPZzKxsXTIToxyuQ93APDxRAKg2Dm6Xxe736KRJfEM6Z0wMmT2F3pz5Ns+CT/1EuDpbAY8TB6yEBMEEJeqmiDCbKKIxD4uxwruHRiwPmBB8kRVJcYO8owh7KhIQKnlP5REDBg==</ds:SignatureValue>
    <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
      <X509Data> <X509Certificate>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</X509Certificate>
      </X509Data>
    </KeyInfo>
  </ds:Signature>
  <SPSSODescriptor WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="encryption">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data> <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="signing">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data> <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.wflab.io/adfs/ls/"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.wflab.io/adfs/ls/"/>
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.wflab.io/adfs/ls/" index="0" isDefault="true"/>
    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://fs.wflab.io/adfs/ls/" index="1"/>
    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.wflab.io/adfs/ls/" index="2"/>
  </SPSSODescriptor>
  <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <KeyDescriptor use="encryption">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data> <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="signing">
      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
        <X509Data> <X509Certificate>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</X509Certificate>
        </X509Data>
      </KeyInfo>
    </KeyDescriptor>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.wflab.io/adfs/ls/"/>
    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.wflab.io/adfs/ls/"/>
    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://fs.wflab.io/adfs/ls/"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://fs.wflab.io/adfs/ls/"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="E-Mail Address"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Given Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="UPN"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/CommonName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Common Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/EmailAddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="AD FS 1.x E-Mail Address"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Group"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/claims/UPN" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="AD FS 1.x UPN"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Role"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Surname"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="PPID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Name ID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication time stamp"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication method"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only group SID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only primary SID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarygroupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only primary group SID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Group SID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarygroupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Primary group SID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Primary SID"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Windows account name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/isregistereduser" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Is Registered User"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Identifier"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/registrationid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Registration Identifier"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/displayname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Registration DisplayName"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/ostype" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device OS type"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/osversion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device OS Version"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/ismanaged" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Is Managed Device"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Forwarded Client IP"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-application" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client Application"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-user-agent" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client User Agent"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-ip" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client IP"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-endpoint-absolute-path" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Endpoint Path"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-proxy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Proxy"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Application Identifier"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/applicationpolicy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Application policies"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/authoritykeyidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authority Key Identifier"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/basicconstraints" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Basic Constraint"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/eku" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Enhanced Key Usage"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Issuer"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuername" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Issuer Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/keyusage" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Key Usage"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/notafter" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Not After"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/notbefore" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Not Before"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatepolicy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Certificate Policies"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/rsa" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Public Key"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/rawdata" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Certificate Raw Data"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/san" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Alternative Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/serialnumber" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Serial Number"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/signaturealgorithm" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Signature Algorithm"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/subject" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/subjectkeyidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Key Identifier"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/subjectname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplateinformation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="V2 Template Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplatename" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="V1 Template Name"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/thumbprint" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Thumbprint"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/x509version" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="X.509 Version"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Inside Corporate Network"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Password Expiration Time"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/passwordexpirationdays" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Password Expiration Days"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/ws/2012/01/passwordchangeurl" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Update Password URL"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/claims/authnmethodsreferences" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication Methods References"/>
    <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/client-request-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client Request ID"/>
  </IDPSSODescriptor>
  <ContactPerson contactType="support">
    <EmailAddress/>
    <TelephoneNumber/>
  </ContactPerson>
</EntityDescriptor>