Royal Belgian Institute of Natural Sciences

IdP name: Royal Belgian Institute of Natural Sciences
SP name
Entity ID: http://adfs01.naturalsciences.be/adfs/services/trust
adfs: http://adfs01.naturalsciences.be/adfs/services/trust
MDQ: MDQ 4d02e750f5MDQ 4d02e750f5
Roles: SP, IDP
Federation: tmp/edugain.org
Collisions

Entity Categories

https://refeds.org/category/code-of-conduct/v2

Log

Ref.	Date	User	Action	Attributes

Approval

Attributes supported by WAYF

FriendlyName	URI	Requested	Required	Granted

Attributes not supported by WAYF

FriendlyName/Name	Nameformat

Metadata

Metadata (XML)

<?xml version="1.0"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" entityID="http://adfs01.naturalsciences.be/adfs/services/trust">
    <md:Extensions>
      <mdrpi:RegistrationInfo registrationAuthority="http://federation.belnet.be/" registrationInstant="2012-03-27T12:00:00Z">
        <mdrpi:RegistrationPolicy xml:lang="en">http://federation.belnet.be/files/Belnet-metadata-registration-practice-statement.txt</mdrpi:RegistrationPolicy>
      </mdrpi:RegistrationInfo>
      <mdattr:EntityAttributes>
        <saml:Attribute Name="http://macedir.org/entity-category-support" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
          <saml:AttributeValue>https://refeds.org/category/code-of-conduct/v2</saml:AttributeValue>
        </saml:Attribute>
      </mdattr:EntityAttributes>
    </md:Extensions>
    <md:SPSSODescriptor WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIE9DCCAtygAwIBAgIQFuwedILdDopDlXjDcA6mVDANBgkqhkiG9w0BAQsFADA2
MTQwMgYDVQQDEytBREZTIEVuY3J5cHRpb24gLSBhZGZzMDEubmF0dXJhbHNjaWVu
Y2VzLmJlMB4XDTI2MDQxMzE1MjgyOFoXDTI3MDQxMzE1MjgyOFowNjE0MDIGA1UE
AxMrQURGUyBFbmNyeXB0aW9uIC0gYWRmczAxLm5hdHVyYWxzY2llbmNlcy5iZTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANkNF9aA0WEa/q/lRvsQtz1W
k9CcEUHqVWObFRpUpIWtGd/WpoG47/0jSFtWFUpv370Tu4ScleH7rR4qY7zV8v03
Im3txGhXOV8Cc7LWUomIWOSsI6NthFro0NGz+pDspxx/3OdehnZDvwefIa709sIh
BgoBEehgTrDNGOqUVR4QeMkgNqnanwtBiGzWcE37vr3YKcpysdkiqEN2+tL7JS1W
WpWpMqwn2k+ppkJRCgJz9PwAFFHn8JrSeegIjLlS/zkezkU/nIe16rXrzcquLlhN
gZXspNqqJGRG8Zdozk5SESDdkXapZ5hVFYo8KTTo8RJfDwcMCDGXeEm3gSW16iO2
y6FuNYQYP2ocgN82oj5t2s6qNbLtUwcY0a6UtaRA5eSIUuNgZld+f5tJTYFRUii5
lZPQ9YT2GtxZ82ojS7Lq+D1NaTyWE6R2+kJUorV1Qw+q0I4q9Z+iVterCwKoFSaa
1bNKApSVZW81SzrA3FfRgsgz3/2tDqLn0eOiWotZGwUHR4LvjN8TdcVIjJsIctkZ
pL05StYCGr8iEPvqhj6iw1x0um8EWB99+MX1MHN+lSbECilwj2xya8TZs5GgLAhe
qjKBGN1wN/Z0cBGV/QZVoGz31rIzjf19agtqhabUJIHg9gAOUZEywKI0r2M2fP0x
9urgsmV3dohQg4+PBYeRAgMBAAEwDQYJKoZIhvcNAQELBQADggIBAAFtN99fhuNW
2xmNtLOzm0cEJWTJddvSoO+Ksa2HR5umLas0nDgl8gTlKcGpw7g60IqATaDs3uCe
Rg6UHNNpcGyZsUNr4+ue+9212Pumv2KME9Wjxu1wYxXsLCJ0fYHsZOi1NAjDMRJ4
SO/9WfKcmpcbP9HOcyMXvYdMJsA2uYWawlg0TyXaINQ8c+SsQQFrwN/KEmPd988f
e1N8R/ZAFtgfIbh4wL1Klw3Q8FanJXMn3M5Srd0EWJmSwwLHJAQrhGMRVqDUaRQA
Pi+jDwRdflTtdrDOgz9S6aRzXZVP8zyyFYbArvrNxFTgc1CXwWZz/rOVxdrVghkJ
2EUNgJd+AaPSOobJJ/Q5Lv2Dj2Hhw/z+1k3lwKqc4gRSKIBz164sViTsdwk8yTNa
MxVG3X+pKkVY1LIvYklhSo68UWxUIRyXnFvsXpX61xgKnBQ3ZVhgbdZVwpqYKInr
CqeWhaB4znvp6+FaTbiH4CBWtwVOhf2sYQVEdJtu+fyzbv4BdYVjbQ07Mai+Q1tk
ydwdl0CW7Pd/hXpk6h+DPDkTaJTo4rfegDqcOUXjdcpc8CIBTBtntMxaZ/Pln3Lw
C5Yiqzva4qYAauRUZvdrJLZSBYFTJf1O3IpBbKLEblt0AtgjVrPPD3ufmeBA23h2
yBiRVKJpHliWz6MMO9iLW9T7hGHtCugh</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIE7jCCAtagAwIBAgIQGebyvUtbbrxM0fiWl8iInDANBgkqhkiG9w0BAQsFADAz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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://adfs01.naturalsciences.be/adfs/ls/"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://adfs01.naturalsciences.be/adfs/ls/"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://adfs01.naturalsciences.be/adfs/ls/" index="0" isDefault="true"/>
      <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://adfs01.naturalsciences.be/adfs/ls/" index="1"/>
    </md:SPSSODescriptor>
    <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
      <md:Extensions>
        <shibmd:Scope regexp="false">naturalsciences.be</shibmd:Scope>
        <mdui:UIInfo>
          <mdui:DisplayName xml:lang="en">Royal Belgian Institute of Natural Sciences</mdui:DisplayName>
          <mdui:Description xml:lang="en">RBINS is a museum in Brussels</mdui:Description>
          <mdui:Logo height="16" width="16">https://logo.naturalsciences.be/logo-smal.png</mdui:Logo>
          <mdui:Logo height="75" width="150">https://logo.naturalsciences.be/logo-big.png</mdui:Logo>
          <mdui:PrivacyStatementURL xml:lang="en"> https://www.naturalsciences.be/en/privacy</mdui:PrivacyStatementURL>
          <mdui:InformationURL xml:lang="en">https://www.naturalsciences.be/en/about-us</mdui:InformationURL>
        </mdui:UIInfo>
        <mdui:DiscoHints>
          <mdui:IPHint>85.91.179.49/32</mdui:IPHint>
          <mdui:DomainHint>naturalsciences.be</mdui:DomainHint>
          <mdui:GeolocationHint>geo:50.8370651,4.3773381</mdui:GeolocationHint>
        </mdui:DiscoHints>
      </md:Extensions>
      <md:KeyDescriptor use="encryption">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIE9DCCAtygAwIBAgIQFuwedILdDopDlXjDcA6mVDANBgkqhkiG9w0BAQsFADA2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</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:KeyDescriptor use="signing">
        <ds:KeyInfo>
          <ds:X509Data>
            <ds:X509Certificate>MIIE7jCCAtagAwIBAgIQGebyvUtbbrxM0fiWl8iInDANBgkqhkiG9w0BAQsFADAz
MTEwLwYDVQQDEyhBREZTIFNpZ25pbmcgLSBhZGZzMDEubmF0dXJhbHNjaWVuY2Vz
LmJlMB4XDTI2MDQxMzE1MjgzMFoXDTI3MDQxMzE1MjgzMFowMzExMC8GA1UEAxMo
QURGUyBTaWduaW5nIC0gYWRmczAxLm5hdHVyYWxzY2llbmNlcy5iZTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAM0Iy8F5fhMoFT6ZjYPb41UpDDHqJREi
B49AbWJC6mRI84kucrHkTSmc+INYTqyibQvSZvBeFHoCZ1NIZ/AKFz4z2jiiZOxe
lMT4JwTmh1Wu7UKV3wE4MQnW/WqHycB1FY7mgK6n6m9/B112hppRCT9fNaxeFeDZ
SviIgOu5t0HnkoEYxfUHbz+Z76A0SKv5Cl86HZ75bw0G9YJYwyoBr0jX+ChZlmhu
6vIEVbzF8csVpttSlDO+HA0yMIIcMPbT78Wl5xJA4Oz+pRkaHht6VPOsCQ5kLZY/
1cG/Fx7Q7NG115i8AYLGHi54rQNMZYO+nEXngKdk/a8fXZXKTh3g7ZdNyte8/6IQ
AY6laU9j2gSTNzXB4e8DzN1Po0WdMQadebqDZ9vwKKRwGz6s7+H5Gm3lfLZ2xW9A
ZOpAmSpHvOVrytD0n//lYvpJrbIsc5wk37Zg8b/IISEkKoZk2qPS9Zq8PoRvEWA5
PaNgad6iH7ciLZc573AjBPZmQ2sTkJ9eFa5YKjJrnw2JRe9+x9k68hjk+w1wN5qn
e4UXQ8DcuD65LN6dFZdSZk/eqpsCuc6sX7WaxUeMP1Se3a84Ihe3bwV0+vmMyw1y
hDtWwdh2A+keq0RUaSi5YmJaAAe5Xlg9lbqBNjb3Aow1txgFQTpPzOhJ2Xt5wsY1
G1PKmPDkvNBpAgMBAAEwDQYJKoZIhvcNAQELBQADggIBABPVsLR75cPA14WWLRfW
8Ih63DguISx2+U1YwaDmK+3dzazLySbkhx6wB42hHd77k4BWhpVR1Ms46lxotOMJ
aD0nPdzxjrJUQrBFah+tK3Eava9iByvESspkKLH4fakchclY52VuDSdj+DaASYYu
vthwNKEBw4QUH7j2p3CxBrs5h/w2b/QHFnkMbPT2qnlMtMY4zreNOdrhy5SxoPcL
vKpN84KUoVnyxiAOPPlu2zAo+xv2pi3GNj8qy8tahMMYsEgc+CzZlrtudIr0yJ27
rwvBHPeeLNIaGI3cNsn9IPX3OfFqr3k3pKFug/6HIjnL0GBzTbUwyCm118ye/HxI
/Ey1qRbCnkONUBgNhdrM2V6Z5+Eb0zQ0+uTVov9ocCW4ecjUiWWa0dxVrDN6utro
k0mCqJ2fCSEnWUABAVD2C5i6mOSuNhBCLHLPDsUGCQ2dWxpNFywFTy8RSVMO+aIA
LlMYwOEr6GSndCjugXhDCfOkpwdpWtK6Hp91ODl4ZCGMob27ac4gtg5DnP8h2ZPs
p7GpeevUgThXPAyRmaPKKbCDbXwXxUjviWZDBQFXfHEdv/0Q/wXRp9AEUHUsyqVK
GmrQR3r45vmrQ209N6FCXbfdwWWGcejn0T/gs7tDFD3h7hTkxctTdt9JKIL/Pu2C
kjxSpNOI6Wa+HQ7fn9o9U0Hu</ds:X509Certificate>
          </ds:X509Data>
        </ds:KeyInfo>
      </md:KeyDescriptor>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://adfs01.naturalsciences.be/adfs/ls/"/>
      <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://adfs01.naturalsciences.be/adfs/ls/"/>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
      <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://adfs01.naturalsciences.be/adfs/ls/"/>
      <md:SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://adfs01.naturalsciences.be/adfs/ls/"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="E-Mail Address"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Given Name"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Name"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="UPN"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/claims/CommonName" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Common Name"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/claims/EmailAddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="AD FS 1.x E-Mail Address"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/claims/Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Group"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/claims/UPN" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="AD FS 1.x UPN"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Role"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Surname"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="PPID"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Name ID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication time stamp"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication method"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only group SID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only primary SID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/denyonlyprimarygroupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Deny only primary group SID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Group SID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarygroupsid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Primary group SID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/primarysid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Primary SID"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Windows account name"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/isregistereduser" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Is Registered User"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/identifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Identifier"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/registrationid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Registration Identifier"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/displayname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device Registration DisplayName"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/ostype" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device OS type"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/osversion" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Device OS Version"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/devicecontext/claims/ismanaged" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Is Managed Device"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-forwarded-client-ip" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Forwarded Client IP"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-application" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client Application"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-user-agent" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client User Agent"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-client-ip" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client IP"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-endpoint-absolute-path" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Endpoint Path"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/x-ms-proxy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Proxy"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Application Identifier"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/applicationpolicy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Application policies"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/authoritykeyidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authority Key Identifier"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/basicconstraints" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Basic Constraint"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/eku" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Enhanced Key Usage"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuer" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Issuer"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/issuername" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Issuer Name"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/keyusage" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Key Usage"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/notafter" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Not After"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/notbefore" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Not Before"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatepolicy" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Certificate Policies"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/rsa" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Public Key"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/rawdata" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Certificate Raw Data"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/san" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Alternative Name"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2008/06/identity/claims/serialnumber" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Serial Number"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/signaturealgorithm" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Signature Algorithm"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/subject" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/subjectkeyidentifier" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Key Identifier"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/subjectname" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Subject Name"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplateinformation" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="V2 Template Name"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/extension/certificatetemplatename" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="V1 Template Name"/>
      <saml:Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/thumbprint" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Thumbprint"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/12/certificatecontext/field/x509version" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="X.509 Version"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2012/01/insidecorporatenetwork" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Inside Corporate Network"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2012/01/passwordexpirationtime" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Password Expiration Time"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2012/01/passwordexpirationdays" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Password Expiration Days"/>
      <saml:Attribute Name="http://schemas.microsoft.com/ws/2012/01/passwordchangeurl" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Update Password URL"/>
      <saml:Attribute Name="http://schemas.microsoft.com/claims/authnmethodsreferences" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Authentication Methods References"/>
      <saml:Attribute Name="http://schemas.microsoft.com/2012/01/requestcontext/claims/client-request-id" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="Client Request ID"/>
    </md:IDPSSODescriptor>
    <md:Organization>
      <md:OrganizationName xml:lang="en">RBINS</md:OrganizationName>
      <md:OrganizationDisplayName xml:lang="en">Royal Belgian Institute of Natural Sciences</md:OrganizationDisplayName>
      <md:OrganizationURL xml:lang="en">https://naturalsciences.be</md:OrganizationURL>
    </md:Organization>
    <md:ContactPerson contactType="support">
      <md:GivenName>Clara Riva</md:GivenName>
      <md:EmailAddress>mailto:criva@naturalsciences.be</md:EmailAddress>
    </md:ContactPerson>
    <md:ContactPerson contactType="technical">
      <md:GivenName>Clara Riva</md:GivenName>
      <md:SurName>Clara Riva</md:SurName>
      <md:EmailAddress>mailto:criva@naturalsciences.be</md:EmailAddress>
    </md:ContactPerson>
  </md:EntityDescriptor>

Number of schema errors: 0

Number of errors in metadata: 1

http://adfs01.naturalsciences.be/adfs/services/trust: noes md:Extensions/mdui:DiscoHints[not(parent::md:IDPSSODescriptor)]

Summary

keywords

4d02e750f5 http://adfs01.naturalsciences.be/adfs/services/trust CoCo2 federation.belnet.be/ Royal Belgian Institute of Natural Sciences naturalsciences.be

entityid

http://adfs01.naturalsciences.be/adfs/services/trust

validUntil

2026-08-02T15:30:01Z

cacheDuration

PT6H

registrationInstant

2012-03-27T12:00:00Z

organisationdisplayname

Royal Belgian Institute of Natural Sciences

idpname

Royal Belgian Institute of Natural Sciences

servicename

servicename2

wayf_access_accept

assertion.encryption

exportaskrib

signingmethod

edugain

modified

spapproved

phphfeed

cat

signresponse

env

map2IdP

map2SP

attributenameformat

standalone

wayfscope

entid

4d02e750f5

regauth

federation.belnet.be/

scope

0	naturalsciences.be

consent.disable

[ ]

federation

[ ]

feds

[ ]

entitycategories

0	https://refeds.org/category/code-of-conduct/v2

[ ]

nameidformat

0	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
1	urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
2	urn:oasis:names:tc:SAML:2.0:nameid-format:transient
3	urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
4	urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
5	urn:oasis:names:tc:SAML:2.0:nameid-format:transient

org

[ ]

arp

[ ]

keywordnames

0	Royal Belgian Institute of Natural Sciences

contactmails

0	mailto:criva@naturalsciences.be
1	mailto:criva@naturalsciences.be

valuefilter

[ ]

valuefilterlegacy

[ ]

idplist

[ ]

SimpleSign

false

true

IDP

true

false

SAML2

true

SLO

true

sirtfi

false

sirtfi2

false

spdisplay

idpdisplay

Royal Belgian Institute of Natural Sciences

certnotafter

0	2027-04-13T15:28:28+00:00
1	2027-04-13T15:28:30+00:00
2	2027-04-13T15:28:28+00:00
3	2027-04-13T15:28:30+00:00

keyname

0	417699a01167f78071d6cda8d3294a7b7517bd61
1	5bea8e94bb274dde7d1825c175cf5e928c92f3f8
2	417699a01167f78071d6cda8d3294a7b7517bd61
3	5bea8e94bb274dde7d1825c175cf5e928c92f3f8

keytype

0	RSA
1	RSA
2	RSA
3	RSA

keysize

0	4096
1	4096
2	4096
3	4096

fed

edugain.org

feedurl

https://mds.edugain.org/edugain-v2.xml

type

tmp

mtime

2026-07-28T16:45:10Z

entcat

CoCo2

collisions

[ ]

schemaerrors

metadataerrors