<!-- generated: 2026-08-19 | method: probed | source: https://aaf.unsw.edu.au/idp/shibboleth (and the AAF federation aggregate https://md.aaf.edu.au/aaf-metadata.xml) | x-operator: institution | X.509 certificate values elided; everything else verbatim -->
<?xml version="1.0" encoding="UTF-8"?>
<EntityDescriptor entityID="https://aaf.unsw.edu.au/idp/shibboleth" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0">
  <IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <Extensions>
      <shibmd:Scope regexp="false">unsw.edu.au</shibmd:Scope>
    </Extensions>
    <KeyDescriptor use="signing">
      <ds:KeyInfo>
        <ds:KeyName>Imported Signing Certificate</ds:KeyName>
        <ds:X509Data>
          <ds:X509Certificate>[ELIDED — fetch the live document for key material]</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <KeyDescriptor use="encryption">
      <ds:KeyInfo>
        <ds:KeyName>Imported Encryption Certificate</ds:KeyName>
        <ds:X509Data>
          <ds:X509Certificate>[ELIDED — fetch the live document for key material]</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </KeyDescriptor>
    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aaf.unsw.edu.au/idp/profile/SAML2/POST/SSO"/>
    <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aaf.unsw.edu.au/idp/profile/SAML2/Redirect/SSO"/>
    <saml:Attribute Name="urn:oid:1.3.6.1.4.1.27856.1.2.5" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="auEduPersonSharedToken"/>
    <saml:Attribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="email"/>
    <saml:Attribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="displayName"/>
  </IDPSSODescriptor>
  <Organization>
    <OrganizationName xml:lang="en">unsw.edu.au</OrganizationName>
    <OrganizationDisplayName xml:lang="en">The University of New South Wales</OrganizationDisplayName>
    <OrganizationURL xml:lang="en">https://www.unsw.edu.au</OrganizationURL>
  </Organization>
</EntityDescriptor>
