title: When i generate metadata for SAML2.0 and configure it at ADFS, its validity is only 3 months
body: <p><strong>SAML configuration file</strong><br />
  public void init() {
  this.backgroundTaskTimer = new Timer(true);
  this.multiThreadedHttpConnectionManager = new MultiThreadedHttpConnectionManager();
  }</p>
  <pre><code>public void shutdown() {
      this.backgroundTaskTimer.purge();
      this.backgroundTaskTimer.cancel();
      this.multiThreadedHttpConnectionManager.shutdown();
  }
  
  @Autowired
  private SAMLUserDetailsServiceImpl samlUserDetailsServiceImpl;
  
  // Initialization of the velocity engine
  @Bean
  public VelocityEngine velocityEngine() {
      return VelocityFactory.getEngine();
  }
  
  // XML parser pool needed for OpenSAML parsing
  @Bean(initMethod = &quot;initialize&quot;)
  public StaticBasicParserPool parserPool() {
      return new StaticBasicParserPool();
  }
  
  @Bean(name = &quot;parserPoolHolder&quot;)
  public ParserPoolHolder parserPoolHolder() {
      return new ParserPoolHolder();
  }
  
  // Bindings, encoders and decoders used for creating and parsing messages
  @Bean
  public HttpClient httpClient() {
      return new HttpClient(this.multiThreadedHttpConnectionManager);
  }
  
  // SAML Authentication Provider responsible for validating of received SAML
  // messages
  @Bean
  public SAMLAuthenticationProvider samlAuthenticationProvider() {
      SAMLAuthenticationProvider samlAuthenticationProvider = new SAMLAuthenticationProvider();
      samlAuthenticationProvider.setUserDetails(samlUserDetailsServiceImpl);
      samlAuthenticationProvider.setForcePrincipalAsString(false);
      return samlAuthenticationProvider;
  }
  
  // Provider of  SAML Context
  @Bean
  public SAMLContextProviderLB contextProvider() {
      SAMLContextProviderLB samlContextProviderLB = new SAMLContextProviderLB();
      samlContextProviderLB.setScheme(scheme);
      samlContextProviderLB.setServerName(serverName);
      samlContextProviderLB.setContextPath(contextPath);
      return samlContextProviderLB;
  }
  // Initialization of OpenSAML library
  @Bean
  public static SAMLBootstrap sAMLBootstrap() {
      return new SAMLBootstrap();
  }
  
  // Logger for SAML messages and events
  @Bean
  public SAMLDefaultLogger samlLogger() {
      return new SAMLDefaultLogger();
  }
  
  // SAML 2.0 WebSSO Assertion Consumer
  @Bean
  public WebSSOProfileConsumer webSSOprofileConsumer() {
      WebSSOProfileConsumerImpl webSSOProfileConsumer = new WebSSOProfileConsumerImpl();
      webSSOProfileConsumer.setResponseSkew(600);
      webSSOProfileConsumer.setMaxAssertionTime(600);
      return webSSOProfileConsumer;
  }
  
  // SAML 2.0 Holder-of-Key WebSSO Assertion Consumer
  @Bean
  public WebSSOProfileConsumerHoKImpl hokWebSSOprofileConsumer() {
      return new WebSSOProfileConsumerHoKImpl();
  }
  
  // SAML 2.0 Web SSO profile
  @Bean
  public WebSSOProfile webSSOprofile() {
      return new WebSSOProfileImpl();
  }
  
  // SAML 2.0 Holder-of-Key Web SSO profile
  @Bean
  public WebSSOProfileConsumerHoKImpl hokWebSSOProfile() {
      return new WebSSOProfileConsumerHoKImpl();
  }
  
  // SAML 2.0 ECP profile
  @Bean
  public WebSSOProfileECPImpl ecpprofile() {
      return new WebSSOProfileECPImpl();
  }
  
  @Bean
  public SingleLogoutProfile logoutprofile() {
      return new SingleLogoutProfileImpl();
  }
  
  // Central storage of cryptographic keys
  @Bean
  public KeyManager keyManager() {
      DefaultResourceLoader loader = new DefaultResourceLoader();
      Resource storeFile = loader
              .getResource(keyStoreFilePath);
      Map&lt;String, String&gt; passwords = new HashMap&lt;String, String&gt;();
      passwords.put(keyAlias, storePass);
      return new JKSKeyManager(storeFile, storePass, passwords, keyAlias);
  }
  
  @Bean
  public WebSSOProfileOptions defaultWebSSOProfileOptions() {
      WebSSOProfileOptions webSSOProfileOptions = new WebSSOProfileOptions();
      webSSOProfileOptions.setIncludeScoping(false);
      return webSSOProfileOptions;
  }
  
  // Entry point to initialize authentication, default values taken from
  // properties file
  @Bean
  public SAMLEntryPoint samlEntryPoint() {
      SAMLEntryPoint samlEntryPoint = new SAMLEntryPoint();
      samlEntryPoint.setDefaultProfileOptions(defaultWebSSOProfileOptions());
      return samlEntryPoint;
  }
  
  // Setup advanced info about metadata
  @Bean
  public ExtendedMetadata extendedMetadata() {
      ExtendedMetadata extendedMetadata = new ExtendedMetadata();
      extendedMetadata.setSigningAlgorithm(&quot;http://www.w3.org/2001/04/xmldsig-more#rsa-sha256&quot;);
      extendedMetadata.setDigestMethodAlgorithm(&quot;http://www.w3.org/2001/04/xmlenc#sha256&quot;);
      extendedMetadata.setSignMetadata(true);
      extendedMetadata.setEcpEnabled(true);
      return extendedMetadata;
  }
  
  // IDP Discovery Service
  @Bean
  public SAMLDiscovery samlIDPDiscovery() {
      SAMLDiscovery idpDiscovery = new SAMLDiscovery();
      idpDiscovery.setIdpSelectionPath(&quot;/ats/ssoDiscovery&quot;);
      return idpDiscovery;
  }
  
  @Bean
  @Qualifier(&quot;idp-ssocircle&quot;)
  public ExtendedMetadataDelegate ssoCircleExtendedMetadataProvider()
          throws MetadataProviderException {
      HTTPMetadataProvider httpMetadataProvider = new HTTPMetadataProvider(
              this.backgroundTaskTimer, httpClient(), metadataUrl);
      httpMetadataProvider.setParserPool(parserPool());
      ExtendedMetadataDelegate extendedMetadataDelegate =
              new ExtendedMetadataDelegate(httpMetadataProvider, extendedMetadata());
      extendedMetadataDelegate.setMetadataTrustCheck(true);
      extendedMetadataDelegate.setMetadataRequireSignature(false);
      backgroundTaskTimer.purge();
      return extendedMetadataDelegate;
  }
  
  // IDP Metadata configuration - paths to metadata of IDPs in circle of trust
  // is here
  // Do no forget to call iniitalize method on providers
  @Bean
  @Qualifier(&quot;metadata&quot;)
  public CachingMetadataManager metadata() throws MetadataProviderException {
      List&lt;MetadataProvider&gt; providers = new ArrayList&lt;MetadataProvider&gt;();
      providers.add(ssoCircleExtendedMetadataProvider());
      return new CachingMetadataManager(providers);
  }
  
  // Filter automatically generates default SP metadata
  @Bean
  public MetadataGenerator metadataGenerator() {
      MetadataGenerator metadataGenerator = new MetadataGenerator();
      metadataGenerator.setEntityBaseURL(appBaseUrl);
      metadataGenerator.setEntityId(metaDataEntityId);
      metadataGenerator.setExtendedMetadata(extendedMetadata());
      metadataGenerator.setIncludeDiscoveryExtension(true);
      metadataGenerator.setKeyManager(keyManager());
      return metadataGenerator;
  }
  
  // The filter is waiting for connections on URL suffixed with filterSuffix
  // and presents SP metadata there
  @Bean
  public MetadataDisplayFilter metadataDisplayFilter() {
      return new MetadataDisplayFilter();
  }
  
  // Handler deciding where to redirect user after successful login
  @Bean
  public SavedRequestAwareAuthenticationSuccessHandler successRedirectHandler() {
      SavedRequestAwareAuthenticationSuccessHandler successRedirectHandler =
              new SavedRequestAwareAuthenticationSuccessHandler();
      successRedirectHandler.setDefaultTargetUrl(&quot;/ats/ssoLogin&quot;);
      return successRedirectHandler;
  }
  // Handler deciding where to redirect user after failed login
  @Bean
  public SimpleUrlAuthenticationFailureHandler authenticationFailureHandler() {
      SimpleUrlAuthenticationFailureHandler failureHandler =
              new SimpleUrlAuthenticationFailureHandler();
      failureHandler.setUseForward(true);
      failureHandler.setDefaultFailureUrl(&quot;/error&quot;);
      return failureHandler;
  }
  
  @Bean
  public SAMLWebSSOHoKProcessingFilter samlWebSSOHoKProcessingFilter() throws Exception {
      SAMLWebSSOHoKProcessingFilter samlWebSSOHoKProcessingFilter = new SAMLWebSSOHoKProcessingFilter();
      samlWebSSOHoKProcessingFilter.setAuthenticationSuccessHandler(successRedirectHandler());
      samlWebSSOHoKProcessingFilter.setAuthenticationManager(authenticationManager());
      samlWebSSOHoKProcessingFilter.setAuthenticationFailureHandler(authenticationFailureHandler());
      return samlWebSSOHoKProcessingFilter;
  }
  
  // Processing filter for WebSSO profile messages
  @Bean
  public SAMLProcessingFilter samlWebSSOProcessingFilter() throws Exception {
      SAMLProcessingFilter samlWebSSOProcessingFilter = new SAMLProcessingFilter();
      samlWebSSOProcessingFilter.setAuthenticationManager(authenticationManager());
      samlWebSSOProcessingFilter.setAuthenticationSuccessHandler(successRedirectHandler());
      samlWebSSOProcessingFilter.setAuthenticationFailureHandler(authenticationFailureHandler());
      return samlWebSSOProcessingFilter;
  }
  
  @Bean
  public MetadataGeneratorFilter metadataGeneratorFilter() {
      return new MetadataGeneratorFilter(metadataGenerator());
  }
  
  // Bindings
  private ArtifactResolutionProfile artifactResolutionProfile() {
      final ArtifactResolutionProfileImpl artifactResolutionProfile =
              new ArtifactResolutionProfileImpl(httpClient());
      artifactResolutionProfile.setProcessor(new SAMLProcessorImpl(soapBinding()));
      return artifactResolutionProfile;
  }
  
  @Bean
  public HTTPArtifactBinding artifactBinding(ParserPool parserPool, VelocityEngine velocityEngine) {
      return new HTTPArtifactBinding(parserPool, velocityEngine, artifactResolutionProfile());
  }
  
  @Bean
  public HTTPSOAP11Binding soapBinding() {
      return new HTTPSOAP11Binding(parserPool());
  }
  
  @Bean
  public HTTPPostBinding httpPostBinding() {
      return new HTTPPostBinding(parserPool(), velocityEngine());
  }
  
  @Bean
  public HTTPRedirectDeflateBinding httpRedirectDeflateBinding() {
      return new HTTPRedirectDeflateBinding(parserPool());
  }
  
  @Bean
  public HTTPSOAP11Binding httpSOAP11Binding() {
      return new HTTPSOAP11Binding(parserPool());
  }
  
  @Bean
  public HTTPPAOS11Binding httpPAOS11Binding() {
      return new HTTPPAOS11Binding(parserPool());
  }
  
  // Processor
  @Bean
  public SAMLProcessorImpl processor() {
      Collection&lt;SAMLBinding&gt; bindings = new ArrayList&lt;SAMLBinding&gt;();
      bindings.add(httpRedirectDeflateBinding());
      bindings.add(httpPostBinding());
      bindings.add(artifactBinding(parserPool(), velocityEngine()));
      bindings.add(httpSOAP11Binding());
      bindings.add(httpPAOS11Binding());
      return new SAMLProcessorImpl(bindings);
  }
  
  /**
   * Define the security filter chain in order to support SSO Auth by using SAML 2.0
   * @return Filter chain proxy
   * @throws Exception
   */
  @Bean
  public FilterChainProxy samlFilter() throws Exception {
      List&lt;SecurityFilterChain&gt; chains = new ArrayList&lt;SecurityFilterChain&gt;();
      chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher(&quot;/ats/ssoLogin/**&quot;),
              samlEntryPoint()));
      chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher(&quot;/saml/metadata/**&quot;),
              metadataDisplayFilter()));
      chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher(&quot;/saml/SSO/**&quot;),
              samlWebSSOProcessingFilter()));
      chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher(&quot;/saml/SSOHoK/**&quot;),
              samlWebSSOHoKProcessingFilter()));
      chains.add(new DefaultSecurityFilterChain(new AntPathRequestMatcher(&quot;/saml/ssoDiscovery/**&quot;),
              samlIDPDiscovery()));
      return new FilterChainProxy(chains);
  }
  
  /**
   * Returns the authentication manager currently used by Spring.
   * It represents a bean definition with the aim allow wiring from
   * other classes performing the Inversion of Control (IoC).
   * @throws  Exception
   */
  @Bean
  @Override
  public AuthenticationManager authenticationManagerBean() throws Exception {
      return super.authenticationManagerBean();
  }
  
  /**
   * Defines the web based security configuration.
   * @param   http It allows configuring web based security for specific http requests.
   * @throws  Exception
   */
  @Override
  protected void configure(HttpSecurity http) throws Exception {
      http
              .httpBasic()
              .authenticationEntryPoint(samlEntryPoint());
      http
              .addFilterBefore(metadataGeneratorFilter(), ChannelProcessingFilter.class)
              .addFilterAfter(samlFilter(), BasicAuthenticationFilter.class);
      http.csrf().disable();
  }
  
  /**
   * Sets a custom authentication provider.
   * @param   auth SecurityBuilder used to create an AuthenticationManager.
   * @throws  Exception
   */
  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {
      auth
              .authenticationProvider(samlAuthenticationProvider());
  }
  
  @Override
  public void afterPropertiesSet() throws Exception {
      init();
  }
  
  @Override
  public void destroy() throws Exception {
      shutdown();
  }
  </code></pre>
  <p>I am generating Jks file like this</p>
  <blockquote>
  <p>keytool -genkey -v -keystore talman-dev-key.jks -alias talmandev
  -keyalg RSA -keysize 2048</p>
  </blockquote>
  <blockquote>
  <p>What is your first and last name? [Unknown]: <a href="http://www.qtsolv.com" rel="nofollow noreferrer">www.qtsolv.com</a></p>
  <p>What is the name of your organizational unit? [Unknown]: Development</p>
  <p>what is the name of your organization? [Unknown]: quarks</p>
  <p>What is the name of your City or Locality? [Unknown]: noida</p>
  <p>What is the name of your State or Province? [Unknown]: UP</p>
  <p>What is the two-letter country code for this unit? [Unknown]: IN</p>
  </blockquote>
  <p>Also i have imported token certificate provided ADFS IDP</p>
  <blockquote>
  <p>keytool -importcert -alias devkeystore -keystore talman-dev-key.jks
  -file adfs-token.cer</p>
  </blockquote>
  <p>After Generating metadata, when it is configured at adfs, its validity is only 3 months. Can anyone have any suggestion what should i do so that my metadata validity increases?</p>
  <p>Here is my metadata file for local environment</p>
  <pre><code>**&lt;md:EntityDescriptor xmlns:md=&quot;urn:oasis:names:tc:SAML:2.0:metadata&quot; ID=&quot;com_quarks_bccl_talmandev&quot; entityID=&quot;com:quarks:bccl:talmandev&quot;&gt;
  &lt;ds:Signature xmlns:ds=&quot;http://www.w3.org/2000/09/xmldsig#&quot;&gt;
  &lt;ds:SignedInfo&gt;
  &lt;ds:CanonicalizationMethod Algorithm=&quot;http://www.w3.org/2001/10/xml-exc-c14n#&quot;/&gt;
  &lt;ds:SignatureMethod Algorithm=&quot;http://www.w3.org/2001/04/xmldsig-more#rsa-sha256&quot;/&gt;
  &lt;ds:Reference URI=&quot;#com_quarks_bccl_talmandev&quot;&gt;
  &lt;ds:Transforms&gt;
  &lt;ds:Transform Algorithm=&quot;http://www.w3.org/2000/09/xmldsig#enveloped-signature&quot;/&gt;
  &lt;ds:Transform Algorithm=&quot;http://www.w3.org/2001/10/xml-exc-c14n#&quot;/&gt;
  &lt;/ds:Transforms&gt;
  &lt;ds:DigestMethod Algorithm=&quot;http://www.w3.org/2001/04/xmlenc#sha256&quot;/&gt;
  &lt;ds:DigestValue&gt;5VigwMzuqvNICrCnK6ianq1Q1ttKIP8XhRCExuf66r4=&lt;/ds:DigestValue&gt;
  &lt;/ds:Reference&gt;
  &lt;/ds:SignedInfo&gt;
  &lt;ds:SignatureValue&gt;bhgQfNMVFHoFI7PFOmm7Z8qlaWTRcpMS/o9Q4NIO6f3Y6sp6JHqonX33TKX6uMsTJssqFY6/kste3u5BOCZS9lTdqqAZpj7lZJvQxEeXY9eD/GEo3JYEY6X6R+swiKU3PL4WDB2h6NX8v050dSvryniMTvjcgPFOHwVlvHGRa4W0mci4yRnD2V3PS4W3xzSbAc0xICDLbE/m4CyYpnnAs/WQWt6OujKWnoq2abXUbW/qXPlLmRs5ZRWkKkNx7z8ZfJicU1Z40EukYA8g3SbXLN3HBM+swU2DQv5px+03OdPINZYfA9H1nrsjfekrxhEWRVhBFUX1kQVjYQZdoVd+iQ==&lt;/ds:SignatureValue&gt;
  &lt;ds:KeyInfo&gt;
  &lt;ds:X509Data&gt;
  &lt;ds:X509Certificate&gt;MIIDczCCAlugAwIBAgIEQPMBRDANBgkqhkiG9w0BAQsFADBqMQswCQYDVQQGEwJJTjELMAkGA1UE CBMCVVAxDjAMBgNVBAcTBW5vaWRhMQ8wDQYDVQQKEwZxdWFya3MxFDASBgNVBAsTC0RldmVsb3Bt ZW50MRcwFQYDVQQDEw53d3cuZ3Rzb2x2LmNvbTAeFw0yMDA1MDUwNzQ1MzdaFw0yMDA4MDMwNzQ1 MzdaMGoxCzAJBgNVBAYTAklOMQswCQYDVQQIEwJVUDEOMAwGA1UEBxMFbm9pZGExDzANBgNVBAoT BnF1YXJrczEUMBIGA1UECxMLRGV2ZWxvcG1lbnQxFzAVBgNVBAMTDnd3dy5ndHNvbHYuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxjm5uj0d91vKyGGyN8Cwr5VZ1FL+6GVex83 J5ULHfYhvFEb0sT8oEpJnEaS2flPDQotWWlN7eN57EHAu9Vo1CXWVo2FbUeNbmKcxDxbY/w+VKGU BCJYQOuSdXgzI3lLs9rpR/xdNUfBF6/I7zXdFli/yP6c3MZ8kJjTiJ+EnIYXTkZ4JBzApKjjPqzQ ss2MlFVjWCIXa3C46RUQWKT1uBnDcp+byrxrQYxk4oO2Glv7r/vKdRSXNJxkAnVIQSliU/e3YVrE 3ybdBpmoUi79sd1SK4NdwTtmbWpLBXP0Ale8p0jwU1cRBvB+MDvNSXwzv8nChXtixv5SDKKf3iIx PQIDAQABoyEwHzAdBgNVHQ4EFgQU9PSyv4q+dH2BtYeRfbEePSe9O4swDQYJKoZIhvcNAQELBQAD ggEBAIhcVcCgX58tdHisGqcs2Ti1emDi/jkrYdXttjcKHDVxRYNwZHj2z0wxpJmxCw7Qraf2FC6s mKdUZ0TwTPnWb9AVcNXu65pUJd/3bIPaQYQHb7II/aPD2+53FwAGhQdqV9oWQilu81/aqYLcjZ/I OuSU00xX0K/UE957cbFQl9VbnB34lOIuQRJAxX8y/fcl6yQ4V+4Ak1gcDYBnebehjx2JqCaRo4e8 M8ThYM0Jv0Wb6paiA+nN0uhQeapuwRbjUzOV26s8qzx5BFexWmNDAwGNgntXDOVXpQJdgORecnzC 1CdAjlzJ4ORvNM57ZSPZRCz6WXG/PRd5OcxLD9pktjg=&lt;/ds:X509Certificate&gt;
  &lt;/ds:X509Data&gt;
  &lt;/ds:KeyInfo&gt;
  &lt;/ds:Signature&gt;
  &lt;md:SPSSODescriptor AuthnRequestsSigned=&quot;true&quot; WantAssertionsSigned=&quot;true&quot; protocolSupportEnumeration=&quot;urn:oasis:names:tc:SAML:2.0:protocol&quot;&gt;
  &lt;md:Extensions&gt;
  &lt;idpdisco:DiscoveryResponse xmlns:idpdisco=&quot;urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol&quot; Binding=&quot;urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol&quot; Location=&quot;https://localcareers.timesgroup.com:8080/saml/login?disco=true&quot; index=&quot;0&quot;/&gt;
  &lt;/md:Extensions&gt;
  &lt;md:KeyDescriptor use=&quot;signing&quot;&gt;
  &lt;ds:KeyInfo xmlns:ds=&quot;http://www.w3.org/2000/09/xmldsig#&quot;&gt;
  &lt;ds:X509Data&gt;
  &lt;ds:X509Certificate&gt;MIIDczCCAlugAwIBAgIEQPMBRDANBgkqhkiG9w0BAQsFADBqMQswCQYDVQQGEwJJTjELMAkGA1UE CBMCVVAxDjAMBgNVBAcTBW5vaWRhMQ8wDQYDVQQKEwZxdWFya3MxFDASBgNVBAsTC0RldmVsb3Bt ZW50MRcwFQYDVQQDEw53d3cuZ3Rzb2x2LmNvbTAeFw0yMDA1MDUwNzQ1MzdaFw0yMDA4MDMwNzQ1 MzdaMGoxCzAJBgNVBAYTAklOMQswCQYDVQQIEwJVUDEOMAwGA1UEBxMFbm9pZGExDzANBgNVBAoT BnF1YXJrczEUMBIGA1UECxMLRGV2ZWxvcG1lbnQxFzAVBgNVBAMTDnd3dy5ndHNvbHYuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxjm5uj0d91vKyGGyN8Cwr5VZ1FL+6GVex83 J5ULHfYhvFEb0sT8oEpJnEaS2flPDQotWWlN7eN57EHAu9Vo1CXWVo2FbUeNbmKcxDxbY/w+VKGU BCJYQOuSdXgzI3lLs9rpR/xdNUfBF6/I7zXdFli/yP6c3MZ8kJjTiJ+EnIYXTkZ4JBzApKjjPqzQ ss2MlFVjWCIXa3C46RUQWKT1uBnDcp+byrxrQYxk4oO2Glv7r/vKdRSXNJxkAnVIQSliU/e3YVrE 3ybdBpmoUi79sd1SK4NdwTtmbWpLBXP0Ale8p0jwU1cRBvB+MDvNSXwzv8nChXtixv5SDKKf3iIx PQIDAQABoyEwHzAdBgNVHQ4EFgQU9PSyv4q+dH2BtYeRfbEePSe9O4swDQYJKoZIhvcNAQELBQAD ggEBAIhcVcCgX58tdHisGqcs2Ti1emDi/jkrYdXttjcKHDVxRYNwZHj2z0wxpJmxCw7Qraf2FC6s mKdUZ0TwTPnWb9AVcNXu65pUJd/3bIPaQYQHb7II/aPD2+53FwAGhQdqV9oWQilu81/aqYLcjZ/I OuSU00xX0K/UE957cbFQl9VbnB34lOIuQRJAxX8y/fcl6yQ4V+4Ak1gcDYBnebehjx2JqCaRo4e8 M8ThYM0Jv0Wb6paiA+nN0uhQeapuwRbjUzOV26s8qzx5BFexWmNDAwGNgntXDOVXpQJdgORecnzC 1CdAjlzJ4ORvNM57ZSPZRCz6WXG/PRd5OcxLD9pktjg=&lt;/ds:X509Certificate&gt;
  &lt;/ds:X509Data&gt;
  &lt;/ds:KeyInfo&gt;
  &lt;/md:KeyDescriptor&gt;
  &lt;md:KeyDescriptor use=&quot;encryption&quot;&gt;
  &lt;ds:KeyInfo xmlns:ds=&quot;http://www.w3.org/2000/09/xmldsig#&quot;&gt;
  &lt;ds:X509Data&gt;
  &lt;ds:X509Certificate&gt;MIIDczCCAlugAwIBAgIEQPMBRDANBgkqhkiG9w0BAQsFADBqMQswCQYDVQQGEwJJTjELMAkGA1UE CBMCVVAxDjAMBgNVBAcTBW5vaWRhMQ8wDQYDVQQKEwZxdWFya3MxFDASBgNVBAsTC0RldmVsb3Bt ZW50MRcwFQYDVQQDEw53d3cuZ3Rzb2x2LmNvbTAeFw0yMDA1MDUwNzQ1MzdaFw0yMDA4MDMwNzQ1 MzdaMGoxCzAJBgNVBAYTAklOMQswCQYDVQQIEwJVUDEOMAwGA1UEBxMFbm9pZGExDzANBgNVBAoT BnF1YXJrczEUMBIGA1UECxMLRGV2ZWxvcG1lbnQxFzAVBgNVBAMTDnd3dy5ndHNvbHYuY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxjm5uj0d91vKyGGyN8Cwr5VZ1FL+6GVex83 J5ULHfYhvFEb0sT8oEpJnEaS2flPDQotWWlN7eN57EHAu9Vo1CXWVo2FbUeNbmKcxDxbY/w+VKGU BCJYQOuSdXgzI3lLs9rpR/xdNUfBF6/I7zXdFli/yP6c3MZ8kJjTiJ+EnIYXTkZ4JBzApKjjPqzQ ss2MlFVjWCIXa3C46RUQWKT1uBnDcp+byrxrQYxk4oO2Glv7r/vKdRSXNJxkAnVIQSliU/e3YVrE 3ybdBpmoUi79sd1SK4NdwTtmbWpLBXP0Ale8p0jwU1cRBvB+MDvNSXwzv8nChXtixv5SDKKf3iIx PQIDAQABoyEwHzAdBgNVHQ4EFgQU9PSyv4q+dH2BtYeRfbEePSe9O4swDQYJKoZIhvcNAQELBQAD ggEBAIhcVcCgX58tdHisGqcs2Ti1emDi/jkrYdXttjcKHDVxRYNwZHj2z0wxpJmxCw7Qraf2FC6s mKdUZ0TwTPnWb9AVcNXu65pUJd/3bIPaQYQHb7II/aPD2+53FwAGhQdqV9oWQilu81/aqYLcjZ/I OuSU00xX0K/UE957cbFQl9VbnB34lOIuQRJAxX8y/fcl6yQ4V+4Ak1gcDYBnebehjx2JqCaRo4e8 M8ThYM0Jv0Wb6paiA+nN0uhQeapuwRbjUzOV26s8qzx5BFexWmNDAwGNgntXDOVXpQJdgORecnzC 1CdAjlzJ4ORvNM57ZSPZRCz6WXG/PRd5OcxLD9pktjg=&lt;/ds:X509Certificate&gt;
  &lt;/ds:X509Data&gt;
  &lt;/ds:KeyInfo&gt;
  &lt;/md:KeyDescriptor&gt;
  &lt;md:SingleLogoutService Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot; Location=&quot;https://localcareers.timesgroup.com:8080/saml/SingleLogout&quot;/&gt;
  &lt;md:SingleLogoutService Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect&quot; Location=&quot;https://localcareers.timesgroup.com:8080/saml/SingleLogout&quot;/&gt;
  &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress&lt;/md:NameIDFormat&gt;
  &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:transient&lt;/md:NameIDFormat&gt;
  &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:2.0:nameid-format:persistent&lt;/md:NameIDFormat&gt;
  &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified&lt;/md:NameIDFormat&gt;
  &lt;md:NameIDFormat&gt;urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName&lt;/md:NameIDFormat&gt;
  &lt;md:AssertionConsumerService Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&quot; Location=&quot;https://localcareers.timesgroup.com:8080/saml/SSO&quot; index=&quot;0&quot; isDefault=&quot;true&quot;/&gt;
  &lt;md:AssertionConsumerService Binding=&quot;urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact&quot; Location=&quot;https://localcareers.timesgroup.com:8080/saml/SSO&quot; index=&quot;1&quot;/&gt;
  &lt;/md:SPSSODescriptor&gt;
  &lt;/md:EntityDescriptor&gt;**
  </code></pre>
  <p><a href="https://i.stack.imgur.com/CNlJA.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/CNlJA.png" alt="Please find the screenshot of images" /></a></p>