<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
                    entityID="https://idp.simulator" 
                    ID="_idp-desc">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleSignOnService 
      Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
      Location="http://0.0.0.0:5000/sso"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>