<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
                    entityID="http://idp.actestdomain.org" 
                    ID="_idp-desc">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleSignOnService 
      Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
      Location="http://idp.actestdomain.org/sso"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>