<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
                    entityID="https://saml.totally-secure.com" 
                    ID="_idp-desc">
  <md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleSignOnService 
      Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
      Location="https://saml.totally-secure.com/sso"/>
  </md:IDPSSODescriptor>
</md:EntityDescriptor>