<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://example.invalid/private-idp"><md:IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><md:KeyDescriptor use="signing"><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>private-certificate</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleSignOnService Binding="urn:private" Location="https://example.invalid/sso"/><md:AttributeConsumingService index="1"><md:RequestedAttribute Name="private-attribute"/></md:AttributeConsumingService></md:IDPSSODescriptor><md:Organization><md:OrganizationName>Private Org</md:OrganizationName></md:Organization><md:ContactPerson contactType="technical"><md:EmailAddress>private@example.invalid</md:EmailAddress></md:ContactPerson></md:EntityDescriptor>