--- SURFconext/https%3A%2F%2Facdh.oeaw.ac.at%2Fshibboleth.xml
+++ CLARIN IdP/https%3A%2F%2Facdh.oeaw.ac.at%2Fshibboleth.xml
@@ -1,58 +1,105 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" cacheDuration="PT86400S" entityID="https://acdh.oeaw.ac.at/shibboleth" validUntil="2025-05-03T00:10:03.437271Z">
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://acdh.oeaw.ac.at/shibboleth">
   <Extensions>
-    <RegistrationInfo xmlns="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="https://www.aai.dfn.de">
-      <RegistrationPolicy xml:lang="en">https://www.aai.dfn.de/en/join/</RegistrationPolicy>
-    </RegistrationInfo>
+    <EntityAttributes xmlns="urn:oasis:names:tc:SAML:metadata:attribute">
+      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <AttributeValue>http://refeds.org/category/research-and-scholarship</AttributeValue>
+        <AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</AttributeValue>
+        <AttributeValue>http://clarin.eu/category/clarin-member</AttributeValue>
+      </Attribute>
+    </EntityAttributes>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
   </Extensions>
   <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
+      <RequestInitiator xmlns="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/Login"/>
+      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/Login" index="2"/>
       <UIInfo xmlns="urn:oasis:names:tc:SAML:metadata:ui">
         <DisplayName xml:lang="en">ACDH-ÖAW Services for Digital Humanities</DisplayName>
-        <DisplayName xml:lang="nl">ACDH-ÖAW Services for Digital Humanities</DisplayName>
+        <DisplayName xml:lang="de">ACDH-ÖAW Dienste für Digitale Geisteswissenschaften</DisplayName>
         <Description xml:lang="en">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</Description>
-        <Description xml:lang="nl">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</Description>
-        <Logo height="64" width="80" xml:lang="en">https://arche.acdh.oeaw.ac.at/browser/themes/custom/acdh_repo/icons/acdh_logo120h.png</Logo>
+        <Description xml:lang="de">Verschiedene Dienste des österreichischen Zentrums für Digitale Geisteswissenschaften der Österreichischen Akademie der Wissenschaften (ACDH-ÖAW) (primär im Rahmen der CLARIN-Initiative).</Description>
+        <InformationURL xml:lang="en">https://www.oeaw.ac.at/acdh/tools/</InformationURL>
+        <InformationURL xml:lang="de">https://www.oeaw.ac.at/acdh/tools/</InformationURL>
         <PrivacyStatementURL xml:lang="en">https://arche.acdh.oeaw.ac.at/browser/privacy</PrivacyStatementURL>
+        <Logo height="107" width="93">https://arche.acdh.oeaw.ac.at/browser/themes/acdh_repo/icons/acdh_logo120h.png</Logo>
       </UIInfo>
     </Extensions>
-    <KeyDescriptor use="signing">
+    <KeyDescriptor>
       <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
         <X509Data>
-          <X509Certificate>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</X509Certificate>
+          <X509Certificate>MIID9DCCAlygAwIBAgIJAP7/qjVZtRXHMA0GCSqGSIb3DQEBDQUAMBoxGDAWBgNV BAMTD2FjZGgub2Vhdy5hYy5hdDAeFw0yNDA0MTQyMTIwMjVaFw0zNDA2MDEyMTIw MjVaMBoxGDAWBgNVBAMTD2FjZGgub2Vhdy5hYy5hdDCCAaIwDQYJKoZIhvcNAQEB BQADggGPADCCAYoCggGBALwuOoLc+OxGfeAIh4Y3SX68XAQGSCH5MyArjpA5YHZk riJivCrQbXJDbhduL2o5NRYtI3dsO/bjMeuULaRWDW7BSx2SRlmqzeJOR0oLAPhP lpPzUbYdzMEJYkObE6ejD8R6oQSh6WjPUEBqvYnDiP+nBXZ5djIfjVFa/qVPuISV crksXaIQcQMhlqiZ1hCHOHMUbMyJfIhRG5ZSs/Q15+UXXvCROcmnD4i8KfA8GJ5v HuhS69f/D7vy4I33Uy+KSm9MrCRGdmia89P/2xlhLPTBcgA2OQJvhEYh3a8B9iFt siK1d3GsbzL4lsjAFmxhIGX/TtPBn+ApB593ZbC1kcnkDMXMIhOi7TkQODHUV67p mhIjUlRjgGmCH8E58ayj1oIimV3//C5aZ+mr35lEhxngVqGxfrgQdUFszioi2VB5 AnzDO/tzHVh2Z29ycZ0ws5aXkXV9kOjyPj3w8IgUT1in82Qs0L6xSnxfVF/X2ruQ JUOfc1ObvCnIQZa5EtKPQwIDAQABoz0wOzAaBgNVHREEEzARgg9hY2RoLm9lYXcu YWMuYXQwHQYDVR0OBBYEFDISxHb1t2WtMI3/46trh40MXgpXMA0GCSqGSIb3DQEB DQUAA4IBgQBgDWdT8YYfyt0/RX8ut9+G1dTjS55fwNIO7GNmeBlChzp1wmeJ6uMT RBWa0IaH7hfCYS/FfOxVYPvJL+HUo6f2EQfSVomRpP4IjDVtjGP0roYqHXeJ84cH gqZon1e7nX3tKncZrzbBOdlibl1lxEo+Y3DYw52ng4R1GaQvqJmpTtai74OsjUtw kpHfJzdjYHlBFB2evzwnI3k0+DuJ8qBhZNtbimgMVjn5Eua7JkMyY+k8QctxP/TJ DQaQdiOq9nosMgThZZqJ71neVb9ORToA2ky3gVrIUxC3PXVUk/x+4BmibLVJne+V Ua8ZeSC7zkLj0u0i6t0MHQahUvwHTghLxLcO1kPu993QrlJJif8kVfQnozlCptFO Zpg/ylrc5hU1eyfpSrVNV+0uT9ZUWK/7xpYCI84JnBmLpnJIbF94B/WRbWMbFmF5 qlzByeJz468j8MMfalTTBXJbT8HQei4f+Q5A+/MPV9DydfOVvTNRXbKp/KwDYmrA /uPGPlvmCmg=</X509Certificate>
         </X509Data>
       </KeyInfo>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </KeyDescriptor>
-    <KeyDescriptor use="encryption">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>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</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/Artifact/SOAP" index="2"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/SLO/SOAP"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/SLO/Redirect"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/SLO/POST"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/SLO/Artifact"/>
     <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://acdh.oeaw.ac.at/Shibboleth.sso/SAML2/POST" index="2"/>
-    <AttributeConsumingService index="0">
+    <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">ACDH-ÖAW Services for Digital Humanities</ServiceName>
-      <ServiceName xml:lang="nl">ACDH-ÖAW Services for Digital Humanities</ServiceName>
+      <ServiceName xml:lang="de">ACDH-ÖAW Dienste für Digitale Geisteswissenschaften</ServiceName>
       <ServiceDescription xml:lang="en">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</ServiceDescription>
-      <ServiceDescription xml:lang="nl">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</ServiceDescription>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:displayName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonTargetedID"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:givenName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:mail"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:sn"/>
+      <ServiceDescription xml:lang="de">Verschiedene Dienste des österreichischen Zentrums für Digitale Geisteswissenschaften der Österreichischen Akademie der Wissenschaften (ACDH-ÖAW) (primär im Rahmen der CLARIN-Initiative).</ServiceDescription>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <RequestedAttribute FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
   <Organization>
-    <OrganizationName xml:lang="en">e459</OrganizationName>
-    <OrganizationName xml:lang="nl">e459</OrganizationName>
-    <OrganizationDisplayName xml:lang="en">CLARIN ERIC</OrganizationDisplayName>
-    <OrganizationDisplayName xml:lang="nl">CLARIN ERIC</OrganizationDisplayName>
-    <OrganizationURL xml:lang="en">http://clarin.eu</OrganizationURL>
+    <OrganizationName xml:lang="de">Österreichische Akademie der Wissenschaften</OrganizationName>
+    <OrganizationName xml:lang="en">Austrian Academy of Sciences</OrganizationName>
+    <OrganizationDisplayName xml:lang="de">Österreichisches Zentrum für Digitale Geisteswissenschaften der Österreichischen Akademie der Wissenschaften (ACDH-ÖAW)</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW)</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://acdh.oeaw.ac.at/</OrganizationURL>
   </Organization>
+  <ContactPerson contactType="technical">
+    <GivenName>Mateusz</GivenName>
+    <SurName>Żółtak</SurName>
+    <EmailAddress>mailto:mateusz.zoltak@oeaw.ac.at</EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Matej</GivenName>
+    <SurName>Durco</SurName>
+    <EmailAddress>mailto:matej.durco@oeaw.ac.at</EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Dalibor</GivenName>
+    <SurName>Pancic</SurName>
+    <EmailAddress>mailto:dalibor.pancic@oeaw.ac.at</EmailAddress>
+  </ContactPerson>
   <ContactPerson contactType="administrative">
     <GivenName>Karlheinz</GivenName>
     <SurName>Mörth</SurName>
@@ -68,9 +115,4 @@
     <SurName>Helpdesk</SurName>
     <EmailAddress>mailto:helpdesk@oeaw.ac.at</EmailAddress>
   </ContactPerson>
-  <ContactPerson contactType="technical">
-    <GivenName>Dalibor</GivenName>
-    <SurName>Pancic</SurName>
-    <EmailAddress>mailto:dalibor.pancic@oeaw.ac.at</EmailAddress>
-  </ContactPerson>
 </EntityDescriptor>