--- Belnet/https%3A%2F%2Fwww.nederlab.nl%2Fshibboleth.xml
+++ CLARIN IdP/https%3A%2F%2Fwww.nederlab.nl%2Fshibboleth.xml
@@ -3,10 +3,8 @@
   <Extensions>
     <EntityAttributes xmlns="urn:oasis:names:tc:SAML:metadata:attribute">
       <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <AttributeValue>http://refeds.org/category/research-and-scholarship</AttributeValue>
         <AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</AttributeValue>
-      </Attribute>
-      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
-        <AttributeValue>http://refeds.org/category/research-and-scholarship</AttributeValue>
       </Attribute>
     </EntityAttributes>
     <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
@@ -14,10 +12,15 @@
     <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
     <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
     <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
     <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
     <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
     <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
     <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
     <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
     <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
   </Extensions>
@@ -26,18 +29,14 @@
       <UIInfo xmlns="urn:oasis:names:tc:SAML:metadata:ui">
         <DisplayName xml:lang="nl">Meertens Instituut</DisplayName>
         <DisplayName xml:lang="en">Meertens Institute</DisplayName>
-        <DisplayName xml:lang="de">Meertens Institut</DisplayName>
-        <DisplayName xml:lang="fi">Meertens Instituutti</DisplayName>
-        <Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot Nederlab onderzoeksomgeving</Description>
-        <Description xml:lang="en">This Service Provider regulates access to the Nederlab research environment</Description>
-        <Description xml:lang="de">Dieser Service Provider regelt den Zugang zur Nederlab-Forschungsumgebung</Description>
-        <Description xml:lang="fi">Tämä Palveluntarjoaja säätelee pääsyäNederlab tutkimusympäristö</Description>
-        <InformationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</InformationURL>
-        <InformationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</InformationURL>
-        <Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen Nederlab</Keywords>
-        <Keywords xml:lang="en">Meertens research documentation language culture humanities Nederlab</Keywords>
-        <PrivacyStatementURL xml:lang="en">https://www.meertens.knaw.nl/cms/collections/data-protection</PrivacyStatementURL>
-        <Logo height="135" width="200">https://www.meertens.knaw.nl/cms/templates/mi_hetgelaat/css/images/logo_meertens_full.png</Logo>
+        <Description xml:lang="nl">Deze ServiceProvider reguleert de toegang tot Nederlab onderzoeksomgeving en geselecteerde diensten ten behoeve van geesteswetenschappelijk onderzoek op het terrein van Nederlandse taalvariatie en cultuur</Description>
+        <Description xml:lang="en">This Service Provider regulates access to the Nederlab research environment and selected services for humanities research activities in the domain of Dutch language variation and culture</Description>
+        <InformationURL xml:lang="nl">https://meertens.knaw.nl/</InformationURL>
+        <InformationURL xml:lang="en">https://meertens.knaw.nl/en/</InformationURL>
+        <Keywords xml:lang="nl">Meertens onderzoek documentatie taal cultuur geesteswetenschappen nederlab</Keywords>
+        <Keywords xml:lang="en">Meertens research documentation language culture humanities nederlab</Keywords>
+        <PrivacyStatementURL xml:lang="en">https://www.knaw.nl/en/privacy</PrivacyStatementURL>
+        <Logo height="195" width="172">https://meertens.knaw.nl/wp-content/themes/Meertens-2024/images/logo_Meertens.png</Logo>
       </UIInfo>
       <RequestInitiator xmlns="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://www.nederlab.nl/Shibboleth.sso/Login"/>
       <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://www.nederlab.nl/Shibboleth.sso/Login" index="1"/>
@@ -46,10 +45,13 @@
       <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
         <KeyName>www.nederlab.nl</KeyName>
         <X509Data>
-          <X509SubjectName>emailAddress=servicedesk@knaw.nl,CN=www.nederlab.nl,OU=IA,O=Meertens,L=Amsterdam,ST=Noord Holland,C=NL</X509SubjectName>
-          <X509Certificate>MIIGBTCCA+2gAwIBAgIJAIGzep3p2hjqMA0GCSqGSIb3DQEBBQUAMIGYMQswCQYD VQQGEwJOTDEWMBQGA1UECAwNTm9vcmQgSG9sbGFuZDESMBAGA1UEBwwJQW1zdGVy ZGFtMREwDwYDVQQKDAhNZWVydGVuczEMMAoGA1UECwwDSSZBMRgwFgYDVQQDDA93 d3cubmVkZXJsYWIubmwxIjAgBgkqhkiG9w0BCQEWE3NlcnZpY2VkZXNrQGtuYXcu bmwwHhcNMTQwNzE3MTIxMDUzWhcNMjQwNzE0MTIxMDUzWjCBmDELMAkGA1UEBhMC TkwxFjAUBgNVBAgMDU5vb3JkIEhvbGxhbmQxEjAQBgNVBAcMCUFtc3RlcmRhbTER MA8GA1UECgwITWVlcnRlbnMxDDAKBgNVBAsMA0kmQTEYMBYGA1UEAwwPd3d3Lm5l ZGVybGFiLm5sMSIwIAYJKoZIhvcNAQkBFhNzZXJ2aWNlZGVza0BrbmF3Lm5sMIIC IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA23RweYXXwA9mGVNYCpfxOOMc HGsGjCB/rdCHJ9REW3fmdmKn3Rtm9jxI3W/3AneMuE4s+QUog3ec2+iHuOvSYFZx SNybqaqZMSTB2IddNPoQiaWV/NNQXC8Cl/BBdCal3TM82R6HgfL3cSFcbq9JPIrh TeRfU9QhO7guGKooZGd/emC5GgM4iXowI+UenTHcPVj2eEpCEvigOzBYxY9S9u2n yV26sROTLKRTu8q+uZ92YmDbL07oqhmVX7LAjanO/0PcG6Cvhv5m57vyEt4Cwzsf mqBswSQSPBSUXRCOeRXh6dvU2Zg2+9+gS4D1VjWDRuSjibQV5BvvbtRe6aVm4TC6 llySlKw/+WQHKiJF6JgLK8vCg8PWlVPRDskCMEa1z/uwdN4aIb43xsyu6RzzDti5 Qjgiy3dMK7ARrIKoByF289lw9PR2w6/YGiefgzdp5DVSM6XSax6+4MnpQhd9FrnI aW16bvErETJIV8folcTivazGf6pA9/5esJCzZjr4cxAkC22HysNsVHVZpdp+6oqG ObeOQ9YflT/0Mp3jZbzANAXHADZCLmqO0pqb8xC5gpd1ITvIWIndgy8M2BWz+QtE FVK4Vf/ynjaOp6e+ZFrszdne/d8VRRpUnFpDOHsGsi6uuT/3N13WjQmEYNxOfCST IkIAwi8mVQbhD5ARy48CAwEAAaNQME4wHQYDVR0OBBYEFPU7oll5Mreed7gM0ubx wNxhJWb9MB8GA1UdIwQYMBaAFPU7oll5Mreed7gM0ubxwNxhJWb9MAwGA1UdEwQF MAMBAf8wDQYJKoZIhvcNAQEFBQADggIBACaAhHAW5xNKt9bjOBk3Sr5Tj0x5puRo zg+B5RgNQiWR8PIBMCgn1RPGHKXHKbNP4M6b/MWXsmo5VBBcv4ofZW2jlwnonu0b aKHNpxhV4xbF1oYicGHN25Uw/VbJFljCHOGy2k+UFpSHAOm0kp67wYo/4p7yy4oq 5twu1tPDlURwlOcjA8g/2m1ym2j3pNLcyKKWhvzUzUvq4SM3IHZ8RR0OLwBBim7k AW6/jydmTX8/EVgFnwh1gkWm5w01ok+5Zy+NhMeqpFixL848pLmOdh8L7r4RYbmD 8iQKrBgI8dpVTtZLgkEfh3IsDB9vwwyEqkdRXTwLLxCnjyEapp1s13mTjo86Fx6j L0V2bWOEZiQqFObmI1GJOqCwx9Fiot5zyUpZ9cTTOufwo5dsL4SLpuDPXCOcgZ7P Zn7P9mTNyK5bm454f/Y4lYVZyOLp0hUVrKkXSdOPap2QqO5Hcui6wvCMENKaZrP4 VckqI0UohXM40SjP5Q9f6od6NevvBBg2R/7amAkXXm/MtGEpYtauZZp/XvBWEw3U anLI4k0jYr3bxxk2d325UpxVKnKp+vaIRli99xYLLroaiolrj8k981I4u1gBoEGD 728wR2l94IA0c+LxNkOwwv4cwsnqO6QKeENxz/eN6RXVcrO1U7ZS2qVvKgQ9sORu 7Hwjg9MqBq4i</X509Certificate>
+          <X509SubjectName>CN=www.nederlab.nl</X509SubjectName>
+          <X509Certificate>MIID9DCCAlygAwIBAgIJAKaHxv/BDOsrMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV BAMTD3d3dy5uZWRlcmxhYi5ubDAeFw0yNDA0MDUwOTUyMzJaFw0yNzA0MDUwOTUy MzJaMBoxGDAWBgNVBAMTD3d3dy5uZWRlcmxhYi5ubDCCAaIwDQYJKoZIhvcNAQEB BQADggGPADCCAYoCggGBALxcEt70TgEGQDLSDYi5vF2g6GCpLeqGZdzeGvyrJQip EXduHVJmHzzxKnsEjjmQLfQGIFIl2+0K8Uzg73h8S9N7lSMTPjRVTgr0+D6eGkWn e0mPP4mwISR+QU6dKXMIczLIHlVSl/FWZRyrDQmVlA+DB+CpgsdK2KPEHMB1rRlJ Wg+5ugvxRy0HGjSxVE0VAeV8Z7vrrQ1/J+1vqGL5wqFWi3T/21tMouaaJ0t30tcy 5gts/adWdIRtrdHhNX1fNfAPlgmJXpco4bPNFfxdNbgCuHDclZ+84zXoMrSMkKpZ OzM2PpAh3BKou7Jwixtpximqt4/wpl/LaVIYbqUEASN/UGP64/ERs3m10R5pjXTV 2si0k+X//tiq7eQclgwnyL4xrYc0X+3eiJVGftYSX1907+KF93a2t7zEywqBhw5c sMGBKdfu9RW06sFb1jR3HZjAJlizrkt9HacjFP9XqjZrZCimVMZhkdalQ2INQJWc zOHAG9nT/7sVTxBJLA4yCQIDAQABoz0wOzAaBgNVHREEEzARgg93d3cubmVkZXJs YWIubmwwHQYDVR0OBBYEFCg7wCd+zUOknoNo0lPP7Hi8BUmiMA0GCSqGSIb3DQEB CwUAA4IBgQAZ0SQN+oFY5fTOFIVa40MoTOY7uWjip1Rd9UjA2mi8pWsqTiLyFPNb X6Odz5ah2xLR84E8JuADCRLGFeS0yoD2fHBuDOKrvGPFoTJXfGBB4K3pP8AAnU6Z TJSXGt6+qCbJsKdFPfpCQ1ecF+KxHyPsZFFMQH+7QOQmHIrhnwZzlE87IlEtWStg A1nCYp0xviKSssSRd2gZMDxa3svolNN0Agq0fGDCvCqtoSkiNv30sG58MmXk/+um B9Dp3D0MAwDbPz/lyxZ40TnjGOZQRxnCkof5EC0X16M34A0CBaV852ZWapiElloB Ad143jPgbR0jqU+2lBXI8iHUwcBlLC+GNB5XfdisOn65v+UMv7/cmoYeaKiSS3eX Hd02BeJUJpS7aIZBx8sSAUI0YpXIiXYICJ2sI2UobD0V4Eesko2f7M2sSg/fE39r p8Py3TGZvGj7tUx4c26YKK2VVhDeOGvHgot8NcxEmjlM3PwyFzHXbje8GZyZjo8i 166he5umA9w=</X509Certificate>
         </X509Data>
       </KeyInfo>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
       <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
       <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
       <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
@@ -58,10 +60,10 @@
       <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </KeyDescriptor>
     <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.nederlab.nl/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/Artifact"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/POST"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/Redirect"/>
     <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/SOAP"/>
-    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/Redirect"/>
-    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/POST"/>
-    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.nederlab.nl/Shibboleth.sso/SLO/Artifact"/>
     <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://www.nederlab.nl/Shibboleth.sso/NIM/SOAP"/>
     <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.nederlab.nl/Shibboleth.sso/NIM/Redirect"/>
     <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.nederlab.nl/Shibboleth.sso/NIM/POST"/>
@@ -75,13 +77,13 @@
     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.nederlab.nl/Shibboleth.sso/SAML/POST" index="5"/>
     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://www.nederlab.nl/Shibboleth.sso/SAML/Artifact" index="6"/>
     <AttributeConsumingService index="1">
-      <ServiceName xml:lang="nl">Meertens Instituut</ServiceName>
-      <ServiceName xml:lang="en">Meertens Institute</ServiceName>
-      <ServiceDescription xml:lang="nl">Deze ServiceProvider reguleert de toegang tot Nederlab onderzoeksomgeving</ServiceDescription>
-      <ServiceDescription xml:lang="en">This Service Provider regulates access to the Nederlab research environment</ServiceDescription>
-      <RequestedAttribute FriendlyName="uid" Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="false"/>
+      <ServiceName xml:lang="en">Nederlab</ServiceName>
+      <ServiceDescription xml:lang="en">Access to the Nederlab service</ServiceDescription>
+      <RequestedAttribute FriendlyName="schacHomeOrganization" Name="urn:mace:terena.org:attribute-def:schacHomeOrganization" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
+      <RequestedAttribute FriendlyName="uid" Name="urn:mace:dir:attribute-def:uid" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" isRequired="true"/>
-      <RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="schacHomeOrganization" Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <RequestedAttribute FriendlyName="uid" Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
       <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
@@ -90,8 +92,8 @@
     <OrganizationName xml:lang="en">Meertens Institute</OrganizationName>
     <OrganizationDisplayName xml:lang="nl">Meertens Instituut</OrganizationDisplayName>
     <OrganizationDisplayName xml:lang="en">Meertens Institute</OrganizationDisplayName>
-    <OrganizationURL xml:lang="nl">http://www.meertens.knaw.nl/cms/nl</OrganizationURL>
-    <OrganizationURL xml:lang="en">http://www.meertens.knaw.nl/cms/en</OrganizationURL>
+    <OrganizationURL xml:lang="nl">https://meertens.knaw.nl/</OrganizationURL>
+    <OrganizationURL xml:lang="en">https://meertens.knaw.nl/en/</OrganizationURL>
   </Organization>
   <ContactPerson contactType="support">
     <GivenName>KNAW</GivenName>