--- SURFconext/https%3A%2F%2Fclarin.oeaw.ac.at%2Fshibboleth.xml
+++ CLARIN IdP/https%3A%2F%2Fclarin.oeaw.ac.at%2Fshibboleth.xml
@@ -1,58 +1,105 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" cacheDuration="PT86400S" entityID="https://clarin.oeaw.ac.at/shibboleth" validUntil="2025-04-16T00:10:03.330437Z">
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://clarin.oeaw.ac.at/shibboleth">
   <Extensions>
-    <RegistrationInfo xmlns="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="https://www.aai.dfn.de">
-      <RegistrationPolicy xml:lang="en">https://www.aai.dfn.de/en/join/</RegistrationPolicy>
-    </RegistrationInfo>
+    <EntityAttributes xmlns="urn:oasis:names:tc:SAML:metadata:attribute">
+      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <AttributeValue>http://refeds.org/category/research-and-scholarship</AttributeValue>
+        <AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</AttributeValue>
+        <AttributeValue>http://clarin.eu/category/clarin-member</AttributeValue>
+      </Attribute>
+    </EntityAttributes>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <DigestMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <SigningMethod xmlns="urn:oasis:names:tc:SAML:metadata:algsupport" Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
   </Extensions>
   <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
+      <RequestInitiator xmlns="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/Login"/>
+      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/Login" index="1"/>
       <UIInfo xmlns="urn:oasis:names:tc:SAML:metadata:ui">
         <DisplayName xml:lang="en">ACDH-ÖAW Services for Digital Humanities</DisplayName>
-        <DisplayName xml:lang="nl">ACDH-ÖAW Services for Digital Humanities</DisplayName>
+        <DisplayName xml:lang="de">ACDH-ÖAW Dienste für Digitale Geisteswissenschaften</DisplayName>
         <Description xml:lang="en">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</Description>
-        <Description xml:lang="nl">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</Description>
-        <Logo height="64" width="80" xml:lang="en">https://arche.acdh.oeaw.ac.at/browser/themes/custom/acdh_repo/icons/acdh_logo120h.png</Logo>
+        <Description xml:lang="de">Verschiedene Dienste des österreichischen Zentrums für Digitale Geisteswissenschaften der Österreichischen Akademie der Wissenschaften (ACDH-ÖAW) (primär im Rahmen der CLARIN-Initiative).</Description>
+        <InformationURL xml:lang="en">http://acdh.oeaw.ac.at/</InformationURL>
+        <InformationURL xml:lang="de">http://acdh.oeaw.ac.at/</InformationURL>
         <PrivacyStatementURL xml:lang="en">https://arche.acdh.oeaw.ac.at/browser/privacy</PrivacyStatementURL>
+        <Logo height="107" width="93">https://arche.acdh.oeaw.ac.at/browser/themes/acdh_repo/icons/acdh_logo120h.png</Logo>
       </UIInfo>
     </Extensions>
-    <KeyDescriptor use="signing">
+    <KeyDescriptor>
       <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
         <X509Data>
-          <X509Certificate>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</X509Certificate>
+          <X509Certificate>MIIDBjCCAe6gAwIBAgIJAMjluQowjzfUMA0GCSqGSIb3DQEBDQUAMCAxHjAcBgNV BAMTFWNsYXJpbi5hcnoub2Vhdy5hYy5hdDAeFw0yNDAxMDkxMTEwNDVaFw0zNDAy MjUxMTEwNDVaMCAxHjAcBgNVBAMTFWNsYXJpbi5hcnoub2Vhdy5hYy5hdDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJ8B6WyydvbvIHJ1Cb34h8838G5 JItPpmJC+D/K+6MI3YiydVKKlhaGh/GqcWcz0Qw30W7WYilUZ5IkzZA12QY1CF1g cJPNUmYibzP3sAZ9KrvaCEMxlseoldh0yc+8Q8eplQH9id4u5G+J8SvTBejt261y ATb6pIANsRQkOLMvxtq7/NrEnAmZQOM5obsshHxLlXlJ0qixakaYXWKCIuUUOEFY FT13vhWrUC4BWW0OGimoR1cBnyEJtS9kRNWQ85+03VVVvLk9AssoHWxOJVJ7HE1m 5/xgMrmpOv1vbqDKDljrY19zheNOoFr3RdaSCb1Eh8lWCNigUgOwK8Mm7VECAwEA AaNDMEEwIAYDVR0RBBkwF4IVY2xhcmluLmFyei5vZWF3LmFjLmF0MB0GA1UdDgQW BBQ6IH3aND4GFYEEgrR0IKf/d4QEcDANBgkqhkiG9w0BAQ0FAAOCAQEAtXSPBe1J Fdb0tcfbyRwgkyT97eY2kFUBPBdgbjdPOlHS89GzJsI9hv6Egy9+Z/2AZ9eFxLmb zKbOp9fq5HV1Q4zaQ18MPM/JpfJzx1C6MaDAEOuxRTII9tpgP16E9Pq3rCN/w470 6+CRY1IEzoq33ZxAaGjc+Rb7o8wanaP+Sqq2f4HTjqWki5lEXaUPI7DlaVddpaRs J5Fyc2Ww1UpYxtfp4edMq5SIrsUnim7s0iNiuB6ffcXvb+dT3yFMsimd7Er5kLNh 5dObOhQRXKVc648sxNSKo0pqmGKt4SOhCXdJG/Mkzf/wyPqE0cOt5Mf4p4EYzXch F5EbZqtrrf1m4Q==</X509Certificate>
         </X509Data>
       </KeyInfo>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </KeyDescriptor>
-    <KeyDescriptor use="encryption">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>MIIDBjCCAe6gAwIBAgIJAMjluQowjzfUMA0GCSqGSIb3DQEBDQUAMCAxHjAcBgNVBAMTFWNsYXJpbi5hcnoub2Vhdy5hYy5hdDAeFw0yNDAxMDkxMTEwNDVaFw0zNDAyMjUxMTEwNDVaMCAxHjAcBgNVBAMTFWNsYXJpbi5hcnoub2Vhdy5hYy5hdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJ8B6WyydvbvIHJ1Cb34h8838G5JItPpmJC+D/K+6MI3YiydVKKlhaGh/GqcWcz0Qw30W7WYilUZ5IkzZA12QY1CF1gcJPNUmYibzP3sAZ9KrvaCEMxlseoldh0yc+8Q8eplQH9id4u5G+J8SvTBejt261yATb6pIANsRQkOLMvxtq7/NrEnAmZQOM5obsshHxLlXlJ0qixakaYXWKCIuUUOEFYFT13vhWrUC4BWW0OGimoR1cBnyEJtS9kRNWQ85+03VVVvLk9AssoHWxOJVJ7HE1m5/xgMrmpOv1vbqDKDljrY19zheNOoFr3RdaSCb1Eh8lWCNigUgOwK8Mm7VECAwEAAaNDMEEwIAYDVR0RBBkwF4IVY2xhcmluLmFyei5vZWF3LmFjLmF0MB0GA1UdDgQWBBQ6IH3aND4GFYEEgrR0IKf/d4QEcDANBgkqhkiG9w0BAQ0FAAOCAQEAtXSPBe1JFdb0tcfbyRwgkyT97eY2kFUBPBdgbjdPOlHS89GzJsI9hv6Egy9+Z/2AZ9eFxLmbzKbOp9fq5HV1Q4zaQ18MPM/JpfJzx1C6MaDAEOuxRTII9tpgP16E9Pq3rCN/w4706+CRY1IEzoq33ZxAaGjc+Rb7o8wanaP+Sqq2f4HTjqWki5lEXaUPI7DlaVddpaRsJ5Fyc2Ww1UpYxtfp4edMq5SIrsUnim7s0iNiuB6ffcXvb+dT3yFMsimd7Er5kLNh5dObOhQRXKVc648sxNSKo0pqmGKt4SOhCXdJG/Mkzf/wyPqE0cOt5Mf4p4EYzXchF5EbZqtrrf1m4Q==</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
+    <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SLO/SOAP"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SLO/Redirect"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SLO/POST"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SLO/Artifact"/>
     <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://clarin.oeaw.ac.at/Shibboleth.sso/SAML2/POST" index="1"/>
-    <AttributeConsumingService index="0">
+    <AttributeConsumingService index="1">
       <ServiceName xml:lang="en">ACDH-ÖAW Services for Digital Humanities</ServiceName>
-      <ServiceName xml:lang="nl">ACDH-ÖAW Services for Digital Humanities</ServiceName>
+      <ServiceName xml:lang="de">ACDH-ÖAW Dienste für Digitale Geisteswissenschaften</ServiceName>
       <ServiceDescription xml:lang="en">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</ServiceDescription>
-      <ServiceDescription xml:lang="nl">Various services provided by the Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW) (primarily in the context of the CLARIN initiative).</ServiceDescription>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:displayName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonTargetedID"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:givenName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:mail"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:sn"/>
+      <ServiceDescription xml:lang="de">Verschiedene Dienste des österreichischen Zentrums für Digitale Geisteswissenschaften der Österreichischen Akademie der Wissenschaften (ACDH-ÖAW) (primär im Rahmen der CLARIN-Initiative).</ServiceDescription>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <RequestedAttribute FriendlyName="eduPersonTargetedID" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="sn" Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="givenName" Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
   <Organization>
-    <OrganizationName xml:lang="en">e459</OrganizationName>
-    <OrganizationName xml:lang="nl">e459</OrganizationName>
-    <OrganizationDisplayName xml:lang="en">CLARIN ERIC</OrganizationDisplayName>
-    <OrganizationDisplayName xml:lang="nl">CLARIN ERIC</OrganizationDisplayName>
-    <OrganizationURL xml:lang="en">http://clarin.eu</OrganizationURL>
+    <OrganizationName xml:lang="de">Österreichische Akademie der Wissenschaften</OrganizationName>
+    <OrganizationName xml:lang="en">Austrian Academy of Sciences</OrganizationName>
+    <OrganizationDisplayName xml:lang="de">Österreichisches Zentrum für Digitale Geisteswissenschaften der Österreichischen Akademie der Wissenschaften (ACDH-ÖAW)</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="en">Austrian Centre for Digital Humanities of the Austrian Academy of Sciences (ACDH-ÖAW)</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://acdh.oeaw.ac.at/</OrganizationURL>
   </Organization>
+  <ContactPerson contactType="technical">
+    <GivenName>Mateusz</GivenName>
+    <SurName>Żółtak</SurName>
+    <EmailAddress>mailto:mateusz.zoltak@oeaw.ac.at</EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Matej</GivenName>
+    <SurName>Durco</SurName>
+    <EmailAddress>mailto:matej.durco@oeaw.ac.at</EmailAddress>
+  </ContactPerson>
+  <ContactPerson contactType="technical">
+    <GivenName>Dalibor</GivenName>
+    <SurName>Pancic</SurName>
+    <EmailAddress>mailto:dalibor.pancic@oeaw.ac.at</EmailAddress>
+  </ContactPerson>
   <ContactPerson contactType="administrative">
     <GivenName>Karlheinz</GivenName>
     <SurName>Mörth</SurName>
@@ -68,9 +115,4 @@
     <SurName>Helpdesk</SurName>
     <EmailAddress>mailto:helpdesk@oeaw.ac.at</EmailAddress>
   </ContactPerson>
-  <ContactPerson contactType="technical">
-    <GivenName>Dalibor</GivenName>
-    <SurName>Pancic</SurName>
-    <EmailAddress>mailto:dalibor.pancic@oeaw.ac.at</EmailAddress>
-  </ContactPerson>
 </EntityDescriptor>