--- SURFconext/https%3A%2F%2Fka3.uni-koeln.de.xml
+++ CLARIN IdP/https%3A%2F%2Fka3.uni-koeln.de.xml
@@ -1,60 +1,73 @@
 <?xml version='1.0' encoding='UTF-8'?>
-<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" cacheDuration="PT86400S" entityID="https://ka3.uni-koeln.de" validUntil="2024-12-01T00:10:03.258853Z">
+<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://ka3.uni-koeln.de">
   <Extensions>
-    <RegistrationInfo xmlns="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="https://www.aai.dfn.de">
-      <RegistrationPolicy xml:lang="en">https://www.aai.dfn.de/en/join/</RegistrationPolicy>
-    </RegistrationInfo>
+    <EntityAttributes xmlns="urn:oasis:names:tc:SAML:metadata:attribute">
+      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</AttributeValue>
+      </Attribute>
+      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <AttributeValue>http://refeds.org/category/research-and-scholarship</AttributeValue>
+      </Attribute>
+      <Attribute xmlns="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <AttributeValue>http://clarin.eu/category/clarin-member</AttributeValue>
+      </Attribute>
+    </EntityAttributes>
   </Extensions>
-  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+  <SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="true" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <Extensions>
+      <RequestInitiator xmlns="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://ka3.uni-koeln.de/saml/login"/>
+      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://ka3.uni-koeln.de/saml/login" index="0"/>
       <UIInfo xmlns="urn:oasis:names:tc:SAML:metadata:ui">
-        <DisplayName xml:lang="en">KA³</DisplayName>
-        <DisplayName xml:lang="nl">KA³</DisplayName>
+        <DisplayName xml:lang="de">KA³ Köln</DisplayName>
+        <DisplayName xml:lang="en">KA³ Cologne</DisplayName>
+        <Description xml:lang="de">Kölner Zentrum Archivierung und Analyse von AV-Daten</Description>
         <Description xml:lang="en">Cologne Center Archiving and Analysis of AV-Data</Description>
-        <Description xml:lang="nl">Cologne Center Archiving and Analysis of AV-Data</Description>
-        <Logo height="170" width="300" xml:lang="en">https://ka3.uni-koeln.de/static/uco.png</Logo>
+        <InformationURL xml:lang="de">https://ka3.uni-koeln.de</InformationURL>
+        <InformationURL xml:lang="en">https://ka3.uni-koeln.de</InformationURL>
+        <Logo height="170" width="300">https://ka3.uni-koeln.de/static/uco.png</Logo>
         <PrivacyStatementURL xml:lang="en">https://ka3.uni-koeln.de/home/privacyStatement</PrivacyStatementURL>
       </UIInfo>
     </Extensions>
-    <KeyDescriptor use="signing">
+    <KeyDescriptor>
       <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
         <X509Data>
-          <X509Certificate>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</X509Certificate>
+          <X509Certificate>MIIHWTCCBUGgAwIBAgIQb7OSISccbbUqUp75c2a7uzANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIxMjE1MDAwMDAwWhcNMjMxMjE1MjM1 OTU5WjBmMQswCQYDVQQGEwJERTEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxl bjEeMBwGA1UECgwVVW5pdmVyc2l0w6R0IHp1IEvDtmxuMRkwFwYDVQQDExBrYTMu dW5pLWtvZWxuLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuLZ uKRDQhEQVoI6HMXWyWfCOlYlrYeBPxrqOufAn4jnHgU4sFNkGLRw4/X3jDBjOy4O RQ2pinZbMoLF/EwSPH1XfIqNCvNJt+gyoRm1NeuRkHsl0vqqWP3QpPrV+zSp4dvQ ZB6kxxRLbuLXF3exjNKUUF88tUIS4N30d5ughrcKa3OUeALRp6ifqXLgs30TuUjk wsg1zEpme/QqdfntK2KZEyh5gRUt7umqiNgofXqLyFKWLzz3XWKnKa1saTeUH1FY Hs4oVMjV6tiRs1TR2f93amfQjY/E3o/ptH1UmaHLjWXg4rWluaMGVrSg8X+b4+zY JWDNis78s3QC1VRYrwIDAQABo4IDIzCCAx8wHwYDVR0jBBgwFoAUbx01SRBsMvpZ oJ68iugflb5xegwwHQYDVR0OBBYEFDnb7n8cuYpIIwTxdmyUcBE7YeLOMA4GA1Ud DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEW F2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSg MqAwhi5odHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQu Y3JsMHUGCCsGAQUFBwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNy dC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0 cDovL0dFQU5ULm9jc3Auc2VjdGlnby5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSC AWoBaAB3AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhRViFR4A AAQDAEgwRgIhAPzL1EBNIUl9W3ZrxMHWZIDWcK9cA5Jmq+MoHUR+AUVGAiEAmFn0 LpMmYn+upASXHbT3lFPMs6eH9sE26kzKGmzPSVwAdQC3Pvsk35xNunXyOcW6WPRs XfxCz3qfNcSeHQmBJe20mQAAAYUVYhT9AAAEAwBGMEQCIBXiAFVoTXQXMMX6YcAA zxOd1dqCgZZTRKFTdAwPfhOiAiAdoBihOx8RTmifFyRZ4CVYxHZ0ljjEK1XTnX0R BHeIRwB2AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhRViFP4A AAQDAEcwRQIgP5BxoH1v/ulqKIIqyoFBhIgWt0iVpHYqeHZ8fWzKYWwCIQDn5f8l jU4M/ldJx4OrRWh2mVfN6+OHyw1E2GOWoTjc7zAbBgNVHREEFDASghBrYTMudW5p LWtvZWxuLmRlMA0GCSqGSIb3DQEBDAUAA4ICAQCMb7AJDSXjA9pkiNOPI/lGCU0q mfHbklYFzyHdKUEg//mpgGuDQ4+cAODfHtycaKOd90wUlIS7OidlM+gbucQgQdD0 Fasc2gsmwEnPfCWT5cKta9xYfZ3tfmhVJp12YQkZX6CuKihwnp43gcy4LanVTtC/ 3ZvdHXBkP4yYcS+4KiB+I8ctw+H0NUB5wp3+WGvw9Ek+VyKwlmlhrNJEVrcbtz3G rr1g1rBSSKBP19NfXtunVBs74edNBCYydxDva6/esS3cLR2hpCqZzYI19shm5YlN Dp79UkoiANH7e20Af5UMAmoAHMJvBEGpc+lOyyPbNWLXbqd0bTQw5MQe6nqxTLRf PtmIyVjmY9ZyKbgSPgEDbIaaCqhzxfp0Iy2vXbgtx3KJGtZflPVhe7IPX8F0my9q 00p5CTtClOb97fKPD6TQjDfEvGEzbbltlm1TFW6vuRpKW+2zYxd+4icu5nVVPi7w FOUUPHy1WXthAxEfirIBo+R3CIVIDvQQ6pfy5eYnBPNVNlXcudFmtOj8y+JAGQZV zDEGJRid0nbjvdK5gu9saojkp6j3U7DDQNwHwQbxE3RVMXtNlUI5Y726F88s8qri WoFbdWpfE8rDvn9vy6rxq5pUX7sKpxdEN71Snl5dE4ZVNIMxr37N2KJIAZLegQrq w62VNq/ItcQsG26Fcg==</X509Certificate>
         </X509Data>
       </KeyInfo>
     </KeyDescriptor>
-    <KeyDescriptor use="encryption">
-      <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-        <X509Data>
-          <X509Certificate>MIIIDDCCBvSgAwIBAgIMI+8HirnW2calTyweMA0GCSqGSIb3DQEBCwUAMIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTIwMTIwODE0MTMxOFoXDTIyMDEwOTE0MTMxOFowgZkxCzAJBgNVBAYTAkRFMRwwGgYDVQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ4wDAYDVQQHDAVLb2VsbjEeMBwGA1UECgwVVW5pdmVyc2l0YWV0IHp1IEtvZWxuMSEwHwYDVQQLDBhSZWdpb25hbGVzIFJlY2hlbnplbnRydW0xGTAXBgNVBAMMEGthMy51bmkta29lbG4uZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeBgnX41J4ozykKKcP0OqepT0L4h9fOmWlh24ZNcfVgp4z+8qUDlSYZLd1cyon/G+WV0SSmyvCEhzygEXNjPvObftBliKVIKROXKK9rpWkwkeVJnSX/Hq4czQToQ3v5wsC3wleOQH0Z1okrTm4/ZH4BWOoUrsTu+VFqgoutSWZr9JG1J/fMryNTMIvBnKQEms64otWoUYaXgKxwYLC8XjeGiSgUK5XbwhV7GMqaD7oSbN/CyHH8dQ3nFTXy004y/ydg//IRDAp7zznDMFUdokAv5QcUvA7imiVrRxmFCMQGWkXSZnCgeqm12BQf4Ro/SQ/um16MZihwzsC2wR+J55JAgMBAAGjggRcMIIEWDBXBgNVHSAEUDBOMAgGBmeBDAECAjANBgsrBgEEAYGtIYIsHjAPBg0rBgEEAYGtIYIsAQEEMBAGDisGAQQBga0hgiwBAQQIMBAGDisGAQQBga0hgiwCAQQIMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQUVSzq9ZBUD2qU6+MATe9LOwUPimowHwYDVR0jBBgwFoAUazqYi/nyU4na4K2yMh4JH+iqO3QwGwYDVR0RBBQwEoIQa2EzLnVuaS1rb2Vsbi5kZTCBjQYDVR0fBIGFMIGCMD+gPaA7hjlodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NybC9jYWNybC5jcmwwP6A9oDuGOWh0dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3JsL2NhY3JsLmNybDCB2wYIKwYBBQUHAQEEgc4wgcswMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBJBggrBgEFBQcwAoY9aHR0cDovL2NkcDEucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDBJBggrBgEFBQcwAoY9aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFsLWcyL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDCCAfYGCisGAQQB1nkCBAIEggHmBIIB4gHgAHYARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF2QrMXUgAABAMARzBFAiBDEnPzNjnUV2+06BCMe48GgLMv07jcjiJ5WM8k+X/5gQIhAJuokRbkxVMtIdyIh7OHjhO02EXTJekx47llmucXuBbyAHYAKXm+8J45OSHwVnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF2QrMcVAAABAMARzBFAiEAtCgMAja86wMHnEJs5cSd3Eh0GKDdezpiitim4b6skE4CIBrwsXxMeS9STN9UV7/sB6y7Jo8b7USn/zxFaJLFlqrRAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAF2QrMX+AAABAMARjBEAiAn98wGQ9mflHqL8epG+tQ+9NMSbsn9Z3HfjelIOufzFgIgDV3UoXmsw1c1B/lsQT67AjH9kW0Ab76e08PDtlCfyEIAdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAXZCsxkHAAAEAwBIMEYCIQCNqwvLMv93PF6DBWPgiw4DTY3NlQS4jaCQUu7V1Tn7OAIhAMnLgdBbESFVCjAVJPb56euF73SLpfhQYu0FAI/l2mJnMA0GCSqGSIb3DQEBCwUAA4IBAQAsmFHrhOKVPwJhBcIFznyxvLF8vSLVURJSlgZwm9CD3K16w0++375IpmXEFYX818Cy1c/fiJ6tD/PInC76NEjgvqW5ujwkx11ZOI2pomEzjOmpq21GfV3qjaAszpo09iSYwksmIroGK+NzhfB4MYi0PhFnxAIYf76Cxc64nauJTs5ZUZpy0DJ47gsgf4m4jh+Q16WgIlGqrEpp0JsiO0hO0TTFsk5H2Rmv4SgMWSMRl4eMU8U1K9H20vOfHBoFElcKPaXSsWvjPcUcH/WJzeoC77AALUF1ntrSftLrQaft5VwgE7cpfEw4tiDkErT81hLSA21ENsxq4REcVWMzG+p/</X509Certificate>
-        </X509Data>
-      </KeyInfo>
-    </KeyDescriptor>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ka3.uni-koeln.de/saml/SingleLogout"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ka3.uni-koeln.de/saml/SingleLogout"/>
+    <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://ka3.uni-koeln.de/saml/SingleLogout"/>
+    <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
     <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
-    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ka3.uni-koeln.de/saml/SSO" index="0"/>
+    <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
+    <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ka3.uni-koeln.de/saml/SSO" index="0" isDefault="true"/>
     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://ka3.uni-koeln.de/saml/SSO" index="1"/>
     <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ka3.uni-koeln.de/saml/SSO" index="2"/>
-    <AttributeConsumingService index="0">
+    <AttributeConsumingService index="1">
+      <ServiceName xml:lang="de">KA³</ServiceName>
       <ServiceName xml:lang="en">KA³</ServiceName>
-      <ServiceName xml:lang="nl">KA³</ServiceName>
+      <ServiceDescription xml:lang="de">Kölner Zentrum Archivierung und Analyse von AV-Daten</ServiceDescription>
       <ServiceDescription xml:lang="en">Cologne Center Archiving and Analysis of AV-Data</ServiceDescription>
-      <ServiceDescription xml:lang="nl">Cologne Center Archiving and Analysis of AV-Data</ServiceDescription>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:cn"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName"/>
-      <RequestedAttribute Name="urn:mace:dir:attribute-def:mail"/>
+      <RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <RequestedAttribute FriendlyName="cn" Name="urn:oid:2.5.4.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
+      <RequestedAttribute FriendlyName="email" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="false"/>
     </AttributeConsumingService>
   </SPSSODescriptor>
   <Organization>
+    <OrganizationName xml:lang="de">RRZK</OrganizationName>
     <OrganizationName xml:lang="en">RRZK</OrganizationName>
-    <OrganizationName xml:lang="nl">RRZK</OrganizationName>
+    <OrganizationDisplayName xml:lang="de">Regionales Rechenzentrum der Universität zu Köln (RRZK)</OrganizationDisplayName>
     <OrganizationDisplayName xml:lang="en">Regional Computing Centre, University of Cologne (RRZK)</OrganizationDisplayName>
-    <OrganizationDisplayName xml:lang="nl">Regional Computing Centre, University of Cologne (RRZK)</OrganizationDisplayName>
+    <OrganizationURL xml:lang="de">https://rrzk.uni-koeln.de</OrganizationURL>
     <OrganizationURL xml:lang="en">https://rrzk.uni-koeln.de</OrganizationURL>
   </Organization>
   <ContactPerson contactType="technical">
-    <GivenName>Jochen</GivenName>
-    <SurName>Graf</SurName>
-    <EmailAddress>mailto:jochen.graf@uni-koeln.de</EmailAddress>
+    <GivenName>Robert</GivenName>
+    <SurName>Kummer</SurName>
+    <EmailAddress>mailto:kummer@uni-koeln.de</EmailAddress>
   </ContactPerson>
   <ContactPerson contactType="support">
     <GivenName>Diensteentwicklung</GivenName>
@@ -66,7 +79,7 @@
     <SurName>Schlesiona</SurName>
     <EmailAddress>mailto:bschlesi@uni-koeln.de</EmailAddress>
   </ContactPerson>
-  <ContactPerson contactType="other">
+  <ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
     <GivenName>Diensteentwicklung</GivenName>
     <EmailAddress>mailto:diensteentwicklung-rrzk@uni-koeln.de</EmailAddress>
   </ContactPerson>