diff --git a/app/components/certificate/certificate-available.tsx b/app/components/certificate/certificate-available.tsx
index 9c8f0887..b088fc86 100644
--- a/app/components/certificate/certificate-available.tsx
+++ b/app/components/certificate/certificate-available.tsx
@@ -21,14 +21,14 @@ import type { CertificateWithFullChain } from '~/models/certificate.server';
 
 interface CertificateAvailableProps {
   certificate: CertificateWithFullChain;
-  validFromFormatted: string;
-  validToFormatted: string;
+  validFromISO: string;
+  validToISO: string;
 }
 
 export default function CertificateAvailable({
   certificate,
-  validFromFormatted,
-  validToFormatted,
+  validFromISO,
+  validToISO,
 }: CertificateAvailableProps) {
   const isRenewable = useMemo((): boolean => {
     if (certificate.validTo) {
@@ -44,8 +44,8 @@ export default function CertificateAvailable({
       <Description
         description="With this certificate, you will have an HTTPS certificate for all of your projects connected to your DNS records."
         certRequested={true}
-        validFromFormatted={validFromFormatted}
-        validToFormatted={validToFormatted}
+        validFromISO={validFromISO}
+        validToISO={validToISO}
         isRenewable={isRenewable}
       />
 
diff --git a/app/components/certificate/description.tsx b/app/components/certificate/description.tsx
index f71cd4ff..354d29d3 100644
--- a/app/components/certificate/description.tsx
+++ b/app/components/certificate/description.tsx
@@ -1,5 +1,6 @@
 import { RepeatIcon, DeleteIcon } from '@chakra-ui/icons';
 import { Form, Link as RemixLink } from '@remix-run/react';
+import { useEffect, useState } from 'react';
 import {
   Flex,
   Text,
@@ -15,8 +16,8 @@ import {
 
 interface DescriptionSectionProps {
   certRequested: boolean;
-  validFromFormatted?: string;
-  validToFormatted?: string;
+  validFromISO?: string;
+  validToISO?: string;
   description: string;
   isRenewable?: boolean;
   link?: string;
@@ -24,8 +25,8 @@ interface DescriptionSectionProps {
 
 export default function DescriptionSection({
   certRequested,
-  validFromFormatted,
-  validToFormatted,
+  validFromISO,
+  validToISO,
   description,
   isRenewable,
   link,
@@ -45,15 +46,19 @@ export default function DescriptionSection({
           </>
         )}
       </Text>
-      {certRequested && !!validFromFormatted && !!validToFormatted && (
+      {certRequested && !!validFromISO && !!validToISO && (
         <Wrap align="center">
           <Stat backgroundColor="whitesmoke" maxW={200} px={5} py={3} borderRadius={8}>
             <StatLabel>Created On</StatLabel>
-            <StatNumber>{validFromFormatted}</StatNumber>
+            <StatNumber>
+              <LocalDate iso={validFromISO} />
+            </StatNumber>
           </Stat>
           <Stat backgroundColor="whitesmoke" maxW={200} px={5} py={3} borderRadius={8}>
             <StatLabel>Expires On</StatLabel>
-            <StatNumber>{validToFormatted}</StatNumber>
+            <StatNumber>
+              <LocalDate iso={validToISO} />
+            </StatNumber>
           </Stat>
           <WrapItem>
             <Flex justifyContent="flex-end">
@@ -87,3 +92,20 @@ export default function DescriptionSection({
     </Flex>
   );
 }
+
+function LocalDate({ iso }: { iso: string }) {
+  const [formatted, setFormatted] = useState('');
+
+  useEffect(() => {
+    const date = new Date(iso);
+    setFormatted(
+      date.toLocaleDateString('en-CA', {
+        month: 'short',
+        day: '2-digit',
+        year: 'numeric',
+      })
+    );
+  }, [iso]);
+
+  return <time>{formatted}</time>;
+}
diff --git a/app/routes/_auth.certificate._index.tsx b/app/routes/_auth.certificate._index.tsx
index ff47cf87..267d3ebb 100644
--- a/app/routes/_auth.certificate._index.tsx
+++ b/app/routes/_auth.certificate._index.tsx
@@ -77,16 +77,6 @@ export const action = async ({ request }: ActionFunctionArgs) => {
   });
 };
 
-function formatDate(val: Date): string {
-  const date = val.toLocaleDateString('en-US', {
-    month: 'short',
-    day: '2-digit',
-    year: 'numeric',
-  });
-
-  return date;
-}
-
 function mapStatusToErrorText(statusCode: number): string {
   switch (statusCode) {
     case 404:
@@ -140,8 +130,8 @@ export default function CertificateIndexRoute() {
       {certificate?.status === 'issued' ? (
         <CertificateAvailable
           certificate={certificate}
-          validFromFormatted={formatDate(certificate.validFrom!)}
-          validToFormatted={formatDate(certificate.validTo!)}
+          validFromISO={certificate.validFrom!.toISOString()}
+          validToISO={certificate.validTo!.toISOString()}
         />
       ) : (
         <CertificateRequestView
diff --git a/config/idp-metadata-production.xml b/config/idp-metadata-production.xml
index aa60df04..d9243539 100644
--- a/config/idp-metadata-production.xml
+++ b/config/idp-metadata-production.xml
@@ -1,158 +1 @@
-<!-- https://login.microsoftonline.com/
-eb34f74a-58e7-4a8b-9e59-433e4c412757/federationmetadata/2007-06/
-federationmetadata.xml?appid=401797f6-3258-4db2-bb35-34febe7c3d0f -->
-<?xml version="1.0" encoding="utf-8"?><EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" ID="_97a39503-f6e3-4004-81fa-5d30d94e4d1c" entityID="https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/">
-<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
-<SignedInfo>
-<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
-<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
-<Reference URI="#_97a39503-f6e3-4004-81fa-5d30d94e4d1c">
-<Transforms>
-<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
-<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
-</Transforms>
-<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
-<DigestValue>KSWo9oxVOjoP/Ej5rFgW3EuvM5hsgdO/2zzNXWHbYl8=</DigestValue>
-</Reference>
-</SignedInfo>
-<SignatureValue>dn1+QyJYvMTUBMHu+06mFVZDZhxr2c8hlro3PE0eyaB6FpES3DXeZCiNr2OBBrMmt9ilxgKPl69tIUxr8+FaMr1rC2PApX2ZqsgI2wPVvEEpTI0rm00P6lIFJlBNa9rAyfwN4Xw7SN3nvzu7RsYCCdKKwBXZtOHdbU7wBqo0npX8bFFh0G5W1MluRRBDq2kv1fng2eQqWwW2KI+CGOXQSmkUZRRTgCONlDBZzJf+iZESRpp2PONvJgMu5pVc0rBwAFucesJcvk6VkY2U0gDKlEVPY86qYSRl52xAUVZMdJYxVrzkIKpyFfi3Sn13blmdTJUqDUCI8GngRIiU6vm8Sg==</SignatureValue>
-<KeyInfo>
-<X509Data>
-<X509Certificate>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</X509Certificate>
-</X509Data>
-</KeyInfo>
-</Signature>
-<RoleDescriptor xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706">
-<KeyDescriptor use="signing">
-<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-<X509Data>
-<X509Certificate>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</X509Certificate>
-</X509Data>
-</KeyInfo>
-</KeyDescriptor>
-<fed:ClaimTypesOffered>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
-<auth:DisplayName>Name</auth:DisplayName>
-<auth:Description>The mutable display name of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier">
-<auth:DisplayName>Subject</auth:DisplayName>
-<auth:Description>An immutable, globally unique, non-reusable identifier of the user that is unique to the application for which a token is issued.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
-<auth:DisplayName>Given Name</auth:DisplayName>
-<auth:Description>First name of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
-<auth:DisplayName>Surname</auth:DisplayName>
-<auth:Description>Last name of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/displayname">
-<auth:DisplayName>Display Name</auth:DisplayName>
-<auth:Description>Display name of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/nickname">
-<auth:DisplayName>Nick Name</auth:DisplayName>
-<auth:Description>Nick name of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant">
-<auth:DisplayName>Authentication Instant</auth:DisplayName>
-<auth:Description>The time (UTC) when the user is authenticated to Windows Azure Active Directory.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod">
-<auth:DisplayName>Authentication Method</auth:DisplayName>
-<auth:Description>The method that Windows Azure Active Directory uses to authenticate users.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/objectidentifier">
-<auth:DisplayName>ObjectIdentifier</auth:DisplayName>
-<auth:Description>Primary identifier for the user in the directory. Immutable, globally unique, non-reusable.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/tenantid">
-<auth:DisplayName>TenantId</auth:DisplayName>
-<auth:Description>Identifier for the user's tenant.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/identityprovider">
-<auth:DisplayName>IdentityProvider</auth:DisplayName>
-<auth:Description>Identity provider for the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress">
-<auth:DisplayName>Email</auth:DisplayName>
-<auth:Description>Email address of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groups">
-<auth:DisplayName>Groups</auth:DisplayName>
-<auth:Description>Groups of the user.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/accesstoken">
-<auth:DisplayName>External Access Token</auth:DisplayName>
-<auth:Description>Access token issued by external identity provider.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/expiration">
-<auth:DisplayName>External Access Token Expiration</auth:DisplayName>
-<auth:Description>UTC expiration time of access token issued by external identity provider.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/identity/claims/openid2_id">
-<auth:DisplayName>External OpenID 2.0 Identifier</auth:DisplayName>
-<auth:Description>OpenID 2.0 identifier issued by external identity provider.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/claims/groups.link">
-<auth:DisplayName>GroupsOverageClaim</auth:DisplayName>
-<auth:Description>Issued when number of user's group claims exceeds return limit.</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role">
-<auth:DisplayName>Role Claim</auth:DisplayName>
-<auth:Description>Roles that the user or Service Principal is attached to</auth:Description>
-</auth:ClaimType>
-<auth:ClaimType xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706" Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/wids">
-<auth:DisplayName>RoleTemplate Id Claim</auth:DisplayName>
-<auth:Description>Role template id of the Built-in Directory Roles that the user is a member of</auth:Description>
-</auth:ClaimType>
-</fed:ClaimTypesOffered>
-<fed:SecurityTokenServiceEndpoint>
-<wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing">
-<wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address>
-</wsa:EndpointReference>
-</fed:SecurityTokenServiceEndpoint>
-<fed:PassiveRequestorEndpoint>
-<wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing">
-<wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address>
-</wsa:EndpointReference>
-</fed:PassiveRequestorEndpoint>
-</RoleDescriptor>
-<RoleDescriptor xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706" xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706">
-<KeyDescriptor use="signing">
-<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-<X509Data>
-<X509Certificate>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</X509Certificate>
-</X509Data>
-</KeyInfo>
-</KeyDescriptor>
-<fed:TargetScopes>
-<wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing">
-<wsa:Address>https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/</wsa:Address>
-</wsa:EndpointReference>
-</fed:TargetScopes>
-<fed:ApplicationServiceEndpoint>
-<wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing">
-<wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address>
-</wsa:EndpointReference>
-</fed:ApplicationServiceEndpoint>
-<fed:PassiveRequestorEndpoint>
-<wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing">
-<wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address>
-</wsa:EndpointReference>
-</fed:PassiveRequestorEndpoint>
-</RoleDescriptor>
-<IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
-<KeyDescriptor use="signing">
-<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
-<X509Data>
-<X509Certificate>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</X509Certificate>
-</X509Data>
-</KeyInfo>
-</KeyDescriptor>
-<SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2"/>
-<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2"/>
-<SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2"/>
-</IDPSSODescriptor>
-</EntityDescriptor>
+<?xml version="1.0" encoding="utf-8"?><EntityDescriptor ID="_4fe66ba3-cf4a-4e9e-9b67-9a746d171f73" entityID="https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI="#_4fe66ba3-cf4a-4e9e-9b67-9a746d171f73"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>oBOb2klbQT7GY8BBmgxHvcieXllK2oseKZdR5bN78vQ=</DigestValue></Reference></SignedInfo><SignatureValue>RUffJLmd28MHggFajXAgCrU7jMRm10R1mhSCDb26DAmSYS029Vh/F5jby9IdQlcHsH3uJGgYNzdXeKrlPslJgJi1pGBD/w6880An5UKb+5RioIfwey2WcOW0jFkKupZWjhuwPOlYjTCIhQuHb6MoJZjWXgD5PwB2KA0aLDEcGbz7DVLyhhTVQxFO6TIWI/HapSLxLxH4STtMyUGTn6kP2/0ECvtrVXRe0ibdhyimcPlExm9XOcgCZ5yaNbsmwvujlr+FjEgS5sOgH3cmEYt06+d+8JnrENTkc7Sb+sMobPFhd5tBe/iC+yohoDW6ZzQrK72QQBaHb3Xu10v0TRK6GA==</SignatureValue><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></Signature><RoleDescriptor xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:ClaimTypesOffered><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Name</auth:DisplayName><auth:Description>The mutable display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Subject</auth:DisplayName><auth:Description>An immutable, globally unique, non-reusable identifier of the user that is unique to the application for which a token is issued.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Given Name</auth:DisplayName><auth:Description>First name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Surname</auth:DisplayName><auth:Description>Last name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/displayname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Display Name</auth:DisplayName><auth:Description>Display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/nickname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Nick Name</auth:DisplayName><auth:Description>Nick name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Instant</auth:DisplayName><auth:Description>The time (UTC) when the user is authenticated to Windows Azure Active Directory.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Method</auth:DisplayName><auth:Description>The method that Windows Azure Active Directory uses to authenticate users.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/objectidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>ObjectIdentifier</auth:DisplayName><auth:Description>Primary identifier for the user in the directory. Immutable, globally unique, non-reusable.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/tenantid" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>TenantId</auth:DisplayName><auth:Description>Identifier for the user's tenant.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/identityprovider" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>IdentityProvider</auth:DisplayName><auth:Description>Identity provider for the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Email</auth:DisplayName><auth:Description>Email address of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groups" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Groups</auth:DisplayName><auth:Description>Groups of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/accesstoken" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token</auth:DisplayName><auth:Description>Access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/expiration" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token Expiration</auth:DisplayName><auth:Description>UTC expiration time of access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/openid2_id" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External OpenID 2.0 Identifier</auth:DisplayName><auth:Description>OpenID 2.0 identifier issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/claims/groups.link" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>GroupsOverageClaim</auth:DisplayName><auth:Description>Issued when number of user's group claims exceeds return limit.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Role Claim</auth:DisplayName><auth:Description>Roles that the user or Service Principal is attached to</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/wids" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>RoleTemplate Id Claim</auth:DisplayName><auth:Description>Role template id of the Built-in Directory Roles that the user is a member of</auth:Description></auth:ClaimType></fed:ClaimTypesOffered><fed:SecurityTokenServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:SecurityTokenServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><RoleDescriptor xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQM9G72+xOBYJPQJsSi8WkVzANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yMzA0MTExMjM2MDBaFw0yNjA0MTExMjM2MDBaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+fea38phlcv5MVU3StoYiOXdYq6YYFi86Rk/Fyk0Mp0IP7PceirOa5WldZTuPNwdy2BLuyYYO0UxjPZgEcUZI8+77ELm/R77CWe4/kyqy+LqFkepX2ev1YHEfwRdqdALWI8J1FWMB19cMXD75oZGtLqq0BvKlX7f/teMfgBHC9rD4sGvN5APG1WyrpksdS0HiE9qMBzVx8rNBGz0BVQrZ3gp5dk4IaO9tcJnHze2R7mK7VO2SKJ73kc9qhyiEsQQio+rsZE5VZcv3+E3C23sZK40drVSzJUmvXfg+HYnr/9a/0MLndSyWxdAmUq79WYWuZ4Tg2yj3enYiOBm99NqQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQC2JjMxiVfhE0ErYSJjL5CyD33+4AEzqVZUaaq24/bNpT9TA5hNbyWTkr5Bf2uIgkQyOF5QkRaqJ3M/TxH3VA3roWA253p+3Sa4mpb9gIebHoex4/nptTnFpeMa4eKlUdP1erOJ42NukoTJjAm0lboW6+Vf7TF8Y8mze2iKih6oJ0rOyOsvQ962k+0Fy7XmkszMkrrZ8XbeFelwtnQvUkfvGWShtOa8UBzNmQ9XX7OMIcrKC8Wesmhqed+Ua03Q3i8+PdqxAU7rO9bdwKuuUCNzk91q+/LdsPJwX4WAHW4GYH4j/r2Y7MBC2lpvi4BTQJIU5brhim5bvT45QevJD9mu</X509Certificate></X509Data></KeyInfo></KeyDescriptor><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQVX1Gz6vWW5BDZ1MH0v3MHTANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yNjAxMjAxNzI3MDVaFw0yOTAxMjAxNzI3MDJaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o/6xOWNyfio91MyYcrDzZXlcdsQc/Sl4AHQtO9lZkKiMBUj03YAN8sk7IGcXhNIO48mvG5EOWldii0t3JbH4gUUdo2k+i+x7D1Zd5GCkj/PCgM4MOL2BGdVbPXPV3zFdY7xWFLItbm+uzKM45dD8DUgel1agOsvWluY7DITosoKZyrXJfL0ARNFWoWuoNkuw+Ytn7lX0QzeJAE5fo8bbuV8Je2uP5gX2TpyPIGqB4fg3/yTsoutCida4ElPdaxublpiaw71DI1uh0s9aaYumuVpYnIHEPGBnaAZdRdHF7X9YqUEHrO4X7UTvsPuMJXIIhxf4jpbvrGvpHNpcztJNQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQARKCn8JjiXApd3VIXcufbBcTgneoACow8oYSy1ug/28sShgmxunUtW228qFFC2l3G3Y6kYuWOpsH9JRC3nmti+fPZkwK2nrxJMCIZIA+Q2ogilKp7sXAWPzWzpM7Knkj+4V7JH8tjYdNKZ78CBh0qN/dZwdJQGBE83jwIcd3kcRTBqNFcY3y5OSuWL+5lxvPISiuSqSu/frHPDd0b1401XHa5ngusIk+iwXMYBOXJoUhLSAUcWtjcV9KiCohK9kJeKEiLSIoy7FWlZpGM+kDC91c4CS4YuxlwVXGS+HShQeIxifBehBfc3KAGDbwcVtGyUx9o9+Sgstb71rJNuREli</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:TargetScopes><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/</wsa:Address></wsa:EndpointReference></fed:TargetScopes><fed:ApplicationServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:ApplicationServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQM9G72+xOBYJPQJsSi8WkVzANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yMzA0MTExMjM2MDBaFw0yNjA0MTExMjM2MDBaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+fea38phlcv5MVU3StoYiOXdYq6YYFi86Rk/Fyk0Mp0IP7PceirOa5WldZTuPNwdy2BLuyYYO0UxjPZgEcUZI8+77ELm/R77CWe4/kyqy+LqFkepX2ev1YHEfwRdqdALWI8J1FWMB19cMXD75oZGtLqq0BvKlX7f/teMfgBHC9rD4sGvN5APG1WyrpksdS0HiE9qMBzVx8rNBGz0BVQrZ3gp5dk4IaO9tcJnHze2R7mK7VO2SKJ73kc9qhyiEsQQio+rsZE5VZcv3+E3C23sZK40drVSzJUmvXfg+HYnr/9a/0MLndSyWxdAmUq79WYWuZ4Tg2yj3enYiOBm99NqQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQC2JjMxiVfhE0ErYSJjL5CyD33+4AEzqVZUaaq24/bNpT9TA5hNbyWTkr5Bf2uIgkQyOF5QkRaqJ3M/TxH3VA3roWA253p+3Sa4mpb9gIebHoex4/nptTnFpeMa4eKlUdP1erOJ42NukoTJjAm0lboW6+Vf7TF8Y8mze2iKih6oJ0rOyOsvQ962k+0Fy7XmkszMkrrZ8XbeFelwtnQvUkfvGWShtOa8UBzNmQ9XX7OMIcrKC8Wesmhqed+Ua03Q3i8+PdqxAU7rO9bdwKuuUCNzk91q+/LdsPJwX4WAHW4GYH4j/r2Y7MBC2lpvi4BTQJIU5brhim5bvT45QevJD9mu</X509Certificate></X509Data></KeyInfo></KeyDescriptor><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQVX1Gz6vWW5BDZ1MH0v3MHTANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yNjAxMjAxNzI3MDVaFw0yOTAxMjAxNzI3MDJaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o/6xOWNyfio91MyYcrDzZXlcdsQc/Sl4AHQtO9lZkKiMBUj03YAN8sk7IGcXhNIO48mvG5EOWldii0t3JbH4gUUdo2k+i+x7D1Zd5GCkj/PCgM4MOL2BGdVbPXPV3zFdY7xWFLItbm+uzKM45dD8DUgel1agOsvWluY7DITosoKZyrXJfL0ARNFWoWuoNkuw+Ytn7lX0QzeJAE5fo8bbuV8Je2uP5gX2TpyPIGqB4fg3/yTsoutCida4ElPdaxublpiaw71DI1uh0s9aaYumuVpYnIHEPGBnaAZdRdHF7X9YqUEHrO4X7UTvsPuMJXIIhxf4jpbvrGvpHNpcztJNQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQARKCn8JjiXApd3VIXcufbBcTgneoACow8oYSy1ug/28sShgmxunUtW228qFFC2l3G3Y6kYuWOpsH9JRC3nmti+fPZkwK2nrxJMCIZIA+Q2ogilKp7sXAWPzWzpM7Knkj+4V7JH8tjYdNKZ78CBh0qN/dZwdJQGBE83jwIcd3kcRTBqNFcY3y5OSuWL+5lxvPISiuSqSu/frHPDd0b1401XHa5ngusIk+iwXMYBOXJoUhLSAUcWtjcV9KiCohK9kJeKEiLSIoy7FWlZpGM+kDC91c4CS4YuxlwVXGS+HShQeIxifBehBfc3KAGDbwcVtGyUx9o9+Sgstb71rJNuREli</X509Certificate></X509Data></KeyInfo></KeyDescriptor><SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /></IDPSSODescriptor></EntityDescriptor>
\ No newline at end of file
diff --git a/config/idp-metadata-staging.xml b/config/idp-metadata-staging.xml
index 7915cc9c..507bf4e3 100644
--- a/config/idp-metadata-staging.xml
+++ b/config/idp-metadata-staging.xml
@@ -1,2 +1 @@
-<!-- https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/federationmetadata/2007-06/federationmetadata.xml?appid=9b6e9159-c5ab-462b-8efa-3ecb46e8b6df -->
-<?xml version="1.0" encoding="utf-8"?><EntityDescriptor ID="_a249153b-d227-4fd2-b0a9-f4266c54b784" entityID="https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI="#_a249153b-d227-4fd2-b0a9-f4266c54b784"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>YY7+z04j3HEeR9Lj0Brcw/u0ORmQYGReBV6g5m9PRrw=</DigestValue></Reference></SignedInfo><SignatureValue>QWGwn5h8NWkzzweHd6/W15EebmTzJEh/NL8i2GgX/+Jrv/a9rGiZmwgEVkyeGxnQLl8pWnp9RgRVb8RH0hKlPDE1JHOxChJ2gxtuDhhd4tEW5tlgFP55hkY4+R1t4xKDdFLSfcc7MkY8JWcCkFL8epeXSeCR/J95cJHpXATt7+CIOSdqpHiaLSgQCIBjq0fYezpMOZNezTcg4aHQu6NGUQhmN+rkzJg5FRMvCscQGd7ZnupEbn//DI7Hc9sP33eEM94dR6coqyJwe4RFIipNf64iJDeL4ww07b4W9HhBmAuapfPXkSZWNXx5yStJA1pnSBEKRnkvOud2nAOdBZcX0A==</SignatureValue><KeyInfo><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></Signature><RoleDescriptor xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:ClaimTypesOffered><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Name</auth:DisplayName><auth:Description>The mutable display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Subject</auth:DisplayName><auth:Description>An immutable, globally unique, non-reusable identifier of the user that is unique to the application for which a token is issued.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Given Name</auth:DisplayName><auth:Description>First name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Surname</auth:DisplayName><auth:Description>Last name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/displayname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Display Name</auth:DisplayName><auth:Description>Display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/nickname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Nick Name</auth:DisplayName><auth:Description>Nick name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Instant</auth:DisplayName><auth:Description>The time (UTC) when the user is authenticated to Windows Azure Active Directory.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Method</auth:DisplayName><auth:Description>The method that Windows Azure Active Directory uses to authenticate users.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/objectidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>ObjectIdentifier</auth:DisplayName><auth:Description>Primary identifier for the user in the directory. Immutable, globally unique, non-reusable.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/tenantid" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>TenantId</auth:DisplayName><auth:Description>Identifier for the user's tenant.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/identityprovider" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>IdentityProvider</auth:DisplayName><auth:Description>Identity provider for the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Email</auth:DisplayName><auth:Description>Email address of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groups" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Groups</auth:DisplayName><auth:Description>Groups of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/accesstoken" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token</auth:DisplayName><auth:Description>Access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/expiration" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token Expiration</auth:DisplayName><auth:Description>UTC expiration time of access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/openid2_id" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External OpenID 2.0 Identifier</auth:DisplayName><auth:Description>OpenID 2.0 identifier issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/claims/groups.link" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>GroupsOverageClaim</auth:DisplayName><auth:Description>Issued when number of user's group claims exceeds return limit.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Role Claim</auth:DisplayName><auth:Description>Roles that the user or Service Principal is attached to</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/wids" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>RoleTemplate Id Claim</auth:DisplayName><auth:Description>Role template id of the Built-in Directory Roles that the user is a member of</auth:Description></auth:ClaimType></fed:ClaimTypesOffered><fed:SecurityTokenServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:SecurityTokenServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><RoleDescriptor xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:TargetScopes><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/</wsa:Address></wsa:EndpointReference></fed:TargetScopes><fed:ApplicationServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:ApplicationServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /></IDPSSODescriptor></EntityDescriptor>
+<?xml version="1.0" encoding="utf-8"?><EntityDescriptor ID="_fa500359-98f7-47ac-82a1-eb5640f6bea8" entityID="https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/" xmlns="urn:oasis:names:tc:SAML:2.0:metadata"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI="#_fa500359-98f7-47ac-82a1-eb5640f6bea8"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>8I5EcVzy/6G6P4keXiYHJpnmRg5rSfVKj4Chbyaqrmw=</DigestValue></Reference></SignedInfo><SignatureValue>NSpeR630NU8m+ZImYuKdXjyBoaHNPVsr2zzd5aH3eFI/VI5yTJnNO+xLMlM5ilQf/1n3elmNbUzQhLLOF7nEKjOyhU8JUzpjrXgZ36ieirQETsnRxJAfZn44USl7P7iJDVvdyv+PtFlLWLfUn/a+hz7LRa2DLakFQCoUuxxJC7mqAb6TNHQnrHxreZoDAbaxwgykkHkC7W0zdA8hXWG/sNVVBjXCLqLFTSEYMuh0+NkmYNanHUrPAg/NPp7q48SINfdC05VWDqF57DnqOckdBkZ9Yjh9hrnFagzieooWPv+LAsrKk/btdQ1jtkFDoPTBdJF0WSLEFVsf25XkggDdLA==</SignatureValue><ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></Signature><RoleDescriptor xsi:type="fed:SecurityTokenServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:ClaimTypesOffered><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Name</auth:DisplayName><auth:Description>The mutable display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Subject</auth:DisplayName><auth:Description>An immutable, globally unique, non-reusable identifier of the user that is unique to the application for which a token is issued.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Given Name</auth:DisplayName><auth:Description>First name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Surname</auth:DisplayName><auth:Description>Last name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/displayname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Display Name</auth:DisplayName><auth:Description>Display name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/nickname" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Nick Name</auth:DisplayName><auth:Description>Nick name of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationinstant" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Instant</auth:DisplayName><auth:Description>The time (UTC) when the user is authenticated to Windows Azure Active Directory.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/authenticationmethod" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Authentication Method</auth:DisplayName><auth:Description>The method that Windows Azure Active Directory uses to authenticate users.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/objectidentifier" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>ObjectIdentifier</auth:DisplayName><auth:Description>Primary identifier for the user in the directory. Immutable, globally unique, non-reusable.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/tenantid" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>TenantId</auth:DisplayName><auth:Description>Identifier for the user's tenant.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/identityprovider" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>IdentityProvider</auth:DisplayName><auth:Description>Identity provider for the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Email</auth:DisplayName><auth:Description>Email address of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/groups" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Groups</auth:DisplayName><auth:Description>Groups of the user.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/accesstoken" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token</auth:DisplayName><auth:Description>Access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/expiration" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External Access Token Expiration</auth:DisplayName><auth:Description>UTC expiration time of access token issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/identity/claims/openid2_id" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>External OpenID 2.0 Identifier</auth:DisplayName><auth:Description>OpenID 2.0 identifier issued by external identity provider.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/claims/groups.link" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>GroupsOverageClaim</auth:DisplayName><auth:Description>Issued when number of user's group claims exceeds return limit.</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>Role Claim</auth:DisplayName><auth:Description>Roles that the user or Service Principal is attached to</auth:Description></auth:ClaimType><auth:ClaimType Uri="http://schemas.microsoft.com/ws/2008/06/identity/claims/wids" xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"><auth:DisplayName>RoleTemplate Id Claim</auth:DisplayName><auth:Description>Role template id of the Built-in Directory Roles that the user is a member of</auth:Description></auth:ClaimType></fed:ClaimTypesOffered><fed:SecurityTokenServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:SecurityTokenServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><RoleDescriptor xsi:type="fed:ApplicationServiceType" protocolSupportEnumeration="http://docs.oasis-open.org/wsfed/federation/200706" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><fed:TargetScopes><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://sts.windows.net/eb34f74a-58e7-4a8b-9e59-433e4c412757/</wsa:Address></wsa:EndpointReference></fed:TargetScopes><fed:ApplicationServiceEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:ApplicationServiceEndpoint><fed:PassiveRequestorEndpoint><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/wsfed</wsa:Address></wsa:EndpointReference></fed:PassiveRequestorEndpoint></RoleDescriptor><IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>MIIC8DCCAdigAwIBAgIQGoUBqrK9/Y1AwiVy7iC55zANBgkqhkiG9w0BAQsFADA0MTIwMAYDVQQDEylNaWNyb3NvZnQgQXp1cmUgRmVkZXJhdGVkIFNTTyBDZXJ0aWZpY2F0ZTAeFw0yMzAyMDcxNjIwMDlaFw0yNjAyMDcxNjIwMDlaMDQxMjAwBgNVBAMTKU1pY3Jvc29mdCBBenVyZSBGZWRlcmF0ZWQgU1NPIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtALfcvwbXGdoqvD6jEasSjqDH9ojyQ0c9/ZZ8AAIWtrP/dORdSsXxRrcEq9RyFreJ6mltoO/VXvwVImPPFm7bW+3uk1GQDbeUqp6IG93islQ9eMCo9TudNSMaoq80nIVwoSnXIw3p6qVfe0FYkbIWCDh9VF37sNMpcODGgxQ7go0p3VygvM7HihZnyD8uEUKEwP/HvoSuf5Rb4LdB3olHDODkNV6IqK71KSb2yy0DLsWHO1Eq/NKmlhkIU4cggB+tz0ywrT+LGknwbtIR4/FyNVhiT7jl8syAX3fZbP3EwqLg/1LS+Sdr1oVcI0bVUvo5BVmOiD9QJLwctoU7J7DzQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQAb4Osh6kaWzD4NQi0FD19xOcGnl424rsZshVjKTO/4fvRhckBmVvQpR83H9+IT39Vb2+UDL/Zb1dELMNZY8zO4UuNpnGb20ynxYz8HPsGOj8evr8UEs7FeTZn+T9Erhtd/P+A3bAKJXf9bmD5PnhAUr2RV+iUAqrsA8XoD9oMov1KIgtDi2+fWWWpE5G4be8Qjf8LMdsbDLA+wWsAq4zif6ov6HOH7j8jowAPCR/ajRtO+oYl//xNr9tz3bNPpWNCCvhDh9x2P9UFgNO8NprX3EmAw/kZsOVWWjSqk5i5awn2BB4t/BATNxYP3jOhrWJuBot+ujpIJb1OSTxObWR2E</X509Certificate></X509Data></KeyInfo></KeyDescriptor><KeyDescriptor use="signing"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></KeyDescriptor><SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /><SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/eb34f74a-58e7-4a8b-9e59-433e4c412757/saml2" /></IDPSSODescriptor></EntityDescriptor>
\ No newline at end of file