<md:EntityDescriptor xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ns1="urn:oasis:names:tc:SAML:metadata:algsupport" entityID="https://app.betterworks.com/saml2/metadata/" validUntil="2026-06-05T09:55:19Z"><md:Extensions><ns1:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#md5" /><ns1:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#ripemd160" /><ns1:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><ns1:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" /><ns1:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ns1:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" /><ns1:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" /><ns1:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /><ns1:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-md5" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160" /><ns1:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha224" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" /><ns1:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" /></md:Extensions><md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true" WantAssertionsSigned="false"><md:KeyDescriptor use="signing"><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:KeyDescriptor use="encryption"><ds:KeyInfo><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://app.betterworks.com/saml2/ls/" /><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://lazard.betterworks.com/saml2/ls/" /><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://app.betterworks.com/saml2/acs/" index="1" /><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://lazard.betterworks.com/saml2/acs/" index="2" /><md:AttributeConsumingService index="1"><md:ServiceName xml:lang="en" /><md:RequestedAttribute Name="emailAddress" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true" /></md:AttributeConsumingService></md:SPSSODescriptor><md:ContactPerson contactType="technical"><md:Company>BetterWorks</md:Company><md:GivenName>BetterWorks</md:GivenName><md:SurName>Support</md:SurName><md:EmailAddress>support@betterworks.com</md:EmailAddress></md:ContactPerson></md:EntityDescriptor>