diff --git a/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/intelmq.xml b/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/intelmq.xml
new file mode 100644
index 0000000..59c1a65
--- /dev/null
+++ b/test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/intelmq.xml
@@ -0,0 +1,83 @@
+<!--
+This is example metadata only. Do *NOT* supply it as is without review,
+and do *NOT* provide it in real time to your partners.
+ -->
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_1039cce3478af8466f2d40391e136de55d5075ce" entityID="https://intelmq.cert.sunet.se">
+
+  <md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+  </md:Extensions>
+
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/satosa"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>shib_cert</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=shib_cert</ds:X509SubjectName>
+          <ds:X509Certificate>MIIFCTCCAvGgAwIBAgIUHfSSkmzr23eOrCckXfTY/+izvj0wDQYJKoZIhvcNAQEL
+BQAwFDESMBAGA1UEAwwJc2hpYl9jZXJ0MB4XDTI0MTEyNjExMzU1OFoXDTM0MTEy
+NDExMzU1OFowFDESMBAGA1UEAwwJc2hpYl9jZXJ0MIICIjANBgkqhkiG9w0BAQEF
+AAOCAg8AMIICCgKCAgEAwjhIFRLWJnQmBruUamQrxoJtHmcHk+90Uq4d8U4ESVhL
+MEAStk/DVcDvRQRLRVXYnd5IohVubl59OUm26hUViwNmCuOIZNWOWwAStBdgeN5E
+nCRAVaY0DWxrdtXMIdSgQNKKb+TdCV2kursD9CLzTqg15mxwSurmq2FrZdhq3T03
+VOee08mhSa2fRIvL83mPQjyWQJiOOx/eOkwUoI/13bet9IuOHg/Mcs7YvDotJ4+w
+H8i5moqREYUk9jXp52hQtDl2me9gHdCVsmKjsbuwGTE0d0fpr+Ez4EV0zEcqagTD
+uokhPKDpKKNblLKzSBP3/buCRwLpyAOU3dDR39EM1N396aec91U+qZGRyam4usy2
+bTzFFNAszov+CzEzJmFtWy9txI3H2xHn9CH04ZbpSSGJ61rqm1gO6rJyTkK+KyBe
++TsnkcBUuCQ1x3M31aT6zO8/JGjsSUs0X/aHRcFN5BE7ay80X3r6YGUP5uem83wH
+3L8b4JCLpjCJa+rWkbUbaeZlpyyv28P7h2AIjXOsVlz8Cbn4mVFx2Twvkc7SHya1
+O/zFbt6fuJHh7o21qwblStOrBM3mW/oLsn0S4b1GYWfCgp3juFH+KZYWaCZZCFVf
+DSzKO+CqWgkbfNC7wL8H4/FQHMHJrEbJ+6tEwVdUCeleJYG5XkMYOaIeABDmeCcC
+AwEAAaNTMFEwHQYDVR0OBBYEFKDQCDD4SuliNm8NyUNRAzaNOENeMB8GA1UdIwQY
+MBaAFKDQCDD4SuliNm8NyUNRAzaNOENeMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZI
+hvcNAQELBQADggIBABxzXvA2Jax9WGqJQ7dIE7OEQRIg8ilWVNgzht9QzqxFdPxj
+JQNEAJvmgCSyru4p0J2+qH2s0r01vXpRjn0fqSRbt1S9nr7al81vwQSITg7ZS3dR
+OLHyR64oe8vYOvWADUHkg6qKlPfLYaIjN4c08gU2AHXWEvmZZTOASuflNaUt16Yy
+jC9ErurqaUKzsFbsa8tgFQBoaWJJdA+TZihSPwhVEOgzdVN2tj4vmY7MlSBu/qHT
+Xuhf0b++NuGyEIld6xTXEZHSE17lCk9MhlKIFra8rbCWWjFjvxGFLzVSDFnXfav9
+Ky3wGAwcIqABB4YaJTtP5mJqP3AL6YMb0b6dv07tb0JnABbjpRbOxG4vOJkDSziR
+iwnxU8atSh3rJCVV0gAs6ob/piP48oPE5UUF57WN6TLWt0rPda/TiWPj6JOy8slf
+kp32TInBAIqsF7nneJL9qRo6BQzgj+qJJBLjgC1G8L4K5cOogYZule0ptVl3YNr8
+l7ygjQeWJf+g1EgMEayKGJ8KgyRDqvNt6tRXQHJ/PsO26w7v3jUB4oYafdp+W5Rs
+0jjHbrzy9EAJvJOD/gwBQcdbDJ5yGbZd9tKQ98mnDTDAmyWMOUWbVosI6d8IoJ+D
+l2SS6Ul+WzWhEFHiEKVyeREzqB9EOT3SMRXYQVKdBcp1oLBR6biJAKlHs9f+
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://intelmq.cert.sunet.se/Shibboleth.sso/SAML2/POST" index="1"/>
+  </md:SPSSODescriptor>
+
+</md:EntityDescriptor>
\ No newline at end of file