<?xml version="1.0" encoding="UTF-8"?>
<S:Envelope xmlns:S="http://schemas.xmlsoap.org/soap/envelope/" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
  <S:Body>
    <samlp:AuthnRequest
      AssertionConsumerServiceURL="{{ &ECP_CONSUMER_URL }}"
      ID="{{ ECP_REQUEST_ID }}"
      IssueInstant="{{ ECP_REQUEST_INSTANT }}"
      ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"
      Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">

      <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">{{ &ECP_SP_ID }}</saml:Issuer>
      <samlp:NameIDPolicy AllowCreate="1" format="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/>

      <saml:AudienceRestriction xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
        <saml:Audience xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">{{ &ECP_IDP_ID }}</saml:Audience>
      </saml:AudienceRestriction>
    </samlp:AuthnRequest>
  </S:Body>
</S:Envelope>