diff --git a/bin/http_xsltproc.sh b/bin/http_xsltproc.sh
new file mode 100755
index 0000000..dd730be
--- /dev/null
+++ b/bin/http_xsltproc.sh
@@ -0,0 +1,238 @@
+#!/bin/bash
+
+#######################################################################
+# Copyright 2016 Tom Scavo
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#######################################################################
+
+#######################################################################
+# Help message
+#######################################################################
+
+display_help () {
+/bin/cat <<- HELP_MSG
+	This script is a wrapper around the xsltproc command-line tool.
+	Unlike xsltproc, this script fetches the target XML document
+	from an HTTP server.
+	
+	Usage: ${0##*/} [-hv] [-o OUT_FILE] STYLESHEET URL
+	
+	This script takes two command-line arguments. The STYLESHEET
+	argument is the absolute path to an XSL document in the local
+	file system. The URL argument is the absolute URL of an XML 
+	document. The script fetches the XML document at the given 
+	URL using the curl command-line tool and then applies the XSL 
+	stylesheet to the XML document using the xsltproc tool.
+	
+	This script requires environment variable LIB_DIR, which 
+	specifies a directory containing various XSL stylesheets and 
+	helper scripts including:
+	
+	$LIB_FILENAMES
+
+	Options:
+	   -h      Display this message
+	   -v      Write verbose messages to stdout
+	   -o      Output the transformed document to OUT_FILE
+
+	Option -h is mutually exclusive of all other options.
+	
+	If option -o is omitted, the transformed document is written
+	to stdout.
+HELP_MSG
+}
+
+#######################################################################
+# Bootstrap
+#######################################################################
+
+script_name=${0##*/}  # equivalent to basename $0
+
+# library filenames (always list command_paths first)
+LIB_FILENAMES="command_paths.sh
+compatible_mktemp.sh"
+
+#######################################################################
+# Process command-line options and arguments
+#######################################################################
+
+help_mode=false; verbose_mode=false
+while getopts ":hvo:" opt; do
+	case $opt in
+		h)
+			help_mode=true
+			;;
+		v)
+			verbose_mode=true
+			;;
+		o)
+			out_file="$OPTARG"
+			;;
+		\?)
+			echo "ERROR: $script_name: Unrecognized option: -$OPTARG" >&2
+			exit 2
+			;;
+		:)
+			echo "ERROR: $script_name: Option -$OPTARG requires an argument" >&2
+			exit 2
+			;;
+	esac
+done
+
+if $help_mode; then
+	display_help
+	exit 0
+fi
+
+# check the output file
+if [ -z "$out_file" ]; then
+	$verbose_mode && echo "$script_name using stdout"
+else
+	$verbose_mode && printf "$script_name using output file: %s\n" "$out_file"
+fi
+
+# check the number of remaining arguments
+shift $(( OPTIND - 1 ))
+if [ "$#" -ne 2 ]; then
+	echo "ERROR: $script_name found $# command-line arguments (2 required)" >&2
+	exit 2
+fi
+
+# check the stylesheet
+xsl_file=$1
+if [ ! -f "$xsl_file" ]; then
+	echo "ERROR: $script_name: file does not exist: $xsl_file" >&2
+	exit 2
+fi
+$verbose_mode && printf "$script_name using XSL stylesheet: %s\n" "$xsl_file"
+
+# capture the location of the XML file
+xml_location=$2
+$verbose_mode && printf "$script_name using XML file at location: %s\n" "$xml_location"
+
+#######################################################################
+# Initialization
+#######################################################################
+
+# determine the source lib directory
+if [ -z "$LIB_DIR" ]; then
+	echo "ERROR: $script_name requires env var LIB_DIR" >&2
+	exit 2
+fi
+if [ ! -d "$LIB_DIR" ]; then
+	echo "ERROR: $script_name: directory does not exist: $LIB_DIR" >&2
+	exit 2
+fi
+$verbose_mode && printf "$script_name using source lib directory: %s\n" "$LIB_DIR"
+
+# source lib files
+for lib_filename in $LIB_FILENAMES; do
+	lib_file="$LIB_DIR/$lib_filename"
+	if [ ! -f "$lib_file" ]; then
+		echo "ERROR: $script_name: file does not exist: $lib_file" >&2
+		exit 2
+	fi
+	$verbose_mode && printf "$script_name sourcing lib file: %s\n" "$lib_file"
+	source "$lib_file" >&2
+	exit_code=$?
+	if [ $exit_code -ne 0 ]; then
+		echo "ERROR: $script_name failed to source script $lib_file" >&2
+		exit $exit_code
+	fi
+done
+
+# create a temporary directory
+tmp_dir=$( make_temp_file -d )
+if [ ! -d "$tmp_dir" ] ; then
+	printf "ERROR: $script_name unable to create temporary dir\n" >&2
+	exit 2
+fi
+$verbose_mode && printf "$script_name creating temp dir: %s\n" "$tmp_dir"
+
+# determine temporary directory
+if [ -n "$TMPDIR" ] && [ -d "$TMPDIR" ]; then
+	# use system temporary directory (remove trailing slash)
+	TMP_DIR="${TMPDIR%%/}/md-transforms"
+	$verbose_mode && printf "$script_name using temp dir: %s\n" "$TMP_DIR"
+else
+	# create temporary directory
+	tmp_dir="$( make_temp_file -d )"
+	if [ ! -d "$tmp_dir" ] ; then
+		printf "ERROR: $script_name unable to create temporary dir\n" >&2
+		exit 2
+	fi
+	# use temporary directory (remove trailing slash)
+	TMP_DIR="${tmp_dir%%/}/md-transforms"
+	$verbose_mode && printf "$script_name creating temp dir: %s\n" "$TMP_DIR"
+fi
+if [ ! -d "$TMP_DIR" ]; then
+	/bin/mkdir "$TMP_DIR"
+	exit_status=$?
+	if [ $exit_status -ne 0 ]; then
+		echo "ERROR: $script_name failed to create dir: $TMP_DIR" >&2
+		exit $exit_status
+	fi
+fi
+
+# temporary files
+xml_file="${TMP_DIR}/http_response_$$.xml"
+xsltproc_out_file="${TMP_DIR}/xsltproc_output_$$"
+
+#######################################################################
+# Main processing
+#######################################################################
+
+# GET the XML document
+$verbose_mode && printf "$script_name writing curl output to file: %s\n" "$xml_file"
+curl_output=$( /usr/bin/curl --silent \
+	--output "$xml_file" \
+	--write-out 'redirects:%{num_redirects};response:%{http_code};dns:%{time_namelookup};tcp:%{time_connect};ssl:%{time_appconnect};total:%{time_total}' \
+	"$xml_location"
+)
+exit_code=$?
+if [ $exit_code -ne 0 ]; then
+	echo "ERROR: ${script_name}: curl failed with status code: $exit_code" >&2
+	echo "$curl_output" >&2
+	exit $exit_code
+fi
+$verbose_mode && printf "$script_name successfully executed curl: %s\n" "$curl_output"
+
+# transform the XML document
+$verbose_mode && printf "$script_name writing xsltproc output to file: %s\n" "$xsltproc_out_file"
+/usr/bin/xsltproc --output "$xsltproc_out_file" "$xsl_file" "$xml_file" >&2
+exit_code=$?
+if [ $exit_code -ne 0 ]; then
+	echo "ERROR: ${script_name}: xsltproc failed with status code: $exit_code" >&2
+	exit $exit_code
+fi
+$verbose_mode && printf "$script_name successfully executed xsltproc\n"
+
+if [ -z "$out_file" ]; then
+	/bin/cat "$xsltproc_out_file"
+	exit_code=$?
+	if [ $exit_code -ne 0 ]; then
+		echo "ERROR: ${script_name} unable to cat output to stdout" >&2
+		exit $exit_code
+	fi
+else
+	$verbose_mode && printf "$script_name writing output to file: %s\n" "$out_file"
+	/bin/cp "$xsltproc_out_file" "$out_file"
+	exit_code=$?
+	if [ $exit_code -ne 0 ]; then
+		echo "ERROR: ${script_name} unable to copy output to file: $out_file" >&2
+		exit $exit_code
+	fi
+fi
+
+exit 0
diff --git a/install.sh b/install.sh
new file mode 100755
index 0000000..fd0681c
--- /dev/null
+++ b/install.sh
@@ -0,0 +1,116 @@
+#!/bin/bash
+
+#######################################################################
+# Copyright 2016 Tom Scavo
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#######################################################################
+
+################################################################
+#
+# Usage: install.sh BIN_DIR LIB_DIR
+#
+# Example: Install in /tmp
+#
+#   $ export BIN_DIR=/tmp/bin
+#   $ export LIB_DIR=/tmp/lib
+#   $ install.sh $BIN_DIR $LIB_DIR
+#
+# Example: Install in $HOME
+#
+#   $ export BIN_DIR=$HOME/bin
+#   $ export LIB_DIR=$HOME/lib
+#   $ install.sh $BIN_DIR $LIB_DIR
+#
+################################################################
+
+script_bin=${0%/*}  # equivalent to dirname $0
+script_name=${0##*/}  # equivalent to basename $0
+
+# generalize
+verbose_mode=true
+
+# get command-line args
+if [ $# -ne 2 ]; then
+	echo "ERROR: $script_name: wrong number of arguments: $# (2 required)" >&2
+	exit 2
+fi
+bin_dir=$1
+lib_dir=$2
+
+# check bin dir
+if [ -z "$bin_dir" ]; then
+	echo "ERROR: $script_name requires bin directory (BIN_DIR)" >&2
+	exit 2
+fi
+if [ -d "$bin_dir" ]; then
+	$verbose_mode && echo "$script_name using bin dir: $bin_dir"
+else
+	$verbose_mode && echo "$script_name creating bin dir: $bin_dir"
+	/bin/mkdir "$bin_dir"
+	exit_status=$?
+	if [ $exit_status -ne 0 ]; then
+		echo "ERROR: $script_name failed to create bin dir: $bin_dir" >&2
+		exit $exit_status
+	fi
+fi
+
+# check lib dir
+if [ -z "$lib_dir" ]; then
+	echo "ERROR: $script_name requires lib directory (LIB_DIR)" >&2
+	exit 2
+fi
+if [ -d "$lib_dir" ]; then
+	$verbose_mode && echo "$script_name using lib dir: $lib_dir"
+else
+	$verbose_mode && echo "$script_name creating lib dir: $lib_dir"
+	/bin/mkdir "$lib_dir"
+	exit_status=$?
+	if [ $exit_status -ne 0 ]; then
+		echo "ERROR: $script_name failed to create lib dir: $lib_dir" >&2
+		exit $exit_status
+	fi
+fi
+
+# initialize bin dir
+while read script_file; do
+	$verbose_mode && echo "$script_name copying executable file: $script_file"
+    /bin/cp $script_file $bin_dir
+	exit_status=$?
+	if [ $exit_status -ne 0 ]; then
+		echo "ERROR: $script_name failed to copy script: $script_file" >&2
+		exit $exit_status
+	fi
+done <<SCRIPTS
+$script_bin/bin/http_xsltproc.sh
+SCRIPTS
+
+# initialize lib dir
+while read source_file; do
+	echo "$script_name copying source file: $source_file"
+    /bin/cp $source_file $lib_dir
+	exit_status=$?
+	if [ $exit_status -ne 0 ]; then
+		echo "ERROR: $script_name failed to copy source file: $source_file" >&2
+		exit $exit_status
+	fi
+done <<SOURCES
+$script_bin/lib/list_all_IdP_DisplayNames_csv.xsl
+$script_bin/lib/list_all_IdPs_csv.xsl
+$script_bin/lib/list_all_RandS_IdPs_csv.xsl
+$script_bin/lib/list_all_RandS_SPs_csv.xsl
+$script_bin/lib/list_all_SPs_csv.xsl
+SOURCES
+
+$verbose_mode && echo "$script_name: installation complete"
+exit 0
\ No newline at end of file
diff --git a/lib/list_all_IdP_DisplayNames_csv.xsl b/lib/list_all_IdP_DisplayNames_csv.xsl
new file mode 100644
index 0000000..80c87ea
--- /dev/null
+++ b/lib/list_all_IdP_DisplayNames_csv.xsl
@@ -0,0 +1,138 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+	list_all_IdP_DisplayNames_csv.xsl
+	
+	This XSL transform takes a SAML metadata aggregate and produces a list of
+	IdP DisplayNames as would be seen on a typical discovery interface. The script 
+	matches on every entity descriptor with an IdP role and produces a CSV file 
+	with the following fields:
+	
+	  1. IdP Display Name: mdui:DisplayName or md:OrganizationDisplayName (in that order)
+	  2. IdP Entity ID: @entityID
+	  3. IdP Discovery: "hide" or "show"
+	  4. Registrar ID: @registrationAuthority
+	
+	The IdP Display Name field is set to "NONE" if neither mdui:DisplayName nor 
+	md:OrganizationDisplayName exist in the entity descriptor. The IdP Discovery 
+	field depends on the presence (resp., absence) of the hide-from-discovery 
+	entity attribute.
+	
+	BUG: Incorrectly processes an entity with multiple IDPSSODescriptor elements
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
+	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+	xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
+	xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
+	
+	<!-- search-and-replace constants -->
+	<xsl:variable name="double_quote" select="'&quot;'"/>
+	<xsl:variable name="double_double_quote" select="'&quot;&quot;'"/>
+
+	<!-- output is plain text -->
+	<xsl:output method="text"/>
+
+	<!-- output the heading line -->
+	<xsl:template match="/">
+		<xsl:text>IdP Display Name,IdP Entity ID,IdP Discovery,Registrar ID</xsl:text>
+		<xsl:text>&#x0a;</xsl:text>
+		<xsl:apply-templates/>
+	</xsl:template>
+
+	<!-- match all entity descriptors with an IdP role -->
+	<xsl:template match="//md:EntityDescriptor[md:IDPSSODescriptor]">
+	
+		<!-- compute the normalized values of mdui:DisplayName and md:OrganizationDisplayName -->
+		<xsl:variable name="displayName" select="normalize-space(md:IDPSSODescriptor/md:Extensions/mdui:UIInfo/mdui:DisplayName[@xml:lang='en'])"/>
+		<xsl:variable name="orgDisplayName" select="normalize-space(md:Organization/md:OrganizationDisplayName[@xml:lang='en'])"/>
+		
+		<!-- output either mdui:DisplayName or md:OrganizationDisplayName or "NONE" (in that order) -->
+		<xsl:choose>
+			<xsl:when test="$displayName != ''">
+				<!-- escape literal double quotes in mdui:DisplayName -->
+				<xsl:variable name="escapedDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$displayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:when test="$orgDisplayName != ''">
+				<!-- escape literal double quotes in md:OrganizationDisplayName -->
+				<xsl:variable name="escapedOrgDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$orgDisplayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedOrgDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+		
+		<!-- output the IdP entityID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="@entityID"/>
+		
+		<!-- output "hide" or "show" depending on the hide-from-discovery entity attribute -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="md:Extensions/mdattr:EntityAttributes/saml:Attribute[@Name='http://macedir.org/entity-category']/saml:AttributeValue[text()='http://refeds.org/category/hide-from-discovery']">
+				<xsl:text>hide</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>show</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+		
+		<!-- output the registrar ID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="md:Extensions/mdrpi:RegistrationInfo/@registrationAuthority"/>
+		
+		<xsl:text>&#x0a;</xsl:text>
+	</xsl:template>
+	
+	<!-- 
+		A named template that performs global (recursive) search-and-replace on a string
+		(similar to fn:replace(string, pattern, replace) in XSLT 2.0).
+		See: http://stackoverflow.com/questions/3067113/xslt-string-replace/3067130#3067130
+	-->
+	<xsl:template name="string-replace-all">
+		<xsl:param name="string"/>
+		<xsl:param name="search"/>
+		<xsl:param name="replace"/>
+		<xsl:choose>
+			<xsl:when test="$string = '' or $search = '' or not($search)">
+				<!-- Prevent this routine from hanging -->
+				<xsl:value-of select="$string"/>
+			</xsl:when>
+			<xsl:when test="contains($string, $search)">
+				<xsl:value-of select="substring-before($string, $search)"/>
+				<xsl:value-of select="$replace"/>
+				<xsl:call-template name="string-replace-all">
+					<xsl:with-param name="string" select="substring-after($string, $search)"/>
+					<xsl:with-param name="search" select="$search"/>
+					<xsl:with-param name="replace" select="$replace"/>
+				</xsl:call-template>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:value-of select="$string"/>
+			</xsl:otherwise>
+		</xsl:choose>
+	</xsl:template>
+
+	<xsl:template match="text()">
+		<!-- do nothing -->
+	</xsl:template>
+</xsl:stylesheet>
diff --git a/lib/list_all_IdPs_csv.xsl b/lib/list_all_IdPs_csv.xsl
new file mode 100644
index 0000000..1c176d3
--- /dev/null
+++ b/lib/list_all_IdPs_csv.xsl
@@ -0,0 +1,128 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+	list_all_IdPs_csv.xsl
+	
+	This XSL transform takes a SAML metadata aggregate, matches on every 
+	entity descriptor with an IdP role, and produces a CSV file with the 
+	following fields:
+	
+	  1. Organization Name: md:OrganizationName
+	  2. IdP Display Name: mdui:DisplayName
+	  3. IdP Entity ID: @entityID
+	  4. Registrar ID: @registrationAuthority
+	
+	Note that either of the first two fields may be blank, in which case
+	the word "NONE" is output.
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+	xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+
+	<!-- search-and-replace constants -->
+	<xsl:variable name="double_quote" select="'&quot;'"/>
+	<xsl:variable name="double_double_quote" select="'&quot;&quot;'"/>
+
+	<!-- output is plain text -->
+	<xsl:output method="text"/>
+
+	<!-- output the heading line -->
+	<xsl:template match="/">
+	  <xsl:text>Organization Name,IdP Display Name,IdP Entity ID,Registrar ID</xsl:text>
+	  <xsl:text>&#x0a;</xsl:text>
+	  <xsl:apply-templates/>
+	</xsl:template>
+
+	<!-- match all entity descriptors with an IdP role -->
+	<xsl:template match="//md:EntityDescriptor[md:IDPSSODescriptor]">
+		
+		<!-- compute the normalized values of mdui:DisplayName and md:OrganizationDisplayName -->
+		<xsl:variable name="displayName" select="normalize-space(md:IDPSSODescriptor/md:Extensions/mdui:UIInfo/mdui:DisplayName[@xml:lang='en'])"/>
+		<xsl:variable name="orgDisplayName" select="normalize-space(md:Organization/md:OrganizationDisplayName[@xml:lang='en'])"/>
+		
+		<!-- output md:OrganizationDisplayName or "NONE" -->
+		<xsl:choose>
+			<xsl:when test="$orgDisplayName != ''">
+				<!-- escape literal double quotes in md:OrganizationDisplayName -->
+				<xsl:variable name="escapedOrgDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$orgDisplayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedOrgDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output mdui:DisplayName or "NONE" -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="$displayName != ''">
+				<!-- escape literal double quotes in mdui:DisplayName -->
+				<xsl:variable name="escapedDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$displayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output the entityID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="@entityID"/>
+
+		<!-- output the registrar ID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="md:Extensions/mdrpi:RegistrationInfo/@registrationAuthority"/>
+		
+		<xsl:text>&#x0a;</xsl:text>
+	</xsl:template>
+	
+	<!-- 
+		A named template that performs global (recursive) search-and-replace on a string
+		(similar to fn:replace(string, pattern, replace) in XSLT 2.0).
+		See: http://stackoverflow.com/questions/3067113/xslt-string-replace/3067130#3067130
+	-->
+	<xsl:template name="string-replace-all">
+		<xsl:param name="string"/>
+		<xsl:param name="search"/>
+		<xsl:param name="replace"/>
+		<xsl:choose>
+			<xsl:when test="$string = '' or $search = '' or not($search)">
+				<!-- Prevent this routine from hanging -->
+				<xsl:value-of select="$string"/>
+			</xsl:when>
+			<xsl:when test="contains($string, $search)">
+				<xsl:value-of select="substring-before($string, $search)"/>
+				<xsl:value-of select="$replace"/>
+				<xsl:call-template name="string-replace-all">
+					<xsl:with-param name="string" select="substring-after($string, $search)"/>
+					<xsl:with-param name="search" select="$search"/>
+					<xsl:with-param name="replace" select="$replace"/>
+				</xsl:call-template>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:value-of select="$string"/>
+			</xsl:otherwise>
+		</xsl:choose>
+	</xsl:template>
+
+	<xsl:template match="text()">
+		<!-- do nothing -->
+	</xsl:template>
+</xsl:stylesheet>
diff --git a/lib/list_all_RandS_IdPs_csv.xsl b/lib/list_all_RandS_IdPs_csv.xsl
new file mode 100644
index 0000000..4a98477
--- /dev/null
+++ b/lib/list_all_RandS_IdPs_csv.xsl
@@ -0,0 +1,142 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+	list_all_RandS_IdPs_csv.xsl
+	
+	This XSL transform takes a SAML metadata aggregate, matches on every 
+	entity descriptor with an RandS IdP entity attribute, and produces a 
+	CSV file with the following fields:
+	
+	  1. Organization Name: md:OrganizationName
+	  2. IdP Display Name: mdui:DisplayName
+	  3. IdP Entity ID: @entityID
+	  4. IdP Support Level: "global" or "local"
+	  5. Registrar ID: @registrationAuthority
+	
+	Note that either of the first two fields may be blank, in which case
+	the word "NONE" is output.
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
+	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+	xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
+	xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
+
+	<!-- search-and-replace constants -->
+	<xsl:variable name="double_quote" select="'&quot;'"/>
+	<xsl:variable name="double_double_quote" select="'&quot;&quot;'"/>
+
+	<!-- output is plain text -->
+	<xsl:output method="text"/>
+
+	<!-- output the heading line -->
+	<xsl:template match="/">
+	  <xsl:text>Organization Name,IdP Display Name,IdP Entity ID,IdP Support Level,Registrar ID</xsl:text>
+	  <xsl:text>&#x0a;</xsl:text>
+	  <xsl:apply-templates/>
+	</xsl:template>
+
+	<!-- match all entity descriptors with an RandS IdP entity attribute -->
+	<xsl:template match="//md:EntityDescriptor[md:Extensions/mdattr:EntityAttributes/saml:Attribute[@Name='http://macedir.org/entity-category-support']/saml:AttributeValue[text()='http://refeds.org/category/research-and-scholarship' or text()='http://id.incommon.org/category/research-and-scholarship']]">
+		
+		<!-- compute the normalized values of mdui:DisplayName and md:OrganizationDisplayName -->
+		<xsl:variable name="displayName" select="normalize-space(md:IDPSSODescriptor/md:Extensions/mdui:UIInfo/mdui:DisplayName[@xml:lang='en'])"/>
+		<xsl:variable name="orgDisplayName" select="normalize-space(md:Organization/md:OrganizationDisplayName[@xml:lang='en'])"/>
+		
+		<!-- output md:OrganizationDisplayName or "NONE" -->
+		<xsl:choose>
+			<xsl:when test="$orgDisplayName != ''">
+				<!-- escape literal double quotes in md:OrganizationDisplayName -->
+				<xsl:variable name="escapedOrgDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$orgDisplayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedOrgDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output mdui:DisplayName or "NONE" -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="$displayName != ''">
+				<!-- escape literal double quotes in mdui:DisplayName -->
+				<xsl:variable name="escapedDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$displayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output the entityID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="@entityID"/>
+
+		<!-- output "global" or "local" depending on the value of the entity attribute -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="md:Extensions/mdattr:EntityAttributes/saml:Attribute[@Name='http://macedir.org/entity-category-support']/saml:AttributeValue[text()='http://refeds.org/category/research-and-scholarship']">
+				<xsl:text>global</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>local</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+		
+		<!-- output the registrar ID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="md:Extensions/mdrpi:RegistrationInfo/@registrationAuthority"/>
+		
+		<xsl:text>&#x0a;</xsl:text>
+	</xsl:template>
+	
+	<!-- 
+		A named template that performs global (recursive) search-and-replace on a string
+		(similar to fn:replace(string, pattern, replace) in XSLT 2.0).
+		See: http://stackoverflow.com/questions/3067113/xslt-string-replace/3067130#3067130
+	-->
+	<xsl:template name="string-replace-all">
+		<xsl:param name="string"/>
+		<xsl:param name="search"/>
+		<xsl:param name="replace"/>
+		<xsl:choose>
+			<xsl:when test="$string = '' or $search = '' or not($search)">
+				<!-- Prevent this routine from hanging -->
+				<xsl:value-of select="$string"/>
+			</xsl:when>
+			<xsl:when test="contains($string, $search)">
+				<xsl:value-of select="substring-before($string, $search)"/>
+				<xsl:value-of select="$replace"/>
+				<xsl:call-template name="string-replace-all">
+					<xsl:with-param name="string" select="substring-after($string, $search)"/>
+					<xsl:with-param name="search" select="$search"/>
+					<xsl:with-param name="replace" select="$replace"/>
+				</xsl:call-template>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:value-of select="$string"/>
+			</xsl:otherwise>
+		</xsl:choose>
+	</xsl:template>
+
+	<xsl:template match="text()">
+		<!-- do nothing -->
+	</xsl:template>
+</xsl:stylesheet>
diff --git a/lib/list_all_RandS_SPs_csv.xsl b/lib/list_all_RandS_SPs_csv.xsl
new file mode 100644
index 0000000..a86e5b3
--- /dev/null
+++ b/lib/list_all_RandS_SPs_csv.xsl
@@ -0,0 +1,146 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+	list_all_RandS_SPs_csv.xsl
+	
+	This XSL transform takes a SAML metadata aggregate, matches on every 
+	entity descriptor with the RandS SP entity attribute, and produces a 
+	CSV file with the following fields:
+	
+	  1. Organization Name: md:OrganizationName
+	  2. SP Display Name: mdui:DisplayName
+	  3. SP Information URL: mdui:InformationURL
+	  4. SP Entity ID: @entityID
+	  5. Registrar ID: @registrationAuthority
+	
+	Note that the first field may be blank, in which case the word "NONE" 
+	is output. If either of the next two fields is blank, the phrase
+	"MISSING DATA" is output since that data is required of all RandS SPs.
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
+	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+	xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
+	xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
+
+	<!-- search-and-replace constants -->
+	<xsl:variable name="double_quote" select="'&quot;'"/>
+	<xsl:variable name="double_double_quote" select="'&quot;&quot;'"/>
+
+	<!-- output is plain text -->
+	<xsl:output method="text"/>
+
+	<!-- output the heading line -->
+	<xsl:template match="/">
+	  <xsl:text>Organization Name,SP Display Name,SP Information URL,SP Entity ID,Registrar ID</xsl:text>
+	  <xsl:text>&#x0a;</xsl:text>
+	  <xsl:apply-templates/>
+	</xsl:template>
+
+	<!-- match all entity descriptors with the RandS SP entity attribute -->
+	<xsl:template match="//md:EntityDescriptor[md:Extensions/mdattr:EntityAttributes/saml:Attribute[@Name='http://macedir.org/entity-category']/saml:AttributeValue[text()='http://refeds.org/category/research-and-scholarship']]">
+		
+		<!-- compute the normalized values of mdui:DisplayName and md:OrganizationDisplayName -->
+		<xsl:variable name="displayName" select="normalize-space(md:SPSSODescriptor/md:Extensions/mdui:UIInfo/mdui:DisplayName[@xml:lang='en'])"/>
+		<xsl:variable name="orgDisplayName" select="normalize-space(md:Organization/md:OrganizationDisplayName[@xml:lang='en'])"/>
+		
+		<!-- compute the mdui:InformationURL -->
+		<xsl:variable name="informationURL" select="md:SPSSODescriptor/md:Extensions/mdui:UIInfo/mdui:InformationURL[@xml:lang='en']"/>
+
+		<!-- output md:OrganizationDisplayName or "NONE" -->
+		<xsl:choose>
+			<xsl:when test="$orgDisplayName != ''">
+				<!-- escape literal double quotes in md:OrganizationDisplayName -->
+				<xsl:variable name="escapedOrgDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$orgDisplayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedOrgDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output mdui:DisplayName or "MISSING DATA" -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="$displayName != ''">
+				<!-- escape literal double quotes in mdui:DisplayName -->
+				<xsl:variable name="escapedDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$displayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>MISSING DATA</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output mdui:InformationURL or "MISSING DATA" -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="$informationURL != ''">
+				<xsl:value-of select="$informationURL"/>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>MISSING DATA</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output the entityID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="@entityID"/>
+
+		<!-- output the registrar ID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="md:Extensions/mdrpi:RegistrationInfo/@registrationAuthority"/>
+		
+		<xsl:text>&#x0a;</xsl:text>
+	</xsl:template>
+	
+	<!-- 
+		A named template that performs global (recursive) search-and-replace on a string
+		(similar to fn:replace(string, pattern, replace) in XSLT 2.0).
+		See: http://stackoverflow.com/questions/3067113/xslt-string-replace/3067130#3067130
+	-->
+	<xsl:template name="string-replace-all">
+		<xsl:param name="string"/>
+		<xsl:param name="search"/>
+		<xsl:param name="replace"/>
+		<xsl:choose>
+			<xsl:when test="$string = '' or $search = '' or not($search)">
+				<!-- Prevent this routine from hanging -->
+				<xsl:value-of select="$string"/>
+			</xsl:when>
+			<xsl:when test="contains($string, $search)">
+				<xsl:value-of select="substring-before($string, $search)"/>
+				<xsl:value-of select="$replace"/>
+				<xsl:call-template name="string-replace-all">
+					<xsl:with-param name="string" select="substring-after($string, $search)"/>
+					<xsl:with-param name="search" select="$search"/>
+					<xsl:with-param name="replace" select="$replace"/>
+				</xsl:call-template>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:value-of select="$string"/>
+			</xsl:otherwise>
+		</xsl:choose>
+	</xsl:template>
+
+	<xsl:template match="text()">
+		<!-- do nothing -->
+	</xsl:template>
+</xsl:stylesheet>
diff --git a/lib/list_all_SPs_csv.xsl b/lib/list_all_SPs_csv.xsl
new file mode 100644
index 0000000..319b948
--- /dev/null
+++ b/lib/list_all_SPs_csv.xsl
@@ -0,0 +1,128 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+	list_all_SPs_csv.xsl
+	
+	This XSL transform takes a SAML metadata aggregate, matches on every 
+	entity descriptor with an SP role, and produces a CSV file with the 
+	following fields:
+	
+	  1. Organization Name: md:OrganizationName
+	  2. SP Display Name: mdui:DisplayName
+	  3. SP Entity ID: @entityID
+	  4. Registrar ID: @registrationAuthority
+	
+	Note that either of the first two fields may be blank, in which case
+	the word "NONE" is output.
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+	xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
+
+	<!-- search-and-replace constants -->
+	<xsl:variable name="double_quote" select="'&quot;'"/>
+	<xsl:variable name="double_double_quote" select="'&quot;&quot;'"/>
+
+	<!-- output is plain text -->
+	<xsl:output method="text"/>
+
+	<!-- output the heading line -->
+	<xsl:template match="/">
+	  <xsl:text>Organization Name,SP Display Name,SP Entity ID,Registrar ID</xsl:text>
+	  <xsl:text>&#x0a;</xsl:text>
+	  <xsl:apply-templates/>
+	</xsl:template>
+
+	<!-- match all entity descriptors with an SP role -->
+	<xsl:template match="//md:EntityDescriptor[md:SPSSODescriptor]">
+		
+		<!-- compute the normalized values of mdui:DisplayName and md:OrganizationDisplayName -->
+		<xsl:variable name="displayName" select="normalize-space(md:SPSSODescriptor/md:Extensions/mdui:UIInfo/mdui:DisplayName[@xml:lang='en'])"/>
+		<xsl:variable name="orgDisplayName" select="normalize-space(md:Organization/md:OrganizationDisplayName[@xml:lang='en'])"/>
+		
+		<!-- output md:OrganizationDisplayName or "NONE" -->
+		<xsl:choose>
+			<xsl:when test="$orgDisplayName != ''">
+				<!-- escape literal double quotes in md:OrganizationDisplayName -->
+				<xsl:variable name="escapedOrgDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$orgDisplayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedOrgDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output mdui:DisplayName or "NONE" -->
+		<xsl:text>,</xsl:text>
+		<xsl:choose>
+			<xsl:when test="$displayName != ''">
+				<!-- escape literal double quotes in mdui:DisplayName -->
+				<xsl:variable name="escapedDisplayName">
+					<xsl:call-template name="string-replace-all">
+						<xsl:with-param name="string" select="$displayName"/>
+						<xsl:with-param name="search" select="$double_quote"/>
+						<xsl:with-param name="replace" select="$double_double_quote"/>
+					</xsl:call-template>
+				</xsl:variable>
+				<xsl:text>"</xsl:text>
+				<xsl:value-of select="$escapedDisplayName"/>
+				<xsl:text>"</xsl:text>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:text>NONE</xsl:text>
+			</xsl:otherwise>
+		</xsl:choose>
+
+		<!-- output the entityID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="@entityID"/>
+
+		<!-- output the registrar ID -->
+		<xsl:text>,</xsl:text>
+		<xsl:value-of select="md:Extensions/mdrpi:RegistrationInfo/@registrationAuthority"/>
+		
+		<xsl:text>&#x0a;</xsl:text>
+	</xsl:template>
+	
+	<!-- 
+		A named template that performs global (recursive) search-and-replace on a string
+		(similar to fn:replace(string, pattern, replace) in XSLT 2.0).
+		See: http://stackoverflow.com/questions/3067113/xslt-string-replace/3067130#3067130
+	-->
+	<xsl:template name="string-replace-all">
+		<xsl:param name="string"/>
+		<xsl:param name="search"/>
+		<xsl:param name="replace"/>
+		<xsl:choose>
+			<xsl:when test="$string = '' or $search = '' or not($search)">
+				<!-- Prevent this routine from hanging -->
+				<xsl:value-of select="$string"/>
+			</xsl:when>
+			<xsl:when test="contains($string, $search)">
+				<xsl:value-of select="substring-before($string, $search)"/>
+				<xsl:value-of select="$replace"/>
+				<xsl:call-template name="string-replace-all">
+					<xsl:with-param name="string" select="substring-after($string, $search)"/>
+					<xsl:with-param name="search" select="$search"/>
+					<xsl:with-param name="replace" select="$replace"/>
+				</xsl:call-template>
+			</xsl:when>
+			<xsl:otherwise>
+				<xsl:value-of select="$string"/>
+			</xsl:otherwise>
+		</xsl:choose>
+	</xsl:template>
+
+	<xsl:template match="text()">
+		<!-- do nothing -->
+	</xsl:template>
+</xsl:stylesheet>