AUB Shibboleth Identity Provider (SAML 2.0)
AUB's own Shibboleth SAML 2.0 identity provider, the front door to campus single sign-on. The metadata endpoint serves a signed EntityDescriptor with entityID https://idp.aub.edu.lb/idp/shibboleth, shibmd:Scope aub.edu.lb, mdui:DisplayName "American University of Beirut", separate back-channel and front-channel signing certificates, and four SingleSignOnService bindings (Shibboleth SSO, SAML2 POST, SAML2 Redirect, SAML2 POST-SimpleSign). AUB ScholarWorks is wired to it — /server/api/authn/shibboleth returns a 302 into the repository. Institution-operated by definition, machine-readable, and the class of surface this cohort most consistently fails to catalogue.