Brown University Identity Provider (Shibboleth / SAML 2.0)

aid: brown:idp
name: Brown University Identity Provider (Shibboleth / SAML 2.0)
description: 'Brown''s Shibboleth identity provider, and the strongest machine-readable contract in this
  profile. Brown self-publishes signed per-entity SAML metadata at the entityID itself — uncommon; most
  institutions leave that to the federation aggregate — and the same entity appears in InCommon''s signed
  MDQ service, flowing on into eduGAIN. Declares HTTP-POST, HTTP-Redirect, POST-SimpleSign and Shibboleth
  AuthnRequest SSO bindings, a SOAP attribute authority, a shibmd:Scope of brown.edu, and four entity
  categories including InCommon and REFEDS Research & Scholarship and REFEDS Sirtfi, backed by a dedicated
  security contact. It is browser SSO: it grants no API credentials, and there is no OAuth server, token
  endpoint or OIDC discovery document anywhere on Brown''s surface.'
humanURL: https://ithelp.brown.edu/kb/shibboleth-single-sign-on
baseURL: https://sso.brown.edu/idp/
tags:
- Identity Federation
- SAML
- Shibboleth
- Single Sign-On
- Authentication
properties:
- type: IdentityFederation
  url: identity-federation/brown-identity-federation.yml
- type: Metadata
  url: identity-federation/brown-idp-saml-metadata.xml
- type: Metadata
  url: identity-federation/brown-incommon-mdq-entity.xml
- type: Documentation
  url: https://ithelp.brown.edu/kb/shibboleth-single-sign-on
- type: Authentication
  url: authentication/brown-authentication.yml
- type: Conformance
  url: conformance/brown-conformance.yml
x-operator: institution
x-operator-basis: sso.brown.edu resolves to 128.148.252.212, netname BROWN-UNIV, OrgName "Brown University"
  (BROWNU-Z, ARIN), with no CNAME onto any managed-IdP platform. The TLS certificate subject is "C=US,
  ST=Rhode Island, O=Brown University, CN=sso.brown.edu", issued by InCommon RSA OV SSL CA 3. Organization
  block, shibmd:Scope and all four metadata contacts are Brown's. This is the check that reclassified
  Monash's and Melbourne's IdPs as tenant surfaces; Brown passes it.