Carnegie Mellon University

CMU Web Login (Shibboleth SAML 2.0 Identity Provider)

Carnegie Mellon's campus-wide single sign-on identity provider, running Shibboleth on CMU's own host and address space (login.cmu.edu, 128.2.42.22). Its SAML 2.0 metadata is publicly readable at the canonical /idp/shibboleth location, and it is a registered InCommon — and thereby eduGAIN — entity carrying the Research & Scholarship entity category, which is a machine-readable commitment to release a defined attribute bundle to R&S service providers. An authentication service for relying service providers, not a data API, and the single most unambiguously institution-operated machine-readable surface CMU publishes.

GitHub

Documentation

📖
Documentation
https://www.cmu.edu/computing/services/security/identity-access/authentication/sso-provider.html

Other Resources

🔗
Metadata
https://mdq.incommon.org/entities/https%3A%2F%2Flogin.cmu.edu%2Fidp%2Fshibboleth

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/web-login-sso"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: carnegie-mellon-university:web-login-sso
name: CMU Web Login (Shibboleth SAML 2.0 Identity Provider)
description: Carnegie Mellon's campus-wide single sign-on identity provider, running Shibboleth on CMU's
  own host and address space (login.cmu.edu, 128.2.42.22). Its SAML 2.0 metadata is publicly readable
  at the canonical /idp/shibboleth location, and it is a registered InCommon — and thereby eduGAIN — entity
  carrying the Research & Scholarship entity category, which is a machine-readable commitment to release
  a defined attribute bundle to R&S service providers. An authentication service for relying service providers,
  not a data API, and the single most unambiguously institution-operated machine-readable surface CMU
  publishes.
humanURL: https://www.cmu.edu/computing/services/security/identity-access/authentication/sso-provider.html
baseURL: https://login.cmu.edu/idp/shibboleth
tags:
- Identity Federation
- Authentication
- SSO
- Shibboleth
- SAML
- InCommon
x-operator: institution
properties:
- type: Documentation
  url: https://www.cmu.edu/computing/services/security/identity-access/authentication/sso-provider.html
- type: Metadata
  url: https://mdq.incommon.org/entities/https%3A%2F%2Flogin.cmu.edu%2Fidp%2Fshibboleth