# Columbia Identity — Shibboleth IdP and CAS

**Canonical:** https://apis.io/apis/columbia/identity/  
**Provider:** Columbia University — https://apis.io/providers/columbia/  
**Base URL:** https://shibboleth.columbia.edu/idp  
**Documentation:** https://www.cuit.columbia.edu/web-authentication-federation

Columbia Identity — Shibboleth IdP and CAS is one of 10 APIs that [Columbia University](https://apis.io/providers/columbia/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity, Identity Federation, Authentication, SAML, and Shibboleth. The published artifact set on APIs.io includes authentication docs and API documentation.

Columbia University Information Technology operates the university's own identity infrastructure: a production Shibboleth Identity Provider publishing signed SAML 2.0 metadata anonymously under the InCommon entityID urn:mace:incommon:columbia.edu, and a CAS server handling browser single sign-on with UNI credentials and MFA. The metadata is the most substantial machine-readable artifact Columbia publishes about itself — two X.509 key descriptors, four SSO endpoints, three SAML bindings, a declared scope of columbia.edu and a logout handoff to CAS. It is readable by anyone and actionable by nobody outside the university: relying parties are registered by CUIT and there is no public or dynamic registration. No OpenID Connect discovery document is published.

## Machine-readable artifacts (6)

- **IdentityFederation** — https://raw.githubusercontent.com/api-evangelist/columbia/refs/heads/main/identity-federation/columbia-identity-federation.yml
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/columbia/refs/heads/main/authentication/columbia-authentication.yml
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/columbia/refs/heads/main/conformance/columbia-conformance.yml
- **Documentation** — https://www.cuit.columbia.edu/shibboleth
- **Documentation** — https://www.cuit.columbia.edu/cas-authentication
- **Signup** — https://www.cuit.columbia.edu/cas-authentication/registration

## Other Columbia University APIs (9)

- [Columbia University Libraries Hours API](https://apis.io/apis/columbia/library-hours/)
- [CLIO Library Catalog Open Data](https://apis.io/apis/columbia/clio-opendata/)
- [Columbia Open Data Service](https://apis.io/apis/columbia/opendata/)
- [CU Directory of Classes](https://apis.io/apis/columbia/directory-of-classes/)
- [Columbia Academic Commons](https://apis.io/apis/columbia/academic-commons/)
- [Digital Library Collections and the 10.7916 DOI namespace](https://apis.io/apis/columbia/dlc/)
- [IRI/LDEO Climate Data Library](https://apis.io/apis/columbia/iri-data-library/)
- [CourseWorks (Instructure Canvas)](https://apis.io/apis/columbia/courseworks/)
- [Columbia University Data Platform (Redivis)](https://apis.io/apis/columbia/redivis/)

## Tags

Identity, Identity Federation, Authentication, SAML, Shibboleth, CAS, InCommon, SSO

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/columbia/identity/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/columbia/.