ENS-PSL Identity Provider (SAML 2.0 / Shibboleth)
ENS-PSL runs its own Shibboleth identity provider under its own registrable domain. The SAML 2.0 entity descriptor is served at https://federation.ens.psl.eu/idp/shibboleth (HTTP 200, application/xml) and declares SingleSignOnService endpoints for the HTTP-POST and HTTP-Redirect bindings plus the SAML 1.x Shibboleth AuthnRequest profile. The entity is registered in the RENATER Fédération Éducation-Recherche under OrganizationName "Ecole Normale Supérieure de Paris", asserting shibmd:Scope ens.fr and ens.psl.eu. This is the one surface ENS both operates and describes in a machine-readable format; there is no self-serve access — relying parties join through the federation.