FAU WebSSO SAML 2.0 Identity Provider
FAU's central web single sign-on, operated by RRZE, publishes SAML 2.0 identity provider metadata as a machine-readable document at https://www.sso.uni-erlangen.de/simplesaml/saml2/idp/metadata.php, mirrored on sso.fau.de. Verified live on 2026-08-30: a signed md:EntityDescriptor with an md:IDPSSODescriptor and the mdui and shibmd extension namespaces. The same entityID resolves in the DFN-AAI metadata query service at mdq.aai.dfn.de, confirming registration in the German national research and education federation, which feeds eduGAIN. The implementation is SimpleSAMLphp. Identity federation is institution-operated by definition and is one of the few machine-readable surfaces a university reliably owns outright.