# UGM Shibboleth SAML 2.0 Identity Provider

**Canonical:** https://apis.io/apis/gadjah-mada-university/shibboleth-idp/  
**Provider:** Gadjah Mada University — https://apis.io/providers/gadjah-mada-university/  
**Base URL:** https://sso.ugm.ac.id/idp/profile/Metadata/SAML  
**Documentation:** https://sso.ugm.ac.id/

UGM Shibboleth SAML 2.0 Identity Provider is one of 8 APIs that [Gadjah Mada University](https://apis.io/providers/gadjah-mada-university/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity, SSO, SAML, Shibboleth, and Federation. The published artifact set on APIs.io includes authentication docs.

UGM's own Shibboleth Identity Provider, entityID https://sso.ugm.ac.id/idp/shibboleth, publishing an unsigned SAML EntityDescriptor from the university's own host — retrieved live on 2026-09-01 (200, 6379 bytes, application/xml) and saved to this repo. Advertises SAML 2.0, SAML 1.1 and the native Shibboleth 1.0 authn profile over HTTP-Redirect, HTTP-POST and HTTP-POST-SimpleSign, with SOAP artifact resolution, three single-logout bindings, and a separate AttributeAuthority- Descriptor exposing SAML 1.0 and SAML 2.0 SOAP AttributeQuery. Institution-operated by definition. Two findings are recorded honestly: shibmd:Scope is declared as "ac.id" — the whole Indonesian academic namespace — rather than "ugm.ac.id", and the entity is NOT present in the eduGAIN aggregate (10,616 entities checked 2026-09-01), so the IdP is self-published rather than inter-federated. It is also not a developer API: no application can obtain an assertion without being registered as a service provider.

## Machine-readable artifacts (4)

- **IdentityFederation** — https://sso.ugm.ac.id/idp/profile/Metadata/SAML
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/authentication/gadjah-mada-university-authentication.yml
- **x-saml-metadata** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/authentication/gadjah-mada-university-saml-idp-metadata.xml
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/conformance/gadjah-mada-university-conformance.yml

## Other Gadjah Mada University APIs (7)

- [UGM ID — OAuth 2.0 / OpenID Connect Authorization Server](https://apis.io/apis/gadjah-mada-university/ugm-id/)
- [UGM Institutional Repository OAI-PMH](https://apis.io/apis/gadjah-mada-university/repository-oai-pmh/)
- [UGM Journals OAI-PMH](https://apis.io/apis/gadjah-mada-university/journal-oai-pmh/)
- [UGM Single Sign-On (CAS)](https://apis.io/apis/gadjah-mada-university/sso-cas/)
- [eLOK Moodle Web Services (institution deployment)](https://apis.io/apis/gadjah-mada-university/elok-moodle-webservices/)
- [Crossref membership (member 9411, prefix 10.22146)](https://apis.io/apis/gadjah-mada-university/crossref-membership/)
- [ROR organization record (ror.org/03ke6d638)](https://apis.io/apis/gadjah-mada-university/ror-record/)

## Tags

Identity, SSO, SAML, Shibboleth, Federation

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/gadjah-mada-university/shibboleth-idp/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/gadjah-mada-university/.
