University of Hong Kong

HKU Shibboleth Identity Provider

The University of Hong Kong's own Shibboleth SAML 2.0 identity provider, entityID https://hkafidp.hku.hk/idp/shibboleth, scope hku.hk. It self-publishes signed metadata (HTTP 200, application/xml, 14,831 bytes) declaring SAML 1.1 and SAML 2.0 SSO, single logout, artifact resolution and attribute query endpoints, transient NameIDs, and the eduPerson and SCHAC attributes it releases. Registered by the Hong Kong Access Federation (JUCC) on 2016-12-15 and exported to eduGAIN, carrying the REFEDS Research and Scholarship entity category and SIRTFI assurance certification. This is HKU's most substantial institution-operated machine-readable surface and the one no catalog had recorded.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/hku/refs/heads/main/authentication/hku-authentication.yml

Other Resources

🔗
Metadata
https://hkafidp.hku.hk/idp/shibboleth
🔗
Vocabulary
https://raw.githubusercontent.com/api-evangelist/hku/refs/heads/main/vocabulary/hku-identity-attributes.yml
🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/hku/refs/heads/main/conformance/hku-conformance.yml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/hku/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: hku:identity-federation
name: HKU Shibboleth Identity Provider
description: The University of Hong Kong's own Shibboleth SAML 2.0 identity provider, entityID https://hkafidp.hku.hk/idp/shibboleth,
  scope hku.hk. It self-publishes signed metadata (HTTP 200, application/xml, 14,831 bytes) declaring
  SAML 1.1 and SAML 2.0 SSO, single logout, artifact resolution and attribute query endpoints, transient
  NameIDs, and the eduPerson and SCHAC attributes it releases. Registered by the Hong Kong Access Federation
  (JUCC) on 2016-12-15 and exported to eduGAIN, carrying the REFEDS Research and Scholarship entity category
  and SIRTFI assurance certification. This is HKU's most substantial institution-operated machine-readable
  surface and the one no catalog had recorded.
humanURL: https://www.hkaf.edu.hk/
baseURL: https://hkafidp.hku.hk/idp/shibboleth
tags:
- Identity Federation
- Shibboleth
- SAML
- eduGAIN
- Single Sign-On
properties:
- type: Metadata
  url: https://hkafidp.hku.hk/idp/shibboleth
- type: Authentication
  url: authentication/hku-authentication.yml
- type: Vocabulary
  url: vocabulary/hku-identity-attributes.yml
- type: Conformance
  url: conformance/hku-conformance.yml
x-operator: institution
x-operator-evidence: Host hkafidp.hku.hk is under HKU's own registrable domain; the metadata's Organization
  block names The University of Hong Kong and the signing certificates are issued to CN=juccaf-idp.hku.hk.
  HKU runs the IdP; JUCC only registers it.
x-probe:
  url: https://hkafidp.hku.hk/idp/shibboleth
  status: 200
  probed: '2026-08-19'