HKUST Shibboleth Identity Provider
HKUST's own SAML 2.0 identity provider, serving machine-readable metadata at idp.ust.hk/idp/shibboleth. Asserts the scopes ust.hk, connect.ust.hk and alumni.ust.hk, and declares HTTP-POST, HTTP-POST-SimpleSign, HTTP-Redirect and SOAP/ECP single-sign-on bindings alongside the legacy Shibboleth 1.0 profile. Registered by the Hong Kong Access Federation on 2017-01-07 and published into eduGAIN carrying the REFEDS Research & Scholarship entity category and the SIRTFI security-incident-response framework, with a security contact of security@ust.hk. This is institution-operated by definition and is the most substantial machine-readable surface HKUST runs — and it is not a developer API, which is the characteristic shape of a university's real programmable footprint.