Imperial College London

Imperial Shibboleth Identity Provider (SAML 2.0)

Imperial's own Shibboleth IdP, and the one unambiguously institution-operated machine-readable contract it publishes. The metadata document at /idp/shibboleth is a live 12.5KB SAML 2.0 EntityDescriptor with entityID https://shibboleth.imperial.ac.uk/shibboleth, one IDPSSODescriptor and one AttributeAuthorityDescriptor, SSO and SLO endpoints for the SAML2 Redirect, POST and POST-SimpleSign bindings plus legacy Shibboleth SSO, SOAP ArtifactResolution and AttributeQuery on :8443, and a `shibmd:Scope` of imperial.ac.uk. The entityID is registered in the UK Access Management Federation aggregate. This is not a REST API and is not self-service — consuming it means being a federation member — but it is a published, versioned, machine-readable interface contract that Imperial itself operates.

GitHub

Documentation

📖
Documentation
https://www.ukfederation.org.uk/

Other Resources

🔗
x-saml-metadata
https://shibboleth.imperial.ac.uk/idp/shibboleth
🔗
Website
https://www.imperial.ac.uk/admin-services/ict/
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/imperial-college-london/refs/heads/main/apis.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: imperial-college-london:shibboleth-idp
name: Imperial Shibboleth Identity Provider (SAML 2.0)
x-operator: institution
x-operator-evidence: shibboleth.imperial.ac.uk resolves to shibboleth.gslb21.ic.ac.uk -> 146.179.42.66,
  Imperial's own load-balanced infrastructure — not a vendor CNAME. The metadata document is served from
  that host and scopes itself to imperial.ac.uk.
description: Imperial's own Shibboleth IdP, and the one unambiguously institution-operated machine-readable
  contract it publishes. The metadata document at /idp/shibboleth is a live 12.5KB SAML 2.0 EntityDescriptor
  with entityID https://shibboleth.imperial.ac.uk/shibboleth, one IDPSSODescriptor and one AttributeAuthorityDescriptor,
  SSO and SLO endpoints for the SAML2 Redirect, POST and POST-SimpleSign bindings plus legacy Shibboleth
  SSO, SOAP ArtifactResolution and AttributeQuery on :8443, and a `shibmd:Scope` of imperial.ac.uk. The
  entityID is registered in the UK Access Management Federation aggregate. This is not a REST API and
  is not self-service — consuming it means being a federation member — but it is a published, versioned,
  machine-readable interface contract that Imperial itself operates.
humanURL: https://www.imperial.ac.uk/admin-services/ict/
tags:
- Identity
- Identity Federation
- SSO
- SAML
- Shibboleth
properties:
- type: x-saml-metadata
  url: https://shibboleth.imperial.ac.uk/idp/shibboleth
- type: Documentation
  url: https://www.ukfederation.org.uk/
- type: Website
  url: https://www.imperial.ac.uk/admin-services/ict/