KU Leuven

KU Leuven Shibboleth Identity Provider (SAML 2.0 metadata)

KU Leuven serves its own SAML 2.0 federation metadata from idp.kuleuven.be, which resolves to 134.58.64.219 inside the university's own address space — institution-operated, not a hosted IdP tenant. entityID urn:mace:kuleuven.be:kulassoc:kuleuven.be, registered by the Belnet federation on 2012-03-27, asserting REFEDS SIRTFI and Research & Scholarship entity categories, with Shibboleth mdui and shibmd extensions. This is machine-readable, institution-operated and was absent from the previous profile entirely. It is not consumable by general developers — relying parties must be registered service providers in Belnet or eduGAIN — but it is the authentication contract behind every federated KU Leuven service, including the Shibboleth SP in front of the ICTS pages.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/ku-leuven/refs/heads/main/authentication/ku-leuven-authentication.yml

Other Resources

🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/ku-leuven/refs/heads/main/conformance/ku-leuven-education-standards.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: ku-leuven:identity-federation
x-operator: institution
x-surface-class: IdentityFederation
x-surface: ku-leuven-idp
name: KU Leuven Shibboleth Identity Provider (SAML 2.0 metadata)
description: KU Leuven serves its own SAML 2.0 federation metadata from idp.kuleuven.be, which resolves
  to 134.58.64.219 inside the university's own address space — institution-operated, not a hosted IdP
  tenant. entityID urn:mace:kuleuven.be:kulassoc:kuleuven.be, registered by the Belnet federation on 2012-03-27,
  asserting REFEDS SIRTFI and Research & Scholarship entity categories, with Shibboleth mdui and shibmd
  extensions. This is machine-readable, institution-operated and was absent from the previous profile
  entirely. It is not consumable by general developers — relying parties must be registered service providers
  in Belnet or eduGAIN — but it is the authentication contract behind every federated KU Leuven service,
  including the Shibboleth SP in front of the ICTS pages.
humanURL: https://idp.kuleuven.be/idp/shibboleth
baseURL: https://idp.kuleuven.be/idp/
tags:
- Identity Federation
- SAML
- Shibboleth
- Belnet
- eduGAIN
- Authentication
- Education
properties:
- type: Authentication
  url: authentication/ku-leuven-authentication.yml
- type: Conformance
  url: conformance/ku-leuven-education-standards.yml