Loughborough University SAML 2.0 Identity Provider
Loughborough operates its own SAML 2.0 Identity Provider — SimpleSAMLphp, Loughborough-branded, at idp.lboro.ac.uk — and is registered in the UK Access Management Federation, which feeds eduGAIN. The host CNAMEs to idp.lut.ac.uk (158.125.162.229); lut.ac.uk is Loughborough's OWN second registrable domain, retained from Loughborough University of Technology, and 158.125.0.0/16 is Loughborough's own allocation — so this CNAME is internal, not a tenancy. It is declared in 0-working/university-affiliates.json so the cohort audit's --resolve rule stops reading the university's own IdP as a lut.ac.uk tenant. The federation aggregate is the machine-readable artifact: entityID https://idp.lboro.ac.uk/simplesaml/saml2/idp/metadata.php, mdui:DisplayName "Loughborough University", shibmd:Scope lboro.ac.uk, SingleSignOnService at https://idp.lboro.ac.uk/simplesaml/saml2/idp/SSOService.php (400 without a SAMLRequest, which is the live behaviour). The university also registers a Shibboleth Service Provider, MEGS VLE, at https://megsvle.lboro.ac.uk/shibboleth. Identity federation is institution-operated by definition and is the surface class most often missed for this cohort.