Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
openapi: 3.2.0
info:
title: McGill University Authentication Service — Shibboleth SAML…
description: The SAML 2.0 identity provider operated by McGill University at shibboleth.mcgill.ca.
version: '2026-08-30'
contact:
name: McGill IT Services
url: https://www.mcgill.ca/it/
x-operator: institution
x-operator-evidence: Host shibboleth.mcgill.ca is under McGill's own registrable domain and resolves to 132.216.98.81 (McGill address space, no vendor CNAME). SAML EntityDescriptor entityID is https://shibboleth.mcgill.ca/idp/shibboleth and shibmd:Scope is mcgill.ca.
x-method: probed
x-source: https://shibboleth.mcgill.ca/idp/shibboleth
servers:
- url: https://shibboleth.mcgill.ca
description: McGill University Authentication Service (Shibboleth IdP)
tags:
- name: Status
description: Identity provider operational status.
paths:
/idp/status:
get:
operationId: getIdpStatus
summary: Identity provider status report
description: Shibboleth's operational status report. Access-restricted by network policy — observed 403 from the public internet on 2026-08-30. Documented because it is a real, declared surface of this deployment and its restriction is the finding.
tags:
- Status
responses:
'200':
description: Plain-text status report (restricted networks only).
content:
text/plain:
schema:
type: string
'403':
description: Access denied from outside permitted networks (observed).
content:
text/html:
schema:
type: string