Monash University Identity Provider (AAF Rapid IdP tenant)

aid: monash:idp
name: Monash University Identity Provider (AAF Rapid IdP tenant)
description: Monash's federated login, published as a signed SAML 2.0 EntityDescriptor at https://idp.monash.edu.au/idp/shibboleth
  (HTTP 200, application/xml). Declares HTTP-POST and HTTP-Redirect SSO bindings, separate signing and
  encryption key descriptors, a shibmd:Scope of monash.edu.au, and release of auEduPersonSharedToken,
  email and displayName; the entity is registered in the Australian Access Federation production aggregate
  and flows into eduGAIN. It is the most complete machine-readable contract in this profile and it is
  a tenant surface, not a Monash-engineered one — the metadata is captured here, but the contract scores
  against AAF.
humanURL: https://idp.monash.edu.au/idp/shibboleth
baseURL: https://idp.monash.edu.au/idp/
tags:
- Identity Federation
- SAML
- Shibboleth
- Single Sign-On
properties:
- type: IdentityFederation
  url: https://idp.monash.edu.au/idp/shibboleth
- type: Metadata
  url: identity-federation/monash-idp-saml-metadata.xml
- type: Conformance
  url: conformance/monash-conformance.yml
x-operator: tenant
x-operator-basis: Monash hostname, AAF infrastructure. idp.monash.edu.au CNAMEs to c2d8eee96e6328c487bda2d5476f7050.idp-cname.aaf.edu.au
  and resolves to 18.239.183.0/24, which whois attributes to Amazon Technologies Inc. (AT-88-Z). That
  CNAME pattern is AAF's Rapid IdP, a fully AAF-managed SaaS identity provider; idp.unimelb.edu.au matches
  it, while self-hosting institutions such as UQ resolve into their own address space. The TLS certificate
  is Amazon-issued rather than the Sectigo OV certificates Monash procures for hosts it runs itself. Monash's
  identity data, attribute release and scope; AAF's engineering.