Nagoya University Shibboleth Identity Provider (GakuNin)
Institution-operated Shibboleth SAML 2.0 identity provider on the university's own host, published as machine-readable metadata in the GakuNin (学術認証フェデレーション) aggregate. EntityDescriptor ID PI0136JP, entityID https://shib.nagoya-u.ac.jp/idp/shibboleth, shibmd:Scope nagoya-u.ac.jp, mdui:DisplayName "Nagoya University" / "名古屋大学", keywords category:location:chubu and category:organizationType:university, registered with registrationAuthority https://www.gakunin.jp on 2014-04-30. It carries both IDPSSODescriptor and AttributeAuthorityDescriptor roles and three SingleSignOnService endpoints — /idp/profile/Shibboleth/SSO, /idp/profile/SAML2/POST/SSO and /idp/profile/SAML2/Redirect/SSO. The signing certificate is issued by NII Open Domain CA - G8 RSA to CN=shib.nagoya-u.ac.jp, O=Nagoya University. Verified 2026-09-01 by fetching the 5.65 MB GakuNin aggregate and parsing all 650 EntityDescriptors: exactly one is Nagoya's, and no Nagoya-operated service providers are registered. Negative finding worth recording: the eduGAIN technical entity list carries 173 GakuNin entities and none of them is Nagoya's, so this IdP is federated nationally but not exported to eduGAIN. This is a real, machine-readable, institution-run surface and it is the class of university API that is almost never catalogued.