Penn State Identity Federation (InCommon / Shibboleth)
Penn State operates its own Shibboleth identity provider and registers it in the InCommon federation under entityID urn:mace:incommon:psu.edu. Penn State SERVES ITS OWN SAML metadata at https://as1.fim.psu.edu/idp/shibboleth (200 application/xml, 9,398 bytes) — IDPSSODescriptor plus SPSSODescriptor, shibmd:Scope psu.edu, OrganizationName "The Pennsylvania State University", speaking Shibboleth 1.0, SAML 1.1 and SAML 2.0 over HTTP-Redirect, POST and SOAP ECP. InCommon republishes that same document at mdq.incommon.org; the republication is the federation's, the IdP is Penn State's. This is the machine-readable surface behind every WebAccess-gated Penn State service, and it is the reason most of the institution's REST estate is unreadable from outside.