TU Delft SAML 2.0 Identity Provider (NetID)

aid: tu-delft:identity-federation
name: TU Delft SAML 2.0 Identity Provider (NetID)
x-operator: institution
x-operator-evidence: The entityID is https://login.tudelft.nl/sso/saml2/idp/metadata.php, on the institution's
  own registrable domain, and the metadata document is served from that host directly with content-type
  application/samlmetadata+xml. The same entity appears in SURF's live SURFconext IdP aggregate under
  the display names "Technische Universiteit Delft" and "Delft University of Technology".
description: 'TU Delft''s SimpleSAMLphp identity provider — the machine-readable half of NetID. It publishes
  a signed SAML 2.0 EntityDescriptor with an IDPSSODescriptor and is registered in SURFconext, the Dutch
  national research and education identity federation operated by SURF, which in turn publishes into eduGAIN.
  This is the surface class universities operate by definition and almost never get catalogued for: it
  is institution-run, machine-readable, and it is what actually lets a researcher at another institution
  authenticate against a TU Delft service. Note what it is NOT — there is no OpenID Connect discovery
  document (login.tudelft.nl/.well-known/openid-configuration returns 403) and no OAuth 2.0 authorization
  server.'
humanURL: https://www.tudelft.nl/en/it-manuals/netid
baseURL: https://login.tudelft.nl/sso/saml2/idp/metadata.php
tags:
- Identity Federation
- SAML
- SSO
- eduGAIN
- SURFconext
- NetID
properties:
- type: IdentityFederation
  url: authentication/tu-delft-saml-idp-metadata.xml
- type: Metadata
  url: https://login.tudelft.nl/sso/saml2/idp/metadata.php
- type: Authentication
  url: authentication/tu-delft-authentication.yml
- type: Documentation
  url: https://www.tudelft.nl/en/it-manuals/netid
- type: Federation
  url: https://metadata.surfconext.nl/idps-metadata.xml