Autonomous University of Barcelona

UAB Single Sign-On — SAML 2.0 Identity Provider

UAB self-publishes a complete SAML 2.0 IdP EntityDescriptor at https://sso.uab.cat/cas/idp/metadata (HTTP 200, text/xml), entityID https://sso.uab.cat/cas/idp, shibmd:Scope sso.uab.cat. It declares separate signing and encryption key descriptors and four SSO bindings — HTTP-POST, HTTP-POST-SimpleSign, HTTP-Redirect and SOAP (ECP) — plus HTTP-POST and HTTP-Redirect single logout. This is the single most complete machine-readable contract in this profile and, unlike the equivalent surface at most institutions in this cohort, it is served from the institution's own infrastructure rather than a managed identity vendor's.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/uab/refs/heads/main/authentication/uab-authentication.yml

Other Resources

🔗
IdentityFederation
https://sso.uab.cat/cas/idp/metadata
🔗
Metadata
https://raw.githubusercontent.com/api-evangelist/uab/refs/heads/main/identity-federation/uab-sso-cas-saml2-idp-metadata.xml
🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/uab/refs/heads/main/conformance/uab-conformance.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/sso-saml-idp"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: uab:sso-saml-idp
name: UAB Single Sign-On — SAML 2.0 Identity Provider
description: UAB self-publishes a complete SAML 2.0 IdP EntityDescriptor at https://sso.uab.cat/cas/idp/metadata
  (HTTP 200, text/xml), entityID https://sso.uab.cat/cas/idp, shibmd:Scope sso.uab.cat. It declares separate
  signing and encryption key descriptors and four SSO bindings — HTTP-POST, HTTP-POST-SimpleSign, HTTP-Redirect
  and SOAP (ECP) — plus HTTP-POST and HTTP-Redirect single logout. This is the single most complete machine-readable
  contract in this profile and, unlike the equivalent surface at most institutions in this cohort, it
  is served from the institution's own infrastructure rather than a managed identity vendor's.
humanURL: https://sso.uab.cat/
baseURL: https://sso.uab.cat/cas/idp/metadata
tags:
- Identity Federation
- SAML
- Shibboleth
- Single Sign-On
- Apereo CAS
properties:
- type: IdentityFederation
  url: https://sso.uab.cat/cas/idp/metadata
- type: Metadata
  url: identity-federation/uab-sso-cas-saml2-idp-metadata.xml
- type: Authentication
  url: authentication/uab-authentication.yml
- type: Conformance
  url: conformance/uab-conformance.yml
x-operator: institution
x-operator-basis: sso.uab.cat resolves to 158.109.121.62, RIPE netname XIUAB — UAB's own address space,
  no CNAME. Server header Apache/2.4.37 (Red Hat Enterprise Linux) with X-Application-Context cas-1, i.e.
  an Apereo CAS instance UAB operates itself. Compare Monash, whose Monash-branded IdP terminates on Amazon
  address space behind AAF's managed Rapid IdP; UAB's does not.