University of California, Berkeley

CalNet Shibboleth Identity Provider (SAML 2.0 Metadata)

UC Berkeley's Shibboleth identity provider, operated by IST-CalNet, publishes a complete unauthenticated SAML 2.0 metadata document describing how any service provider federates with the institution. The EntityDescriptor carries entityID urn:mace:incommon:berkeley.edu, a shibmd:Scope of berkeley.edu, an IDPSSODescriptor supporting Shibboleth 1.0, SAML 1.1 and SAML 2.0 with HTTP-POST, HTTP-Redirect and HTTP-POST-SimpleSign bindings, SingleLogoutService endpoints, and an AttributeAuthorityDescriptor exposing SAML1 and SAML2 SOAP AttributeQuery services. The signing certificate is issued to O=UC Berkeley, OU=IST-Calnet. Berkeley's entry is also served by InCommon's MDQ service as a signed entity, confirming active federation and eduGAIN reach. This is the most substantial machine-readable artifact the institution publishes to an anonymous caller.

GitHub

Documentation

📖
Documentation
https://calnet.berkeley.edu/

Other Resources

🔗
IdentityFederation
https://shib.berkeley.edu/idp/shibboleth
🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/ucb/refs/heads/main/conformance/ucb-education-standards-conformance.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: ucb:calnet-shibboleth
name: CalNet Shibboleth Identity Provider (SAML 2.0 Metadata)
x-operator: institution
description: UC Berkeley's Shibboleth identity provider, operated by IST-CalNet, publishes a complete
  unauthenticated SAML 2.0 metadata document describing how any service provider federates with the institution.
  The EntityDescriptor carries entityID urn:mace:incommon:berkeley.edu, a shibmd:Scope of berkeley.edu,
  an IDPSSODescriptor supporting Shibboleth 1.0, SAML 1.1 and SAML 2.0 with HTTP-POST, HTTP-Redirect and
  HTTP-POST-SimpleSign bindings, SingleLogoutService endpoints, and an AttributeAuthorityDescriptor exposing
  SAML1 and SAML2 SOAP AttributeQuery services. The signing certificate is issued to O=UC Berkeley, OU=IST-Calnet.
  Berkeley's entry is also served by InCommon's MDQ service as a signed entity, confirming active federation
  and eduGAIN reach. This is the most substantial machine-readable artifact the institution publishes
  to an anonymous caller.
humanURL: https://calnet.berkeley.edu/
baseURL: https://shib.berkeley.edu/idp/shibboleth
tags:
- Identity Federation
- SAML
- Shibboleth
- InCommon
- Authentication
properties:
- type: IdentityFederation
  url: https://shib.berkeley.edu/idp/shibboleth
- type: Documentation
  url: https://calnet.berkeley.edu/
- type: Conformance
  url: conformance/ucb-education-standards-conformance.yml