University College Dublin Identity Provider (Shibboleth / Edugate / eduGAIN)

aid: ucd:identity-federation
name: University College Dublin Identity Provider (Shibboleth / Edugate / eduGAIN)
x-operator: institution
x-operator-evidence: 'entityID https://sso.ucd.ie/idp/shibboleth, on UCD''s own domain, registered in
  eduGAIN (entity 684529) by registration authority http://www.heanet.ie — Edugate, the Irish national
  federation — with shibmd scope ucd.ie and display names "University College Dublin" / "An Coláiste Ollscoile,
  Baile Átha Cliath". SIRTFI asserted. First seen in eduGAIN 2017-04-13. DNS disclosure: sso.ucd.ie CNAMEs
  to dockcl02-prod-lb.heanet.ie, so the IdP is hosted on HEAnet infrastructure — Ireland''s national education
  and research network, which also operates the Edugate federation. HEAnet is a sector body serving UCD,
  not a commercial SaaS platform with a contract of its own, and the entityID, scope, attribute release
  and federation registration are UCD''s, so this is recorded as institution-operated with the hosting
  stated rather than hidden.'
description: 'UCD''s SAML 2.0 Shibboleth Identity Provider, and the institution''s only authentication
  surface it runs itself. It is machine-readable by definition — a federated IdP publishes SAML metadata
  — and is the kind of institutional surface that is almost never catalogued. IMPORTANT probing finding:
  the entityID URL https://sso.ucd.ie/idp/shibboleth returns HTTP 200 with Content-Type application/xml,
  but the body is the STOCK Shibboleth example metadata that ships with the software (entityID "https://idp.exanple.com/idp",
  Scope "example.com", localhost endpoints). A status-code-only check would credit that as UCD''s metadata;
  it is not. The authoritative machine-readable record is the Edugate/eduGAIN aggregate, which is where
  the pointer below goes. No API credential is obtainable here — access is by institutional affiliation,
  not registration.'
humanURL: https://technical.edugain.org/entities
baseURL: https://sso.ucd.ie/idp/shibboleth
tags:
- Identity Federation
- SAML
- Shibboleth
- eduGAIN
- Edugate
- Single Sign-On
properties:
- type: IdentityFederation
  url: https://technical.edugain.org/entities
- type: Authentication
  url: authentication/ucd-authentication.yml
- type: Conformance
  url: conformance/ucd-conformance.yml
- type: x-saml-entity-id
  url: https://sso.ucd.ie/idp/shibboleth