UCLA Shibboleth Identity Provider (InCommon)
UCLA's own Shibboleth identity provider and the most complete machine-readable artifact the university publishes. Registered by InCommon under entityID urn:mace:incommon:ucla.edu, signed with RSA-SHA256, scoped to ucla.edu, serving SAML 1.1 and SAML 2.0 SSO from shb.ais.ucla.edu with a separate attribute authority on port 8443. Asserts the InCommon and REFEDS Research & Scholarship entity categories and a REFEDS SIRTFI assurance certification with a named security contact. Anonymously readable, federated into eduGAIN, and the surface class this cohort is never credited for.