UCLA Shibboleth Identity Provider (InCommon)

aid: ucla:identity
name: UCLA Shibboleth Identity Provider (InCommon)
description: UCLA's own Shibboleth identity provider and the most complete machine-readable artifact the
  university publishes. Registered by InCommon under entityID urn:mace:incommon:ucla.edu, signed with
  RSA-SHA256, scoped to ucla.edu, serving SAML 1.1 and SAML 2.0 SSO from shb.ais.ucla.edu with a separate
  attribute authority on port 8443. Asserts the InCommon and REFEDS Research & Scholarship entity categories
  and a REFEDS SIRTFI assurance certification with a named security contact. Anonymously readable, federated
  into eduGAIN, and the surface class this cohort is never credited for.
humanURL: https://dts.ucla.edu/
baseURL: https://shb.ais.ucla.edu/shibboleth-idp
tags:
- Identity Federation
- SAML
- Shibboleth
- InCommon
- Single Sign-On
- eduGAIN
properties:
- type: IdentityFederation
  url: identity-federation/ucla-identity-federation.yml
- type: Documentation
  url: https://mdq.incommon.org/entities/urn%3Amace%3Aincommon%3Aucla.edu
- type: Examples
  url: examples/ucla-idp-saml-metadata.xml
- type: Conformance
  url: conformance/ucla-conformance.yml
- type: Authentication
  url: authentication/ucla-authentication.yml
x-operator: institution
x-operator-evidence: entityID under ucla.edu; shibmd:Scope ucla.edu; endpoints on shb.ais.ucla.edu which
  CNAMEs to sso.auth.612c0b3a.prod.r53.aws.it.ucla.edu (UCLA-managed Route 53); OrganizationName "University
  of California-Los Angeles"; contacts at it.ucla.edu and ucla.edu.
x-access: public
x-added: '2026-08-19'