UCSB Identity Federation (Passport / InCommon)
UCSB operates its own Shibboleth identity provider, "Passport", at passport.identity.ucsb.edu, registered in InCommon as entityID urn:mace:incommon:ucsb.edu. Its SAML 2.0 metadata is machine-readable and retrievable without credentials from the InCommon MDQ service — HTTP 200, application/samlmetadata+xml, XML-signed, probed 2026-08-30. This is the one institution-operated machine-readable surface UCSB has that is not an OpenAPI, and it is the kind of surface this catalog has historically missed for universities entirely.