# UCSF Identity Provider (Shibboleth / InCommon)

**Canonical:** https://apis.io/apis/ucsf/incommon-idp/  
**Provider:** University of California, San Francisco — https://apis.io/providers/ucsf/  
**Base URL:** https://dp.ucsf.edu/idp/shibboleth  
**Documentation:** https://it.ucsf.edu/

UCSF Identity Provider (Shibboleth / InCommon) is one of 8 APIs that [University of California, San Francisco](https://apis.io/providers/ucsf/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity Federation, SAML, Shibboleth, InCommon, and eduGAIN. The published artifact set on APIs.io includes authentication docs.

UCSF's Shibboleth SAML 2.0 identity provider, registered in the InCommon Federation and re-exported to eduGAIN. Signed, versioned, publicly retrievable federation metadata describing SingleSignOnService and SingleLogoutService endpoints at dp.ucsf.edu across HTTP-Redirect, HTTP-POST, HTTP-POST-SimpleSign and the Shibboleth 1.0 AuthnRequest binding, with shibmd:Scope ucsf.edu declarations, an AttributeAuthorityDescriptor and an SPSSODescriptor. UCSF serves the metadata itself at https://dp.ucsf.edu/idp/shibboleth and InCommon redistributes a signed copy. This is the most standards-conformant machine-readable artifact UCSF publishes, and it is the education regime's `saml` and `shibboleth` domain standards in one document. UCSF separately fronts interactive login with Okta at login.ucsf.edu; the federated entity remains dp.ucsf.edu. Verified live 2026-08-19.

## Machine-readable artifacts (5)

- **Authentication** — https://raw.githubusercontent.com/api-evangelist/ucsf/refs/heads/main/authentication/ucsf-authentication.yml
- **Metadata** — https://raw.githubusercontent.com/api-evangelist/ucsf/refs/heads/main/authentication/ucsf-idp-self-published-metadata.xml
- **Metadata** — https://raw.githubusercontent.com/api-evangelist/ucsf/refs/heads/main/authentication/ucsf-incommon-saml-metadata.xml
- **IdentityFederation** — https://mdq.incommon.org/entities/urn%3Amace%3Aincommon%3Aucsf.edu
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/ucsf/refs/heads/main/conformance/ucsf-education-standards-conformance.yml

## Other University of California, San Francisco APIs (7)

- [UCSF Profiles JSON API](https://apis.io/apis/ucsf/profiles-json/)
- [UCSF Industry Documents Library Solr API](https://apis.io/apis/ucsf/industry-documents-solr/)
- [UCSF Industry Documents Library Content API](https://apis.io/apis/ucsf/idl-content-api/)
- [UCSF DataShare (Dryad)](https://apis.io/apis/ucsf/datashare-dryad/)
- [UCSF scholarly output via eScholarship OAI-PMH](https://apis.io/apis/ucsf/escholarship-oai/)
- [UCSF Library Discovery (Ex Libris Primo)](https://apis.io/apis/ucsf/library-discovery/)
- [UCSF Course Catalog (CourseLeaf)](https://apis.io/apis/ucsf/course-catalog/)

## Tags

Identity Federation, SAML, Shibboleth, InCommon, eduGAIN, Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/ucsf/incommon-idp/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/ucsf/.
