University of Antwerp Identity Provider (Shibboleth / SAML 2.0)
The university's federated login, published as a SAML 2.0 EntityDescriptor at https://idpx.ua.ac.be/idp/shibboleth (HTTP 200, application/xml, 16,305 bytes). Declares four SingleSignOnService bindings, eight KeyDescriptors, a SAML 1.1/2.0 attribute authority over SOAP, shibmd:Scope ua.ac.be, OrganizationName "Universiteit Antwerpen" and mdui:IPHint values 143.169.0.0/16, 143.129.0.0/16 and 146.175.0.0/16. Registered by the Belnet R&E Federation on 2012-03-27 and interfederated into eduGAIN. This is the most complete machine-readable contract the institution publishes and it is genuinely its own. The entityID still carries the pre-2011 domain ua.ac.be while every service endpoint points at idpx.uantwerpen.be — a legacy entityID is a permanent name, not a stale pointer, and a host-matching audit will miss this surface because of it. One defect observed: the standalone document is not well-formed as served, using the mdrpi: prefix without declaring it.