Universidad de los Andes Identity Provider (Microsoft Entra ID)
The university's own SAML 2.0 and OpenID Connect identity provider, hosted as Microsoft Entra ID tenant fabd047c-ff48-492a-8bbb-8f98b9fb9cca. A federation is shared by definition, but the IdP behind it is the institution's, and this is among the strongest institution-operated machine-readable surfaces the university has. Tenant ownership was verified independently of any name match: getuserrealm.srf for user@uniandes.edu.co returns DomainName uniandes.edu.co, NameSpaceType Managed and FederationBrandName "Universidad de los Andes". SAML metadata (HTTP 200, 28KB) carries entityID https://sts.windows.net/fabd047c-ff48-492a-8bbb-8f98b9fb9cca/ with HTTP-Redirect and HTTP-POST SSO bindings; OIDC discovery resolves by the university's own domain name. Observed in production use — the Brightspace LMS redirects to this tenant's /saml2 endpoint. No Shibboleth IdP exists and uniandes.edu.co is not in the eduGAIN entity list; this tenant is the federation.