Microsoft Entra ID tenant federation for um.edu.mo
The identity broker in front of UM's own IdP. Sign-in to data.um.edu.mo, UMMoodle and the GenAI chat starts at a Microsoft sign-in page and is redirected to websso.um.edu.mo, so the Entra tenant is a genuine institutional fact — the tenant is UM's — while the discovery documents and the federation metadata endpoint belong to Microsoft and are shared by every tenant. Recorded as a relationship, not as a contract.