University of Manchester

Shibboleth SAML Identity Provider (UK Access Management Federation)

The University's own Shibboleth Identity Provider, entityID https://shib.manchester.ac.uk/shibboleth, asserting the scope manchester.ac.uk. Its entity descriptor is published as signed, machine-readable SAML metadata through the Jisc UK Access Management Federation MDQ service and onward into eduGAIN — retrieved live on 2026-08-19 (200, 9647 bytes) and saved to this repo. Advertises SAML 2.0, SAML 1.1 and the native Shibboleth authn profile over HTTP-Redirect, HTTP-POST, HTTP-POST-SimpleSign and SOAP artifact resolution. Institution-operated by definition, and the single most under-catalogued programmable asset a university runs. Note that the IdP is not a public developer API: an application cannot obtain an assertion without being registered as a service provider in the federation.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/university-of-manchester/refs/heads/main/authentication/university-of-manchester-authentication.yml
📖
Documentation
https://www.itservices.manchester.ac.uk/

Other Resources

🔗
IdentityFederation
http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fshib.manchester.ac.uk%2Fshibboleth

API entry from apis.yml

apis.yml Raw ↑ 
aid: university-of-manchester:shibboleth-saml-idp
name: Shibboleth SAML Identity Provider (UK Access Management Federation)
description: 'The University''s own Shibboleth Identity Provider, entityID https://shib.manchester.ac.uk/shibboleth,
  asserting the scope manchester.ac.uk. Its entity descriptor is published as signed, machine-readable
  SAML metadata through the Jisc UK Access Management Federation MDQ service and onward into eduGAIN —
  retrieved live on 2026-08-19 (200, 9647 bytes) and saved to this repo. Advertises SAML 2.0, SAML 1.1
  and the native Shibboleth authn profile over HTTP-Redirect, HTTP-POST, HTTP-POST-SimpleSign and SOAP
  artifact resolution. Institution-operated by definition, and the single most under-catalogued programmable
  asset a university runs. Note that the IdP is not a public developer API: an application cannot obtain
  an assertion without being registered as a service provider in the federation.'
humanURL: https://www.itservices.manchester.ac.uk/
baseURL: http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fshib.manchester.ac.uk%2Fshibboleth
tags:
- Identity
- SSO
- SAML
- Shibboleth
- Federation
- eduGAIN
properties:
- type: Authentication
  url: authentication/university-of-manchester-authentication.yml
- type: IdentityFederation
  url: http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fshib.manchester.ac.uk%2Fshibboleth
- type: Documentation
  url: https://www.itservices.manchester.ac.uk/
x-operator: institution
x-operator-evidence: Signed EntityDescriptor from the UK Access Management Federation names OrganizationName
  'The University of Manchester' and shibmd:Scope 'manchester.ac.uk'; shib.manchester.ac.uk resolves to
  130.88.36.102 in the University's own address space.
x-sso-endpoint: https://shib.manchester.ac.uk/shibboleth-idp/profile/SAML2/Redirect/SSO
x-entity-id: https://shib.manchester.ac.uk/shibboleth
x-probe:
  baseURL_status: 200
  note: baseURL is the federation MDQ location because that is the machine-readable artifact an agent
    can actually retrieve — 200, 9647 bytes of signed SAML metadata. The SSO endpoint itself returns 500
    to a bare GET because it requires a SAMLRequest; that is protocol behaviour, not an outage, and it
    is recorded in x-sso-endpoint rather than as a pointer.
  sso_endpoint_bare_get_status: 500
  probed: '2026-08-19'