Shibboleth SAML Identity Provider (UK Access Management Federation)

The University's own Shibboleth Identity Provider, entityID https://shib.manchester.ac.uk/shibboleth, asserting the scope manchester.ac.uk. Its entity descriptor is published as signed, machine-readable SAML metadata through the Jisc UK Access Management Federation MDQ service and onward into eduGAIN — retrieved live on 2026-08-19 (200, 9647 bytes) and saved to this repo. Advertises SAML 2.0, SAML 1.1 and the native Shibboleth authn profile over HTTP-Redirect, HTTP-POST, HTTP-POST-SimpleSign and SOAP artifact resolution. Institution-operated by definition, and the single most under-catalogued programmable asset a university runs. Note that the IdP is not a public developer API: an application cannot obtain an assertion without being registered as a service provider in the federation.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/shibboleth-saml-idp"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑
aid: university-of-manchester:shibboleth-saml-idp
name: Shibboleth SAML Identity Provider (UK Access Management Federation)
description: 'The University''s own Shibboleth Identity Provider, entityID https://shib.manchester.ac.uk/shibboleth,
  asserting the scope manchester.ac.uk. Its entity descriptor is published as signed, machine-readable
  SAML metadata through the Jisc UK Access Management Federation MDQ service and onward into eduGAIN —
  retrieved live on 2026-08-19 (200, 9647 bytes) and saved to this repo. Advertises SAML 2.0, SAML 1.1
  and the native Shibboleth authn profile over HTTP-Redirect, HTTP-POST, HTTP-POST-SimpleSign and SOAP
  artifact resolution. Institution-operated by definition, and the single most under-catalogued programmable
  asset a university runs. Note that the IdP is not a public developer API: an application cannot obtain
  an assertion without being registered as a service provider in the federation.'
humanURL: https://www.itservices.manchester.ac.uk/
baseURL: http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fshib.manchester.ac.uk%2Fshibboleth
tags:
- Identity
- SSO
- SAML
- Shibboleth
- Federation
- eduGAIN
properties:
- type: Authentication
  url: authentication/university-of-manchester-authentication.yml
- type: IdentityFederation
  url: http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fshib.manchester.ac.uk%2Fshibboleth
- type: Documentation
  url: https://www.itservices.manchester.ac.uk/
x-operator: institution
x-operator-evidence: Signed EntityDescriptor from the UK Access Management Federation names OrganizationName
  'The University of Manchester' and shibmd:Scope 'manchester.ac.uk'; shib.manchester.ac.uk resolves to
  130.88.36.102 in the University's own address space.
x-sso-endpoint: https://shib.manchester.ac.uk/shibboleth-idp/profile/SAML2/Redirect/SSO
x-entity-id: https://shib.manchester.ac.uk/shibboleth
x-probe:
  baseURL_status: 200
  note: baseURL is the federation MDQ location because that is the machine-readable artifact an agent
    can actually retrieve — 200, 9647 bytes of signed SAML metadata. The SSO endpoint itself returns 500
    to a bare GET because it requires a SAMLRequest; that is protocol behaviour, not an outage, and it
    is recorded in x-sso-endpoint rather than as a pointer.
  sso_endpoint_bare_get_status: 500
  probed: '2026-08-19'