UMD Shibboleth Identity Provider — SAML 2.0 Metadata
The university's own Shibboleth identity provider, publishing a SAML 2.0 EntityDescriptor as InCommon entity urn:mace:incommon:umd.edu with scope umd.edu, the InCommon and REFEDS Research and Scholarship entity categories, and REFEDS SIRTFI assurance certification. It is a browser-SSO identity provider for people rather than an authorization server for API clients: it issues no tokens to third parties. It is nonetheless institution-operated by definition, machine-readable, and the single most consequential programmable contract UMD publishes.