University of Michigan-Ann Arbor

U-M Shibboleth Identity Provider (InCommon)

The University of Michigan's own Shibboleth SAML 2.0 identity provider, and the most unambiguously institution-operated machine-readable surface U-M publishes. GET https://shibboleth.umich.edu/idp/shibboleth returns 200 application/xml (10,923 bytes) — an IDPSSODescriptor with protocolSupportEnumeration urn:oasis:names:tc:SAML:2.0:protocol, signing and encryption key descriptors, SSO and SLO endpoints, and shibmd:Scope entries for umich.edu, annarbor.umich.edu, umd.umich.edu, dearborn.umich.edu and flint.umich.edu. Registered in InCommon and therefore reachable through eduGAIN. U-M ITS Identity and Access Management publishes working SAML and OIDC service-provider integration examples publicly at github.com/umich-iam. This is federation metadata, not a REST API — there is no OpenAPI to write and none has been invented.

GitHub

Documentation

📖
Documentation
https://its.umich.edu/accounts-access/identity-access-management/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/university-of-michigan-ann-arbor/refs/heads/main/authentication/university-of-michigan-ann-arbor-authentication.yml

Code Examples

💻
CodeExamples
https://github.com/umich-iam/SSO-Examples

Other Resources

🔗
GitHubOrganization
https://github.com/umich-iam

API entry from apis.yml

apis.yml Raw ↑ 
aid: university-of-michigan-ann-arbor:shibboleth-idp
name: U-M Shibboleth Identity Provider (InCommon)
x-operator: institution
x-operator-evidence: shibboleth.umich.edu and weblogin.umich.edu are under umich.edu and serve a SAML
  2.0 EntityDescriptor with entityID https://shibboleth.umich.edu/idp/shibboleth. InCommon's metadata
  query service returns the same entity with mdrpi:RegistrationInfo registrationAuthority="https://incommon.org".
description: The University of Michigan's own Shibboleth SAML 2.0 identity provider, and the most unambiguously
  institution-operated machine-readable surface U-M publishes. GET https://shibboleth.umich.edu/idp/shibboleth
  returns 200 application/xml (10,923 bytes) — an IDPSSODescriptor with protocolSupportEnumeration urn:oasis:names:tc:SAML:2.0:protocol,
  signing and encryption key descriptors, SSO and SLO endpoints, and shibmd:Scope entries for umich.edu,
  annarbor.umich.edu, umd.umich.edu, dearborn.umich.edu and flint.umich.edu. Registered in InCommon and
  therefore reachable through eduGAIN. U-M ITS Identity and Access Management publishes working SAML and
  OIDC service-provider integration examples publicly at github.com/umich-iam. This is federation metadata,
  not a REST API — there is no OpenAPI to write and none has been invented.
humanURL: https://its.umich.edu/accounts-access/identity-access-management/
baseURL: https://shibboleth.umich.edu/idp/shibboleth
tags:
- Identity Federation
- SAML
- Shibboleth
- InCommon
- SSO
- Identity
properties:
- type: Documentation
  url: https://its.umich.edu/accounts-access/identity-access-management/
- type: Authentication
  url: authentication/university-of-michigan-ann-arbor-authentication.yml
- type: GitHubOrganization
  url: https://github.com/umich-iam
- type: CodeExamples
  url: https://github.com/umich-iam/SSO-Examples