University of Oxford Shibboleth Identity Provider

A SAML 2.0 identity provider serving live machine-readable metadata, with Redirect/SSO, POST/SSO, POST-SimpleSign/SSO, POST/SLO and SOAP/Redirect/SLO bindings and a signing certificate rotated 2026-05-15. Oxford is registered in the UK Access Management Federation and eduGAIN with one production and two test identity providers, plus 35 service providers spanning central IT, departments and colleges — All Souls, Worcester, Lincoln, Keble, St Hilda's, Brasenose, Exeter, St John's, Continuing Education, NDORMS, Structural Biology, Statistics and the Text Archive among them. Caveat recorded rather than hidden: the document served at the metadata URL is the Shibboleth software's built-in self-description and still carries the product's default placeholder display name and an internal node entityID; the federation registration, not that document, is the authoritative identity.

API entry from apis.yml

apis.yml Raw ↑
aid: university-of-oxford:shibboleth-idp
name: University of Oxford Shibboleth Identity Provider
x-operator: institution
x-operator-evidence: Registered in eduGAIN as https://registry.shibboleth.ox.ac.uk/idp, IDPSSODescriptor,
  display name "University of Oxford", registration authority http://ukfederation.org.uk. An identity
  provider is institution-operated by definition — it asserts the institution's own identities.
description: 'A SAML 2.0 identity provider serving live machine-readable metadata, with Redirect/SSO,
  POST/SSO, POST-SimpleSign/SSO, POST/SLO and SOAP/Redirect/SLO bindings and a signing certificate rotated
  2026-05-15. Oxford is registered in the UK Access Management Federation and eduGAIN with one production
  and two test identity providers, plus 35 service providers spanning central IT, departments and colleges
  — All Souls, Worcester, Lincoln, Keble, St Hilda''s, Brasenose, Exeter, St John''s, Continuing Education,
  NDORMS, Structural Biology, Statistics and the Text Archive among them. Caveat recorded rather than
  hidden: the document served at the metadata URL is the Shibboleth software''s built-in self-description
  and still carries the product''s default placeholder display name and an internal node entityID; the
  federation registration, not that document, is the authoritative identity.'
humanURL: https://technical.edugain.org/entities
baseURL: https://idp.shibboleth.ox.ac.uk/idp
tags:
- Identity Federation
- SAML
- Shibboleth
- eduGAIN
properties:
- type: Metadata
  url: https://idp.shibboleth.ox.ac.uk/idp/shibboleth
- type: Conformance
  url: conformance/university-of-oxford-domain-standards.yml