# PennKey Identity Provider — SAML 2.0 / Shibboleth Metadata

**Canonical:** https://apis.io/apis/university-of-pennsylvania/pennkey-identity-provider/  
**Provider:** University of Pennsylvania — https://apis.io/providers/university-of-pennsylvania/  
**Base URL:** https://idp.pennkey.upenn.edu/idp  
**Documentation:** https://idp.pennkey.upenn.edu/idp/shibboleth

PennKey Identity Provider — SAML 2.0 / Shibboleth Metadata is one of 10 APIs that [University of Pennsylvania](https://apis.io/providers/university-of-pennsylvania/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity Federation, SAML, Shibboleth, InCommon, and Authentication.

Penn's Shibboleth identity provider publishes a signed SAML 2.0 EntityDescriptor at a well-known location (HTTP 200, application/xml, entityID https://idp.pennkey.upenn.edu/idp/shibboleth), carrying the Shibboleth metadata extension namespace and an embedded X.509 signing certificate. The same entity resolves live through InCommon MDQ as application/samlmetadata+xml, which makes federation membership verifiable rather than self-asserted. This is machine-readable infrastructure the institution itself operates, and it is the strongest institution-owned surface in this profile.

## Machine-readable artifacts (5)

- **x-saml-metadata** — https://idp.pennkey.upenn.edu/idp/shibboleth
- **x-federation-entry** — https://mdq.incommon.org/entities/https%3A%2F%2Fidp.pennkey.upenn.edu%2Fidp%2Fshibboleth
- **x-conformance** — https://raw.githubusercontent.com/api-evangelist/university-of-pennsylvania/refs/heads/main/conformance/university-of-pennsylvania-conformance.yml
- **x-authentication** — https://raw.githubusercontent.com/api-evangelist/university-of-pennsylvania/refs/heads/main/authentication/university-of-pennsylvania-authentication.yml
- **x-lifecycle** — https://raw.githubusercontent.com/api-evangelist/university-of-pennsylvania/refs/heads/main/lifecycle/university-of-pennsylvania-lifecycle.yml

## Other University of Pennsylvania APIs (9)

- [Penn Courses API (Penn Course Alert / Plan / Review / Degree Plan)](https://apis.io/apis/university-of-pennsylvania/penn-courses/)
- [Penn Clubs API](https://apis.io/apis/university-of-pennsylvania/penn-clubs/)
- [Penn SDK (Python)](https://apis.io/apis/university-of-pennsylvania/penn-sdk-python/)
- [Penn SDK (JavaScript / Node)](https://apis.io/apis/university-of-pennsylvania/penn-sdk-js/)
- [ScholarlyCommons at Penn — OAI-PMH](https://apis.io/apis/university-of-pennsylvania/scholarlycommons-oai-pmh/)
- [ScholarlyCommons at Penn — DSpace REST API](https://apis.io/apis/university-of-pennsylvania/scholarlycommons-rest/)
- [Penn Libraries Franklin Catalog — JSON API](https://apis.io/apis/university-of-pennsylvania/franklin-catalog/)
- [Colenda Digital Repository — Search JSON](https://apis.io/apis/university-of-pennsylvania/colenda/)
- [OPenn — Open Manuscript Data](https://apis.io/apis/university-of-pennsylvania/openn/)

## Tags

Identity Federation, SAML, Shibboleth, InCommon, Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/university-of-pennsylvania/pennkey-identity-provider/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/university-of-pennsylvania/.