University of Southampton

Shibboleth SAML Identity Provider (UK Access Management Federation)

The University's own Shibboleth 3.x Identity Provider, entityID https://webauth.soton.ac.uk/shibboleth, asserting shibmd:Scope soton.ac.uk. Its entity descriptor is published both by the IdP itself and, signed, through the Jisc UK Access Management Federation MDQ service and onward into eduGAIN — retrieved live on 2026-08-30 (200, application/xml, 16951 bytes direct; 200, application/samlmetadata+xml, 19396 bytes signed) and saved to this repo. Carries IDPSSODescriptor, AttributeAuthorityDescriptor and SPSSODescriptor roles, advertising SAML 2.0, SAML 1.1 and the native urn:mace:shibboleth:1.0 profile over HTTP-Redirect, HTTP-POST and HTTP-POST-SimpleSign SSO and SLO bindings, with SOAP AttributeQuery and ArtifactResolution on port 8443. Institution-operated by definition and the most under-catalogued programmable asset a university runs. Note this is not a public developer API: an application cannot obtain an assertion without first being registered as a service provider in the federation, so there is no self-service path.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/university-of-southampton/refs/heads/main/authentication/university-of-southampton-authentication.yml

Other Resources

🔗
IdentityFederation
http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fwebauth.soton.ac.uk%2Fshibboleth
🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/university-of-southampton/refs/heads/main/conformance/university-of-southampton-conformance.yml
🔗
Scopes
https://raw.githubusercontent.com/api-evangelist/university-of-southampton/refs/heads/main/scopes/university-of-southampton-scopes.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/shibboleth-saml-idp"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: university-of-southampton:shibboleth-saml-idp
name: Shibboleth SAML Identity Provider (UK Access Management Federation)
description: 'The University''s own Shibboleth 3.x Identity Provider, entityID https://webauth.soton.ac.uk/shibboleth,
  asserting shibmd:Scope soton.ac.uk. Its entity descriptor is published both by the IdP itself and, signed,
  through the Jisc UK Access Management Federation MDQ service and onward into eduGAIN — retrieved live
  on 2026-08-30 (200, application/xml, 16951 bytes direct; 200, application/samlmetadata+xml, 19396 bytes
  signed) and saved to this repo. Carries IDPSSODescriptor, AttributeAuthorityDescriptor and SPSSODescriptor
  roles, advertising SAML 2.0, SAML 1.1 and the native urn:mace:shibboleth:1.0 profile over HTTP-Redirect,
  HTTP-POST and HTTP-POST-SimpleSign SSO and SLO bindings, with SOAP AttributeQuery and ArtifactResolution
  on port 8443. Institution-operated by definition and the most under-catalogued programmable asset a
  university runs. Note this is not a public developer API: an application cannot obtain an assertion
  without first being registered as a service provider in the federation, so there is no self-service
  path.'
humanURL: https://www.southampton.ac.uk/isolutions/
baseURL: http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fwebauth.soton.ac.uk%2Fshibboleth
tags:
- Identity
- SSO
- SAML
- Shibboleth
- Federation
- eduGAIN
properties:
- type: Authentication
  url: authentication/university-of-southampton-authentication.yml
- type: IdentityFederation
  url: http://mdq.ukfederation.org.uk/entities/https%3A%2F%2Fwebauth.soton.ac.uk%2Fshibboleth
- type: Conformance
  url: conformance/university-of-southampton-conformance.yml
- type: Scopes
  url: scopes/university-of-southampton-scopes.yml
x-entity-id: https://webauth.soton.ac.uk/shibboleth
x-sso-endpoint: https://webauth.soton.ac.uk/idp/profile/SAML2/Redirect/SSO
x-operator: institution
x-operator-evidence: Metadata self-declares mdui:DisplayName and OrganizationName 'University of Southampton',
  mdui:Description 'Shibboleth 3.x IdP for University of Southampton', and shibmd:Scope 'soton.ac.uk'.
  webauth.soton.ac.uk resolves to 152.78.118.139 in the University's own address space. The signed federation
  copy corroborates all of it.
x-probe:
  probed: '2026-08-30'
  baseURL_status: 200
  idp_self_published_status: 200
  status_handler_status: 403
  note: The /idp/status handler is access-controlled (403), which is correct for a production IdP and
    is not an outage.