University of Sydney

Shibboleth Identity Provider (SAML 2.0 metadata)

The University of Sydney's federation entity serves signed SAML 2.0 metadata from federation.sydney.edu.au: entityID https://federation.sydney.edu.au/idp/shibboleth, an IDPSSODescriptor advertising urn:oasis:names:tc:SAML:2.0:protocol, the Shibboleth metadata extension shibmd:Scope=sydney.edu.au, an idp-signing.crt key the institution issued itself in 2018, and Redirect, POST and POST-SimpleSign SingleSignOnService bindings. The entity appears in the Australian Access Federation aggregate as "The University of Sydney" and in the eduGAIN interfederation aggregate. Operator is TENANT, not institution, and the DNS says so: federation.sydney.edu.au CNAMEs to d007b274d34f1a4319cafeaf6941cfa7.idp-cname.aaf.edu.au and answers from CloudFront + an AWS ALB running Jetty 12.1.0 under an Amazon-issued certificate — the AAF Rapid IdP hosted identity service, not university-run infrastructure. The federation membership, the entityID, the scope and the signing key are the university's; the running software is AAF's. This is still the only openly machine-readable artifact served under a University of Sydney hostname, and it is not consumable by third-party developers — relying parties must be registered service providers in AAF or eduGAIN.

Documentation GitHub

Documentation

📖

Authentication

https://raw.githubusercontent.com/api-evangelist/university-of-sydney/refs/heads/main/authentication/university-of-sydney-authentication.yml

Other Resources

🔗

Conformance

https://raw.githubusercontent.com/api-evangelist/university-of-sydney/refs/heads/main/conformance/university-of-sydney-education-standards.yml

🔗

APIsJSON

https://raw.githubusercontent.com/api-evangelist/university-of-sydney/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/identity-federation"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

aid: university-of-sydney:identity-federation
name: Shibboleth Identity Provider (SAML 2.0 metadata)
x-operator: tenant
x-vendor: Australian Access Federation (Rapid IdP)
x-surface-class: IdentityFederation
description: 'The University of Sydney''s federation entity serves signed SAML 2.0 metadata from federation.sydney.edu.au:
  entityID https://federation.sydney.edu.au/idp/shibboleth, an IDPSSODescriptor advertising urn:oasis:names:tc:SAML:2.0:protocol,
  the Shibboleth metadata extension shibmd:Scope=sydney.edu.au, an idp-signing.crt key the institution
  issued itself in 2018, and Redirect, POST and POST-SimpleSign SingleSignOnService bindings. The entity
  appears in the Australian Access Federation aggregate as "The University of Sydney" and in the eduGAIN
  interfederation aggregate. Operator is TENANT, not institution, and the DNS says so: federation.sydney.edu.au
  CNAMEs to d007b274d34f1a4319cafeaf6941cfa7.idp-cname.aaf.edu.au and answers from CloudFront + an AWS
  ALB running Jetty 12.1.0 under an Amazon-issued certificate — the AAF Rapid IdP hosted identity service,
  not university-run infrastructure. The federation membership, the entityID, the scope and the signing
  key are the university''s; the running software is AAF''s. This is still the only openly machine-readable
  artifact served under a University of Sydney hostname, and it is not consumable by third-party developers
  — relying parties must be registered service providers in AAF or eduGAIN.'
humanURL: https://federation.sydney.edu.au/idp/shibboleth
baseURL: https://federation.sydney.edu.au/idp/
tags:
- Identity Federation
- SAML
- Shibboleth
- eduGAIN
- AAF
- Rapid IdP
- Tenant
- Authentication
properties:
- type: Authentication
  url: authentication/university-of-sydney-authentication.yml
- type: Conformance
  url: conformance/university-of-sydney-education-standards.yml