UT Austin Enterprise Identity Provider (SAML 2.0 + OpenID Connect)
UT Austin's Shibboleth identity provider, and the most under-catalogued class of institutional API surface. It publishes SAML 2.0 metadata at /idp/shibboleth (entityID https://enterprise.login.utexas.edu/idp/shibboleth) with HTTP-POST, POST-SimpleSign, HTTP-Redirect and SOAP/ECP bindings, and the same entity resolves signed from the InCommon metadata query service, confirming InCommon/eduGAIN participation. It also serves a full OpenID Connect discovery document at /.well-known/openid-configuration advertising authorization, token, userinfo, JWKS, introspection, revocation, end-session and dynamic client registration endpoints, and ten scopes — six of them institution-defined (utexas_profile, utexas_restrict, utexas_student_extended, memberof, groups, iidasmail). Both documents are anonymously readable and machine-readable; obtaining client credentials is an institutional process, not self-service. Verified live (HTTP 200) on 2026-08-30.