UTokyo Identity Federation (GakuNin SAML 2.0)

The University of Tokyo operates three SAML 2.0 entities registered in GakuNin, Japan's academic access federation — two Shibboleth Identity Providers (the central UTokyo IdP at gidp.adm.u-tokyo.ac.jp, and a research-collaboration IdP for KAGRA run by the Institute for Cosmic Ray Research) and one Service Provider, the STEP10 course registration system. Their metadata is published continuously in the GakuNin aggregate, which is machine-readable SAML metadata and is the institution's largest genuinely-owned machine-readable artifact. It is also the closest thing to a registrar surface the university exposes: STEP10 is course registration, and it appears here as a federation entity rather than as an API.

API entry from apis.yml

apis.yml Raw ↑
aid: university-of-tokyo:gakunin-identity-federation
name: UTokyo Identity Federation (GakuNin SAML 2.0)
x-operator: institution
x-operator-evidence: All three entityIDs are hosted under u-tokyo.ac.jp (gidp.adm., shibbi.pki.itc., step10.adm.s.)
  and each declares Organization Name "The University of Tokyo" / 東京大学. GakuNin is the federation that
  registers them, operated by the National Institute of Informatics; the identity providers themselves
  are the university's own Shibboleth deployments on the university's own hosts.
description: 'The University of Tokyo operates three SAML 2.0 entities registered in GakuNin, Japan''s
  academic access federation — two Shibboleth Identity Providers (the central UTokyo IdP at gidp.adm.u-tokyo.ac.jp,
  and a research-collaboration IdP for KAGRA run by the Institute for Cosmic Ray Research) and one Service
  Provider, the STEP10 course registration system. Their metadata is published continuously in the GakuNin
  aggregate, which is machine-readable SAML metadata and is the institution''s largest genuinely-owned
  machine-readable artifact. It is also the closest thing to a registrar surface the university exposes:
  STEP10 is course registration, and it appears here as a federation entity rather than as an API.'
humanURL: https://www.gakunin.jp/
baseURL: https://gidp.adm.u-tokyo.ac.jp/idp/profile/SAML2/Redirect/SSO
tags:
- Identity Federation
- SAML
- Shibboleth
- Single Sign-On
- GakuNin
- Research Infrastructure
properties:
- type: Authentication
  url: authentication/university-of-tokyo-authentication.yml
- type: Examples
  url: examples/university-of-tokyo-gakunin-saml-metadata.xml
- type: Conformance
  url: conformance/university-of-tokyo-conformance.yml
- type: Documentation
  url: https://www.gakunin.jp/