# University of Tübingen Shibboleth Identity Provider (DFN-AAI / eduGAIN)

**Canonical:** https://apis.io/apis/university-of-tubingen/identity-federation/  
**Provider:** University of Tübingen — https://apis.io/providers/university-of-tubingen/  
**Base URL:** https://mdq.aai.dfn.de/entities/https%3A%2F%2Fidp.uni-tuebingen.de%2Fshibboleth  
**Documentation:** https://uni-tuebingen.de/en/einrichtungen/zentrum-fuer-datenverarbeitung/dienstleistungen/digitale-identitaet/single-sign-on/

University of Tübingen Shibboleth Identity Provider (DFN-AAI / eduGAIN) is one of 8 APIs that [University of Tübingen](https://apis.io/providers/university-of-tubingen/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity Federation, SAML, Shibboleth, DFN-AAI, and eduGAIN. The published artifact set on APIs.io includes API documentation and authentication docs.

Institution-operated Shibboleth SAML 2.0 identity provider, registered in DFN-AAI — the German national research and education identity federation — and published as machine-readable metadata through the federation's MDQ service. EntityID https://idp.uni-tuebingen.de/shibboleth, DisplayName "Universität Tübingen" / "University of Tübingen", shibmd:Scope uni-tuebingen.de, registered 2009-05-26 under registrationAuthority https://www.aai.dfn.de and exported to eduGAIN. SSO endpoints: /idp/profile/SAML2/POST/SSO, /idp/profile/SAML2/Redirect/SSO and /idp/profile/SAML2/SOAP/ECP, plus a SAML 2.0 AttributeAuthorityDescriptor with a SOAP AttributeService. NameID formats persistent and transient. The signing certificate is issued to CN=idp.uni-tuebingen.de, OU=ZDV, O=Universitaet Tuebingen — the university's own computing centre holds the key. Entity attributes assert REFEDS Research & Scholarship support, SIRTFI and SIRTFI2 assurance certification, and membership of bwIDM, the Baden-Württemberg federated identity programme (independently corroborated by the bwIDM link in FDAT's own footer). A federation is shared by definition; the IdP behind it is entirely the institution's, and this is the strongest institution-operated machine surface the university has. RETRIEVAL WARNING: the DFN MDQ service answers 200 with a signed but EMPTY EntitiesDescriptor for an unregistered entityID — the plausible-looking https://idp.uni-tuebingen.de/idp/shibboleth is exactly such a false 200.

## Machine-readable artifacts (3)

- **Documentation** — https://www.aai.dfn.de/en/join/
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/university-of-tubingen/refs/heads/main/conformance/university-of-tubingen-conformance.yml
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/university-of-tubingen/refs/heads/main/authentication/university-of-tubingen-authentication.yml

## Other University of Tübingen APIs (7)

- [FDAT Repository REST API](https://apis.io/apis/university-of-tubingen/fdat-rest/)
- [FDAT Repository OAI-PMH](https://apis.io/apis/university-of-tubingen/fdat-oai/)
- [TOBIAS-lib / Publikationssystem UB Tübingen OAI-PMH](https://apis.io/apis/university-of-tubingen/tobias-lib-oai/)
- [DataCite membership and DOI registration (member AWZY)](https://apis.io/apis/university-of-tubingen/datacite-membership/)
- [ROR registration (Research Organization Registry)](https://apis.io/apis/university-of-tubingen/ror-registration/)
- [TueFind subject discovery services (ixTheo, RelBib, KrimDok)](https://apis.io/apis/university-of-tubingen/tuefind-discovery/)
- [UB Tübingen library catalogue (IBS|BW consortium tenant)](https://apis.io/apis/university-of-tubingen/library-discovery/)

## Tags

Identity Federation, SAML, Shibboleth, DFN-AAI, eduGAIN, bwIDM, Single Sign-On

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/university-of-tubingen/identity-federation/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/university-of-tubingen/.