UW-Madison Identity Provider (Shibboleth)

Institution-operated Shibboleth IdP at login.wisc.edu, machine-readable on two protocols and almost never catalogued for a university. https://login.wisc.edu/idp/shibboleth returns SAML 2.0 metadata (entityID https://login.wisc.edu/idp/shibboleth, shibmd:Scope wisc.edu, signing and encryption keys), and https://login.wisc.edu/.well-known/openid-configuration returns a full OIDC discovery document. This governs campus SSO and the vendor tenants — it is NOT the API gateway, which uses OAuth 2.0 client credentials and publishes no discovery document.

API entry from apis.yml

apis.yml Raw ↑
aid: university-of-wisconsin-madison:identity-federation
name: UW-Madison Identity Provider (Shibboleth)
x-operator: institution
description: Institution-operated Shibboleth IdP at login.wisc.edu, machine-readable on two protocols
  and almost never catalogued for a university. https://login.wisc.edu/idp/shibboleth returns SAML 2.0
  metadata (entityID https://login.wisc.edu/idp/shibboleth, shibmd:Scope wisc.edu, signing and encryption
  keys), and https://login.wisc.edu/.well-known/openid-configuration returns a full OIDC discovery document.
  This governs campus SSO and the vendor tenants — it is NOT the API gateway, which uses OAuth 2.0 client
  credentials and publishes no discovery document.
humanURL: https://login.wisc.edu/
baseURL: https://login.wisc.edu
tags:
- Identity Federation
- SAML
- Shibboleth
- OpenID Connect
- Single Sign-On
properties:
- type: SAMLMetadata
  url: https://login.wisc.edu/idp/shibboleth
- type: OpenIDConnectDiscovery
  url: https://login.wisc.edu/.well-known/openid-configuration
- type: Conformance
  url: conformance/university-of-wisconsin-madison-conformance.yml