University of York Shibboleth Identity Provider
The University's own SAML 2.0 identity provider at shib.york.ac.uk, running Shibboleth. It is the authentication surface through which every bought platform — Pure, Primo, the VLE — is actually reached, and it is institution-operated by definition. Confirmed by behaviour: the SAML2 HTTP-Redirect SSO profile endpoint answers, and the IdP status handler is present but access-restricted. Its SAML metadata is NOT published from a University host; it is distributed through the UK Access Management Federation, so no machine-readable artifact could be retrieved and none has been invented. Recorded as a surface, not as a contract.