Western University

Western University Shibboleth Identity Provider (SAML 2.0 metadata)

Western's institutional identity provider, publishing machine-readable SAML 2.0 metadata through the Canadian Access Federation. entityID https://shibidp.uwo.ca/idp/shibboleth, mdui:DisplayName "University of Western Ontario", shibmd:Scope uwo.ca, registrationAuthority http://www.canarie.ca, registered 2012-01-01. Declares the REFEDS Research and Scholarship entity category and asserts REFEDS Sirtfi, and is exported to eduGAIN in CAF's interfederation aggregate. SSO endpoints are declared for HTTP-POST, HTTP-POST-SimpleSign and HTTP-Redirect, with SOAP artifact resolution and attribute query on port 8443. This is institution-operated by definition, it is the most consequential machine-readable surface Western runs, and it was absent from the June 2026 profile.

GitHub

Documentation

📖
Documentation
https://wts.uwo.ca/services/o/single-sign-on-sso-saml2-oauth-oidc-cas/index.html
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/western/refs/heads/main/authentication/western-authentication.yml

Other Resources

🔗
Examples
https://raw.githubusercontent.com/api-evangelist/western/refs/heads/main/examples/western-shibboleth-idp-caf-metadata-example.xml
🔗
Conformance
https://raw.githubusercontent.com/api-evangelist/western/refs/heads/main/conformance/western-conformance.yml
🔗
Federation
https://caf-shib2ops.ca/CoreServices/caf_metadata_signed_sha256.xml
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/western/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/identity-federation"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: western:identity-federation
name: Western University Shibboleth Identity Provider (SAML 2.0 metadata)
description: Western's institutional identity provider, publishing machine-readable SAML 2.0 metadata
  through the Canadian Access Federation. entityID https://shibidp.uwo.ca/idp/shibboleth, mdui:DisplayName
  "University of Western Ontario", shibmd:Scope uwo.ca, registrationAuthority http://www.canarie.ca, registered
  2012-01-01. Declares the REFEDS Research and Scholarship entity category and asserts REFEDS Sirtfi,
  and is exported to eduGAIN in CAF's interfederation aggregate. SSO endpoints are declared for HTTP-POST,
  HTTP-POST-SimpleSign and HTTP-Redirect, with SOAP artifact resolution and attribute query on port 8443.
  This is institution-operated by definition, it is the most consequential machine-readable surface Western
  runs, and it was absent from the June 2026 profile.
humanURL: https://wts.uwo.ca/services/o/single-sign-on-sso-saml2-oauth-oidc-cas/index.html
baseURL: https://caf-shib2ops.ca/CoreServices/caf_metadata_signed_sha256.xml
x-entity-id: https://shibidp.uwo.ca/idp/shibboleth
x-entity-id-note: 'The entityID is a SAML identifier, not a document location, and returns HTTP 404 when
  fetched. That is normal Shibboleth behaviour: Western''s metadata is published through the Canadian
  Access Federation aggregate, which is what baseURL points at. It is recorded here as x-entity-id rather
  than as a pointer so it is never graded as a dead link.'
tags:
- Identity Federation
- SAML
- Shibboleth
- eduGAIN
- CANARIE
- Single Sign-On
x-operator: institution
x-operator-evidence: Entity is under Western's own registrable domain (uwo.ca), self-asserts "University
  of Western Ontario" as its display name, and is registered by CANARIE in the Canadian Access Federation
  aggregate as the only uwo.ca entity present.
x-developer-usable: false
x-developer-note: An end-user login federation, not a developer authorization surface. There is no client
  registration path, no token endpoint and no consent screen an outside developer could integrate against;
  service-provider registration runs through CAF or a WTS request.
properties:
- type: Documentation
  url: https://wts.uwo.ca/services/o/single-sign-on-sso-saml2-oauth-oidc-cas/index.html
- type: Examples
  url: examples/western-shibboleth-idp-caf-metadata-example.xml
- type: Authentication
  url: authentication/western-authentication.yml
- type: Conformance
  url: conformance/western-conformance.yml
- type: Federation
  url: https://caf-shib2ops.ca/CoreServices/caf_metadata_signed_sha256.xml