Wuhan University Shibboleth Identity Provider (SAML 2.0)
WHU's federated login, published as a SAML 2.0 EntityDescriptor at https://idp.whu.edu.cn/idp/shibboleth (HTTP 200, application/xml, 14,864 bytes). Declares HTTP-Redirect, HTTP-POST and POST-SimpleSign SSO bindings, SOAP attribute query on port 8443, and a shibmd:Scope of whu.edu.cn. The entity is registered in CARSI, China's national R&E identity federation, as 武汉大学 since 2024-12-10 with production status, and CARSI has been a production eduGAIN member since 2019-06-18. The SSO handler answers HTTP 400 to a request carrying no SAMLRequest, which is a live protocol endpoint rather than a static page. The metadata DOCUMENT is defective and this profile says so: it is the un-customized template Shibboleth ships, it still carries the "This is example metadata only" banner and validUntil="2019-10-31", its Organization and ContactPerson blocks are commented out, and three SingleLogoutService elements use an undeclared md: prefix pointing at the placeholder host idp.xxx.edu.cn — so the published document is namespace-ill-formed. It is well-formed XML 1.0, but every namespace-aware parser fails on it: xmllint reports "Namespace prefix md on SingleLogoutService is not defined" at lines 131-133, and expat-based parsers raise "unbound prefix".