# SSO integration

The Unizin Order Tool requires an SSO integration. It is expected that Institutions have implemented SSO via Shibboleth.

Unizin is a member of the InCommon Federation. The Unizin Order Tool is registered as a [Service Provider (SP) in InCommon](https://incommon.org/federation/incommon-federation-participants/). Note, the Unizin Order Tool **appears twice** in the InCommon Federation Service Provider metadata – one for the Order Tool's production environment (**PROD**), another for the Order Tool's user acceptance testing environment (**UAT**). The Unizin Order Tool is *not* an LTI tool.

Both Unizin Order Tool service providers must be integrated with your Institution's Identity Provider (IdP).

### Service provider details <a href="#ssointegration-serviceproviderdetails" id="ssointegration-serviceproviderdetails"></a>

The EntityID for the Unizin Order Tool in **PROD** and **UAT** is as follows:

**PROD**: <https://ordertool.prod.unizin.org/secure>

**UAT**: <https://ordertool.uat.unizin.org/secure>

### SAML2 Attributes required <a href="#ssointegration-saml2attributesrequired" id="ssointegration-saml2attributesrequired"></a>

The Unizin Order Tool requires the following attributes to be released by an Institutional IdP

* eduPersonPrincipalName (i.e., EPPN)
* givenName
* sn
* mail
* eduPersonScopedAffiliation

Unizin's **PROD** Order Tool is categorized in InCommon as a [Research and Scholarship SP](https://spaces.internet2.edu/display/InCFederation/Research+and+Scholarship+Category). This may make the process of releasing attributes for it easier. Per InCommon regulations, the **UAT** Order Tool cannot be categorized as a Research and Scholarship SP.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://resources.unizin.org/products/content/unizin-order-tool/implementation/sso-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
