Enterprise Project

Federated Campus Identity & Universal SSO

Built a federated SAML 2.0 and OAuth identity pipeline for Comcast’s XfinityOnCampus, enabling students across 150+ universities to securely stream and authenticate using institutional credentials.

Explore SSO Architecture ↓

View Other Showcases

The Challenge: Heterogeneous University IdPs

Every university uses different identity architectures—some use Shibboleth, others Okta, PingFederate, Azure AD, or on-premise ADFS.

The challenge was delivering a frictionless, unified Single Sign-On (SSO) experience where millions of students across 150+ higher education institutions can authenticate using their existing campus student credentials without Comcast storing student passwords.

Dynamic Federation & Token Exchange

We architected a dynamic Service Provider (SP) federation engine that parses incoming student campus selections, generates scoped SAML AuthnRequests, and handles cross-domain token normalization.

Upon successful authentication at the university IdP, the assertion is validated, transformed into scoped OAuth/OIDC tokens, and mapped to housing entitlement tiers in real time.

Key Architectural Pillars

Multi-Tenant SAML 2.0 / OIDC Gateway

Centralized authentication proxy translating diverse XML SAML assertions and JSON Web Tokens (JWT) into unified user security contexts.

Real-Time Campus Housing Entitlements

Integrated automated student on-campus housing status verification against university directory attributes (LDAP/EduPerson attributes) with zero PII exposure.

Back-to-School Scale & Spike Absorption

Engineered distributed token caching and asynchronous session management to withstand 10x traffic surges during university move-in weeks and live collegiate sports events.

FERPA Compliance & Zero Credential Footprint

Ensured strict privacy compliance by never persisting student university credentials or sensitive academic data in downstream video streaming databases.

Impact & Engineering Outcomes

150+

Partner Universities

Federated campus identity across higher education institutions nationwide.

Millions

Active Student Accounts

Seamless instant sign-in across mobile, web, and Smart TV platforms.

100%

Privacy & FERPA Aligned

Zero local credential storage and fully isolated institutional authentication boundaries.