Shibboleth Identity Provider
Operations endpoints are restricted by IdP access control (typically allowed IP ranges and/or login for Hello).