The IdP includes a small number of web-based administrative and diagnostic interfaces, and this will grow over time. Typically there are also command line tools/scripts that provide a convenient way of accessing these interfaces, and they tend to default to a closed access control model that limits access to the local host.

Of course, all of the user-facing functionality of the IdP is technically in the form of web interfaces adhering to the various protocols supported, but this page deals with the (mostly if not entirely) non-user-facing functionality.

All of these services are now implemented as administrative webflows that provide a consistent security model and support configuring flexible authentication and access control, though the currently delivered features tend to be more "IdP operator use" controlled with IP address rules.

The following interfaces are supported:

• Status
• Reloading Services
• Reloading Metadata
• Attribute Resolution
• StorageService Access
• Metrics
• Metadata Query ^3.4
• Account Lockout Management ^3.4