Really, for authentication, this is ridiculous. I should be able to log into my university account (we use WebAdvisor) and click "Provide Confirmation of Enrolment" and get a secret URL to provide to the interested party, so they can visit it and see proof.
- visit webadvisor.uoguelph.ca, log in, and click "Provide Confirmation of Enrolment"
- This gives me a unique, random URL to http://enrolled.uoguelph.ca/1bc5ff9f7dfa1e6d
- I give this to the interested party, and when they visit this page, it shows my name, photograph, university e-mail address, department, program, and enrolment status. Or maybe not even all of that, just what they need.