# UGM ID — OAuth 2.0 / OpenID Connect Authorization Server **Canonical:** https://apis.io/apis/gadjah-mada-university/ugm-id/ **Provider:** Gadjah Mada University — https://apis.io/providers/gadjah-mada-university/ **Base URL:** https://oauth.simaster.ugm.ac.id **Documentation:** https://oauth.simaster.ugm.ac.id/docs UGM ID — OAuth 2.0 / OpenID Connect Authorization Server is one of 8 APIs that [Gadjah Mada University](https://apis.io/providers/gadjah-mada-university/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 1 JSON Schema definition. Tagged areas include Identity, Authentication, OAuth, OpenID Connect, and SSO. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, API documentation, authentication docs, a status page, and 1 JSON Schema. Universitas Gadjah Mada's own identity API, operated by the Directorate of Information Technology (DTI) at oauth.simaster.ugm.ac.id, in front of SIMASTER, the university's integrated academic information system. UGM publishes an OpenAPI 3.1.0 document for it at /openapi.json (retrieved 2026-09-01, 200, 19677 bytes) and serves Swagger UI from /docs. Twenty operations across five tags: the OAuth2 core (authorize, token, introspect, revoke, logout, userinfo), Discovery (OIDC configuration, RFC 8414 metadata, JWKS), three read-only resource endpoints (/api/me, /user/me, /user/username/{username}), social login initiation for Google, Microsoft 365, Facebook, LinkedIn and Apple, and a public /health check that reports the status of its database, Redis and SIMASTER dependencies. Six grant types including PKCE-protected authorization_code and RFC 8693 token exchange. Five scopes, all read-only. The specification is written by UGM in Indonesian. Two real defects are recorded rather than smoothed over: both discovery documents emit scheme-less URLs, breaking OIDC Discovery and RFC 8414 conformance, and the JWKS endpoint returns an empty key set while advertising RS256 id_tokens. ## Operations (19) | Method | Path | Summary | |---|---|---| | GET | `/.well-known/jwks.json` | JSON Web Key Set (JWKS) | | GET | `/.well-known/oauth-authorization-server` | OAuth 2.0 Authorization Server Metadata (RFC 8414) | | GET | `/.well-known/openid-configuration` | OpenID Connect Discovery | | GET | `/api/me` | Data User — Profil Dasar | | GET | `/authorize/apple` | Login dengan Apple | | GET | `/authorize/facebook` | Login dengan Facebook | | GET | `/authorize/google` | Login dengan Google | | GET | `/authorize/linkedin` | Login dengan LinkedIn | | GET | `/authorize/microsoft` | Login dengan Microsoft 365 UGM | | POST | `/callback/apple` | Callback Apple Sign In | | GET | `/health` | Health Check | | GET | `/oauth/authorize` | Otorisasi Pengguna (Authorization Code + PKCE) | | POST | `/oauth/introspect` | Introspeksi Token (RFC 7662) | | GET | `/oauth/logout` | RP-Initiated Logout (OIDC) | | POST | `/oauth/revoke` | Cabut Token OAuth2 (RFC 7009) | | POST | `/oauth/token` | Terbitkan Token OAuth2 | | GET | `/user/me` | Data User — Profil Lengkap (Simaster) | | GET | `/user/username/{username}` | Data User by Username | | GET | `/userinfo` | OIDC UserInfo Endpoint | ## Machine-readable artifacts (14) - **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/openapi/gadjah-mada-university-ugm-id-openapi.yml - **x-openapi-original** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/openapi/_original/gadjah-mada-university-ugm-id-openapi.json - **APIReference** — https://oauth.simaster.ugm.ac.id/docs - **Documentation** — https://oauth.simaster.ugm.ac.id/openapi.json - **x-openid-configuration** — https://oauth.simaster.ugm.ac.id/.well-known/openid-configuration - **x-oauth-authorization-server** — https://oauth.simaster.ugm.ac.id/.well-known/oauth-authorization-server - **Authentication** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/authentication/gadjah-mada-university-authentication.yml - **Scopes** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/scopes/gadjah-mada-university-scopes.yml - **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/json-schema/gadjah-mada-university-ugm-id-schemas.json - **Examples** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/examples/gadjah-mada-university-ugm-id-examples.yml - **Errors** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/errors/gadjah-mada-university-errors.yml - **Rules** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/rules/gadjah-mada-university-rules.yml - **Status** — https://oauth.simaster.ugm.ac.id/health - **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/gadjah-mada-university/refs/heads/main/apis.yml ## Other Gadjah Mada University APIs (7) - [UGM Shibboleth SAML 2.0 Identity Provider](https://apis.io/apis/gadjah-mada-university/shibboleth-idp/) - [UGM Institutional Repository OAI-PMH](https://apis.io/apis/gadjah-mada-university/repository-oai-pmh/) - [UGM Journals OAI-PMH](https://apis.io/apis/gadjah-mada-university/journal-oai-pmh/) - [UGM Single Sign-On (CAS)](https://apis.io/apis/gadjah-mada-university/sso-cas/) - [eLOK Moodle Web Services (institution deployment)](https://apis.io/apis/gadjah-mada-university/elok-moodle-webservices/) - [Crossref membership (member 9411, prefix 10.22146)](https://apis.io/apis/gadjah-mada-university/crossref-membership/) - [ROR organization record (ror.org/03ke6d638)](https://apis.io/apis/gadjah-mada-university/ror-record/) ## Tags Identity, Authentication, OAuth, OpenID Connect, SSO, Students, Staff --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/gadjah-mada-university/ugm-id/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/gadjah-mada-university/.