# Maastricht University Identity Provider (ADFS / SURFconext / eduGAIN)

**Canonical:** https://apis.io/apis/maastricht/identity-federation/  
**Provider:** Maastricht University — https://apis.io/providers/maastricht/  
**Base URL:** https://login.maastrichtuniversity.nl/adfs  
**Documentation:** https://login.maastrichtuniversity.nl/adfs/.well-known/openid-configuration

Maastricht University Identity Provider (ADFS / SURFconext / eduGAIN) is one of 10 APIs that [Maastricht University](https://apis.io/providers/maastricht/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity, SAML, OpenID Connect, Federation, and eduGAIN. The published artifact set on APIs.io includes authentication docs and API documentation.

Maastricht University runs its own identity provider on login.maastrichtuniversity.nl and publishes two machine-readable discovery documents without authentication: an OpenID Connect configuration (issuer https://login.maastrichtuniversity.nl/adfs, ten advertised scopes, JWKS, RS256) and signed SAML 2.0 federation metadata served as application/samlmetadata+xml. The same entityID appears in SURFconext's national IdP metadata with shibmd scopes maastrichtuniversity.nl and unimaas.nl, which places it in eduGAIN. This is the one surface class universities operate by definition and almost never appears in an API catalog. Client registration is not self-service; relying-party trusts are provisioned by UM ICT Services.

## Machine-readable artifacts (5)

- **IdentityFederation** — https://login.maastrichtuniversity.nl/FederationMetadata/2007-06/FederationMetadata.xml
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/maastricht/refs/heads/main/authentication/maastricht-authentication.yml
- **OAuthScopes** — https://raw.githubusercontent.com/api-evangelist/maastricht/refs/heads/main/scopes/maastricht-scopes.yml
- **Documentation** — https://login.maastrichtuniversity.nl/adfs/.well-known/openid-configuration
- **x-example** — https://raw.githubusercontent.com/api-evangelist/maastricht/refs/heads/main/examples/maastricht-adfs-openid-configuration-example.json

## Other Maastricht University APIs (9)

- [Maastricht University Research Portal OAI-PMH](https://apis.io/apis/maastricht/oai-pmh/)
- [Maastricht University GitLab](https://apis.io/apis/maastricht/gitlab/)
- [Maastricht University Institute of Data Science (Open Source)](https://apis.io/apis/maastricht/ids-github/)
- [DataHub Maastricht (Research IT) Open Source](https://apis.io/apis/maastricht/datahub-github/)
- [Maastricht University Library Open Source](https://apis.io/apis/maastricht/library-github/)
- [Maastricht University research data collection on DataverseNL](https://apis.io/apis/maastricht/dataversenl/)
- [Maastricht University Research Portal (Pure) REST API](https://apis.io/apis/maastricht/pure-ws-api/)
- [Maastricht University Canvas LMS](https://apis.io/apis/maastricht/canvas/)
- [Maastricht University Library discovery (OCLC WorldCat)](https://apis.io/apis/maastricht/worldcat-discovery/)

## Tags

Identity, SAML, OpenID Connect, Federation, eduGAIN, SURFconext

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/maastricht/identity-federation/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/maastricht/.
