National University of Singapore

National University of Singapore Discovery API

Machine-readable metadata describing the identity service and its signing keys.

GitHub OpenAPI

Operations 3

GET /adfs/.well-known/openid-configuration OpenID Connect discovery document #
GET /adfs/discovery/keys JSON Web Key Set #
GET /FederationMetadata/2007-06/FederationMetadata.xml SAML 2.0 / WS-Federation metadata #

Documentation

📖
Documentation
https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration
📖
Authentication
https://artifacts.apis.io/nus/authentication/nus-authentication.yml

Specifications

⚙
OpenAPI
https://artifacts.apis.io/nus/openapi/nus-discovery-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/nus/json-schema/nus-openid-configuration-schema.json

Other Resources

🔗
IdentityFederation
https://vafs.nus.edu.sg/FederationMetadata/2007-06/FederationMetadata.xml
🔗
Scopes
https://artifacts.apis.io/nus/scopes/nus-scopes.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/nus:nus-discovery-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

nus-discovery-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: NUS Identity Provider API (vafs.nus.edu.sg) Discovery API
  version: '2026-08-19'
  description: 'The National University of Singapore operates its own federated identity service at

    `vafs.nus.edu.sg` ("NUS VAFS" — the university''s Active Directory Federation Services

    deployment).'
  contact:
    name: NUS Information Technology
    url: https://nusit.nus.edu.sg/
  termsOfService: https://nus.edu.sg/ormc/personal-data-protection/nus-privacy-notice
  x-operator: institution
  x-operator-evidence:
  - TLS certificate subject O=National University of Singapore (DigiCert EV RSA CA G2)
  - A record 137.132.21.18 within NUS-assigned address space
  - SAML entityID https://vafs.nus.edu.sg/adfs/services/trust
  x-method: derived
  x-source: https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration
  x-generated: '2026-08-19'
servers:
- url: https://vafs.nus.edu.sg
  description: NUS federated identity service (production)
tags:
- name: Discovery
  description: Machine-readable metadata describing the identity service and its signing keys.
paths:
  /adfs/.well-known/openid-configuration:
    get:
      tags:
      - Discovery
      operationId: getOpenIdConfiguration
      summary: OpenID Connect discovery document
      description: Returns the OpenID Provider metadata for the NUS identity service, per OpenID Connect Discovery 1.0. Publicly readable, no authentication.
      security: []
      responses:
        '200':
          description: OpenID Provider metadata.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OpenIdConfiguration'
  /adfs/discovery/keys:
    get:
      tags:
      - Discovery
      operationId: getJwks
      summary: JSON Web Key Set
      description: Returns the RSA public keys used to verify ID tokens and access tokens issued by this provider (RFC 7517). Publicly readable, no authentication.
      security: []
      responses:
        '200':
          description: JWKS document.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Jwks'
  /FederationMetadata/2007-06/FederationMetadata.xml:
    get:
      tags:
      - Discovery
      operationId: getFederationMetadata
      summary: SAML 2.0 / WS-Federation metadata
      description: Returns the signed SAML 2.0 metadata document for entityID `https://vafs.nus.edu.sg/adfs/services/trust`, carrying both an IDPSSODescriptor and an SPSSODescriptor, four SingleLogoutService bindings, and 76 declared claim types. Publicly readable, no authentication.
      security: []
      responses:
        '200':
          description: Signed SAML 2.0 EntityDescriptor.
          content:
            application/samlmetadata+xml:
              schema:
                type: string
                format: xml
components:
  schemas:
    OpenIdConfiguration:
      type: object
      description: OpenID Provider metadata as returned by the live NUS discovery endpoint.
      required:
      - issuer
      - authorization_endpoint
      - token_endpoint
      - jwks_uri
      properties:
        issuer:
          type: string
          example: https://vafs.nus.edu.sg/adfs
        authorization_endpoint:
          type: string
          example: https://vafs.nus.edu.sg/adfs/oauth2/authorize/
        token_endpoint:
          type: string
          example: https://vafs.nus.edu.sg/adfs/oauth2/token/
        jwks_uri:
          type: string
          example: https://vafs.nus.edu.sg/adfs/discovery/keys
        userinfo_endpoint:
          type: string
          example: https://vafs.nus.edu.sg/adfs/userinfo
        end_session_endpoint:
          type: string
          example: https://vafs.nus.edu.sg/adfs/oauth2/logout
        device_authorization_endpoint:
          type: string
          example: https://vafs.nus.edu.sg/adfs/oauth2/devicecode
        access_token_issuer:
          type: string
          example: https://vafs.nus.edu.sg/adfs/services/trust
        scopes_supported:
          type: array
          items:
            type: string
        response_types_supported:
          type: array
          items:
            type: string
        grant_types_supported:
          type: array
          items:
            type: string
        subject_types_supported:
          type: array
          items:
            type: string
            enum:
            - pairwise
        id_token_signing_alg_values_supported:
          type: array
          items:
            type: string
        token_endpoint_auth_methods_supported:
          type: array
          items:
            type: string
        claims_supported:
          type: array
          items:
            type: string
        frontchannel_logout_supported:
          type: boolean
        frontchannel_logout_session_supported:
          type: boolean
    Jwks:
      type: object
      required:
      - keys
      properties:
        keys:
          type: array
          items:
            type: object
            required:
            - kty
            - use
            - alg
            - kid
            - n
            - e
            properties:
              kty:
                type: string
                example: RSA
              use:
                type: string
                example: sig
              alg:
                type: string
                example: RS256
              kid:
                type: string
              x5t:
                type: string
              n:
                type: string
                description: RSA modulus
                base64url.: null
              e:
                type: string
                example: AQAB
              x5c:
                type: array
                items:
                  type: string
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
    clientSecretBasic:
      type: http
      scheme: basic
      description: client_secret_basic client authentication.
    clientSecretPost:
      type: apiKey
      in: header
      name: Authorization
      description: Placeholder for client_secret_post; the provider also advertises private_key_jwt and windows_client_authentication.
    oidc:
      type: openIdConnect
      openIdConnectUrl: https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration