National University of Singapore

National University of Singapore Session API

End-user claims and session termination.

Documentation GitHub OpenAPI

Business capability

Identity & Access Management BC-620.20

Operations 2

GET /adfs/userinfo UserInfo endpoint #

GET /adfs/oauth2/logout End session / front-channel logout endpoint #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/nus:nus-session-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: NUS Identity Provider API (vafs.nus.edu.sg) Session API
  version: '2026-08-19'
  description: 'The National University of Singapore operates its own federated identity service at

    `vafs.nus.edu.sg` ("NUS VAFS" — the university''s Active Directory Federation Services

    deployment).'
  contact:
    name: NUS Information Technology
    url: https://nusit.nus.edu.sg/
  termsOfService: https://nus.edu.sg/ormc/personal-data-protection/nus-privacy-notice
  x-operator: institution
  x-operator-evidence:
  - TLS certificate subject O=National University of Singapore (DigiCert EV RSA CA G2)
  - A record 137.132.21.18 within NUS-assigned address space
  - SAML entityID https://vafs.nus.edu.sg/adfs/services/trust
  x-method: derived
  x-source: https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration
  x-generated: '2026-08-19'
servers:
- url: https://vafs.nus.edu.sg
  description: NUS federated identity service (production)
tags:
- name: Session
  description: End-user claims and session termination.
paths:
  /adfs/userinfo:
    get:
      tags:
      - Session
      operationId: userinfo
      summary: UserInfo endpoint
      description: Returns claims about the authenticated NUS end user. Requires a bearer access token issued with the `openid` scope. Subject identifiers are pairwise.
      security:
      - bearerAuth: []
      responses:
        '200':
          description: Claims for the authenticated subject.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserInfo'
        '401':
          description: Missing, expired or invalid access token.
  /adfs/oauth2/logout:
    get:
      tags:
      - Session
      operationId: endSession
      summary: End session / front-channel logout endpoint
      description: Terminates the user's session at the provider. The provider advertises front-channel logout with session support.
      security: []
      parameters:
      - name: post_logout_redirect_uri
        in: query
        required: false
        schema:
          type: string
          format: uri
      - name: id_token_hint
        in: query
        required: false
        schema:
          type: string
      responses:
        '302':
          description: Redirect after session termination.
components:
  schemas:
    UserInfo:
      type: object
      description: Claims the provider advertises in `claims_supported`. NUS issues pairwise subject identifiers, so `sub` is per-client and not a stable cross-client campus identifier.
      properties:
        sub:
          type: string
        upn:
          type: string
          description: User principal name, e.g. e0123456@u.nus.edu
        unique_name:
          type: string
        aud:
          type: string
        iss:
          type: string
        iat:
          type: integer
        exp:
          type: integer
        nbf:
          type: integer
        auth_time:
          type: integer
        mfa_auth_time:
          type: integer
        nonce:
          type: string
        at_hash:
          type: string
        c_hash:
          type: string
        sid:
          type: string
        pwd_url:
          type: string
          format: uri
        pwd_exp:
          type: integer
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
    clientSecretBasic:
      type: http
      scheme: basic
      description: client_secret_basic client authentication.
    clientSecretPost:
      type: apiKey
      in: header
      name: Authorization
      description: Placeholder for client_secret_post; the provider also advertises private_key_jwt and windows_client_authentication.
    oidc:
      type: openIdConnect
      openIdConnectUrl: https://vafs.nus.edu.sg/adfs/.well-known/openid-configuration

National University of Singapore Session API

Operations 2

Documentation

Specifications

Schemas & Data

Other Resources