# SSO@UKM — SAML 2.0 Identity Provider

**Canonical:** https://apis.io/apis/ukm/identity-federation/  
**Provider:** Universiti Kebangsaan Malaysia — https://apis.io/providers/ukm/  
**Base URL:** https://sso.ukm.my/saml2/idp  
**Documentation:** https://sso.ukm.my/

SSO@UKM — SAML 2.0 Identity Provider is one of 9 APIs that [Universiti Kebangsaan Malaysia](https://apis.io/providers/ukm/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Identity Federation, SAML, Single Sign-On, and Authentication. The published artifact set on APIs.io includes an OpenAPI specification and authentication docs.

Universiti Kebangsaan Malaysia's own SAML 2.0 identity provider, a SimpleSAMLphp deployment at sso.ukm.my. Publishes unauthenticated SAML 2.0 metadata (application/samlmetadata+xml, 4,261 bytes) with an IDPSSODescriptor carrying separate signing and encryption X.509 keys, HTTP-Redirect SingleSignOnService and SingleLogoutService endpoints, the transient NameID format and a technical contact at server@ukm.edu.my. Confirmed in production: libquest.ukm.my redirects unauthenticated visitors to /saml2/idp/SSOService.php as SP smuSSO-sp. Three weaknesses are visible in the metadata itself — entityID is the bare string "sso.ukm.my" rather than a URI, the document is not XML-signed, and no validUntil or cacheDuration tells a relying party when to re-fetch. UKM is not registered in eduGAIN and does not appear under SIFULAN, so no federation operator is checking any of this on its behalf.

## Operations (3)

| Method | Path | Summary |
|---|---|---|
| GET | `/metadata.php` | SAML 2.0 IdP metadata document |
| GET | `/SSOService.php` | SAML 2.0 SingleSignOnService (HTTP-Redirect binding) |
| GET | `/SingleLogoutService.php` | SAML 2.0 SingleLogoutService (HTTP-Redirect binding) |

## Machine-readable artifacts (7)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/ukm/refs/heads/main/openapi/ukm-identity-federation-openapi.yml
- **Metadata** — https://sso.ukm.my/saml2/idp/metadata.php
- **Examples** — https://raw.githubusercontent.com/api-evangelist/ukm/refs/heads/main/examples/ukm-sso-saml-idp-metadata.xml
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/ukm/refs/heads/main/authentication/ukm-authentication.yml
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/ukm/refs/heads/main/conformance/ukm-conformance.yml
- **Lifecycle** — https://raw.githubusercontent.com/api-evangelist/ukm/refs/heads/main/lifecycle/ukm-lifecycle.yml
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/ukm/refs/heads/main/apis.yml

## Other Universiti Kebangsaan Malaysia APIs (8)

- [UKM Learning and Research Repository (OAI-PMH)](https://apis.io/apis/ukm/learning-research-repository-oai/)
- [UKM e-Journal System (OAI-PMH)](https://apis.io/apis/ukm/ejournal-oai/)
- [UKM Web Content REST API (WordPress wp/v2)](https://apis.io/apis/ukm/web-content-rest/)
- [UKM Journal Article Repository (OAI-PMH) — unreachable](https://apis.io/apis/ukm/journal-article-repository-oai/)
- [Crossref DOI Registration (UKM Press and UKM faculties)](https://apis.io/apis/ukm/crossref-membership/)
- [ROR Organization Registration](https://apis.io/apis/ukm/ror-registration/)
- [Springshare LibGuides (tenant deployment)](https://apis.io/apis/ukm/libguides-tenant/)
- [RemoteXs E-Resources Proxy (tenant deployment)](https://apis.io/apis/ukm/remotexs-tenant/)

## Tags

Identity Federation, SAML, Single Sign-On, Authentication

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/ukm/identity-federation/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/ukm/.