University of Liverpool AD FS OAuth 2.0 / OpenID Connect
Institution-operated Active Directory Federation Services authorization server on the university's own host, with a public, keyless discovery document. Verified live 2026-09-01: https://fs.liverpool.ac.uk/adfs/.well-known/openid-configuration returns 200 with issuer https://fs.liverpool.ac.uk/adfs, authorization, token and userinfo endpoints, RS256 id-token signing, nine supported scopes and nine grant types including device_code and jwt-bearer; https://fs.liverpool.ac.uk/adfs/discovery/keys returns 200 with a live RSA signing key. The same deployment publishes SAML 2.0 / WS-Federation metadata at /FederationMetadata/2007-06/FederationMetadata.xml (200, application/samlmetadata+xml, 83,212 bytes, entityID http://fs.liverpool.ac.uk/adfs/services/trust) and is the SP-initiated login target for the university's Canvas VLE. This is the closest thing the institution has to a published, machine-readable API contract of its own, and there is no self-service client registration behind it.