UM Web SSO — institutional SAML 2.0 / OpenID Connect identity provider
UMPASS, the university's single sign-on, is served by UM's own AD FS farm. It publishes federation metadata as application/samlmetadata+xml — 71 KB, signed, carrying both an IDPSSODescriptor and an SPSSODescriptor, SAML 2.0 protocol support, SingleSignOnService over HTTP-POST and HTTP-Redirect, four SingleLogoutService endpoints and 128 declared claim types — and an OpenID Connect discovery document at /adfs/.well-known/openid-configuration. This is the university's strongest institution-operated machine-readable surface and the one class the June 2026 cohort profiling missed entirely. Macao has no national research-and-education identity federation, so there is no eduGAIN or InCommon aggregate entry to point at; the metadata is published directly by the institution.