# University of Twente SAML 2.0 Identity Provider (SURFconext)

**Canonical:** https://apis.io/apis/university-of-twente/saml-idp-surfconext/  
**Provider:** University of Twente — https://apis.io/providers/university-of-twente/  
**Base URL:** https://sts.windows.net/723246a1-c3f5-43c5-acdc-43adb404ac4d/  
**Documentation:** https://metadata.surfconext.nl/idps-metadata.xml

University of Twente SAML 2.0 Identity Provider (SURFconext) is one of 9 APIs that [University of Twente](https://apis.io/providers/university-of-twente/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Identity, Federation, SAML, Shibboleth, and SURFconext.

The university's own SAML 2.0 identity provider, entityID https://sts.windows.net/723246a1-c3f5-43c5-acdc-43adb404ac4d/, running on a Microsoft Entra ID tenant in the EU region and registered in SURFconext, the Dutch national research and education federation and an eduGAIN participant. The SURFconext IdP aggregate carries its EntityDescriptor with mdui:DisplayName "University of Twente" and the Shibboleth metadata extension shibmd:Scope regexp="false" utwente.nl, which is the federation asserting this IdP is authoritative for the utwente.nl scope. The tenant publishes its own SAML metadata and an OpenID Connect discovery document, both unauthenticated. A federation is shared by definition; the IdP behind it is the institution's, and this is the surface every gated UT service sits behind. The same tenant GUID appears independently in the canvas.utwente.nl login redirect and in the ctid of the Power BI report embedded on the university's own open-data page.

## Machine-readable artifacts (4)

- **IdentityFederation** — https://metadata.surfconext.nl/idps-metadata.xml
- **Metadata** — https://login.microsoftonline.com/723246a1-c3f5-43c5-acdc-43adb404ac4d/federationmetadata/2007-06/federationmetadata.xml
- **OpenIDConnectDiscovery** — https://login.microsoftonline.com/723246a1-c3f5-43c5-acdc-43adb404ac4d/v2.0/.well-known/openid-configuration
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/university-of-twente/refs/heads/main/conformance/university-of-twente-conformance.yml

## Other University of Twente APIs (8)

- [University of Twente Energy API](https://apis.io/apis/university-of-twente/energy-api/)
- [University of Twente Erasmus Without Paper Node](https://apis.io/apis/university-of-twente/ewp-mobility-node/)
- [University of Twente Library Crossref Membership](https://apis.io/apis/university-of-twente/crossref-membership/)
- [UT Research Information (Elsevier Pure)](https://apis.io/apis/university-of-twente/pure-research-information/)
- [University of Twente Canvas LMS Tenant](https://apis.io/apis/university-of-twente/canvas-lms/)
- [University of Twente OSIRIS Student Information System](https://apis.io/apis/university-of-twente/osiris-student-information/)
- [University of Twente collections in 4TU.ResearchData](https://apis.io/apis/university-of-twente/4tu-researchdata/)
- [University of Twente llms.txt Programme Catalog](https://apis.io/apis/university-of-twente/llms-txt/)

## Tags

Identity, Federation, SAML, Shibboleth, SURFconext, eduGAIN, SSO

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/university-of-twente/saml-idp-surfconext/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/university-of-twente/.