University of Science and Technology of China

USTC Unified Identity Authentication (id.ustc.edu.cn, formerly Passport SSO)

USTC's institution-operated authorization server, run by the Network Information Center and the hub every other campus system authenticates against. It speaks CAS 3.0, OAuth 2.0 authorization code (recommended for new integrations) and OpenID Connect 1.0, and publishes an anonymously readable discovery document and JWKS. USTC also publishes a real developer manual for it — endpoint tables, parameter tables, an 8-hour token lifetime, a CSRF warning directing integrators to verify `state`, and mobile SDKs for Android, iOS and HarmonyOS. Access is administrator-granted: a client_id exists only after a registration and filing process, and USTC states explicitly that applications not deployed on campus and not on a ustc.edu.cn domain are not supported. passport.ustc.edu.cn is the legacy hostname, kept for redirects since the February 2025 cutover and resolving to the same address; it still answers CAS validation and the health check but 404s the OIDC discovery path.

GitHub

Documentation

📖
Documentation
https://id.ustc.edu.cn/doc/developer/
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/ustc/refs/heads/main/authentication/ustc-authentication.yml

Other Resources

🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/ustc/refs/heads/main/scopes/ustc-scopes.yml
🔗
Lifecycle
https://raw.githubusercontent.com/api-evangelist/ustc/refs/heads/main/lifecycle/ustc-lifecycle.yml
🔗
Status
https://passport.ustc.edu.cn/healthcheck
🔗
APIsJSON
https://raw.githubusercontent.com/api-evangelist/ustc/refs/heads/main/apis.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/passport"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: ustc:passport
name: USTC Unified Identity Authentication (id.ustc.edu.cn, formerly Passport SSO)
description: 'USTC''s institution-operated authorization server, run by the Network Information Center
  and the hub every other campus system authenticates against. It speaks CAS 3.0, OAuth 2.0 authorization
  code (recommended for new integrations) and OpenID Connect 1.0, and publishes an anonymously readable
  discovery document and JWKS. USTC also publishes a real developer manual for it — endpoint tables, parameter
  tables, an 8-hour token lifetime, a CSRF warning directing integrators to verify `state`, and mobile
  SDKs for Android, iOS and HarmonyOS. Access is administrator-granted: a client_id exists only after
  a registration and filing process, and USTC states explicitly that applications not deployed on campus
  and not on a ustc.edu.cn domain are not supported. passport.ustc.edu.cn is the legacy hostname, kept
  for redirects since the February 2025 cutover and resolving to the same address; it still answers CAS
  validation and the health check but 404s the OIDC discovery path.'
humanURL: https://id.ustc.edu.cn/doc/
baseURL: https://id.ustc.edu.cn/cas
tags:
- Identity
- SSO
- OpenID Connect
- Authentication
- CAS
tags_raw:
- Identity
- SSO
- OpenID Connect
- OAuth 2.0
- CAS
- Authentication
properties:
- type: Documentation
  url: https://id.ustc.edu.cn/doc/developer/
- type: Authentication
  url: authentication/ustc-authentication.yml
- type: OAuthScopes
  url: scopes/ustc-scopes.yml
- type: Lifecycle
  url: lifecycle/ustc-lifecycle.yml
- type: Status
  url: https://passport.ustc.edu.cn/healthcheck
x-operator: institution
x-operator-evidence: id.ustc.edu.cn and passport.ustc.edu.cn both resolve to 210.45.67.89, APNIC inetnum
  210.40.0.0-210.47.255.255, netname CERNET-CN (China Education and Research Network). The discovery document's
  issuer is https://id.ustc.edu.cn/cas and the developer manual names the USTC Network Information Center
  as operator. Underlying software is Ruijie RG-SourceID — a product, but one USTC deploys and operates
  on its own address space, and the contract at the well-known path is served by USTC.
x-access: gated
x-status: 200 on /cas/oidc/.well-known/openid-configuration and /cas/oidc/jwks; 401 on /cas/oauth2.0/profile
  without a token (probed 2026-08-30)