# Wuhan University Campus Single Sign-On (CAS / OpenID Connect / SAML)

**Canonical:** https://apis.io/apis/wuhan/cas-sso/  
**Provider:** Wuhan University — https://apis.io/providers/wuhan/  
**Base URL:** https://cas.whu.edu.cn/authserver/  
**Documentation:** https://cas.whu.edu.cn/authserver/login

Wuhan University Campus Single Sign-On (CAS / OpenID Connect / SAML) is one of 8 APIs that [Wuhan University](https://apis.io/providers/wuhan/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Single Sign-On, OpenID Connect, OAuth, CAS, and SAML. The published artifact set on APIs.io includes authentication docs.

The campus authentication server at cas.whu.edu.cn/authserver, which every institutional application redirects into, running the Wisedu CAS distribution. It publishes an OpenID Connect discovery document at /authserver/oidc/.well-known/openid-configuration (HTTP 200, application/json, 1,340 bytes) with a live JWKS, authorization, token, userinfo, introspection, revocation and registration endpoints; answers the CAS 2.0/3.0 ticket-validation protocol at /authserver/serviceValidate and /authserver/p3/serviceValidate in the cas:serviceResponse XML shape; and serves a well-formed SAML 2.0 EntityDescriptor at /authserver/idp/metadata under entityID http://auth.whu.edu.cn/authserver on a WHU-specific certificate (CN=auth.whu.edu.cn, issued 2025-01-17). This is the only conforming machine-readable contract WHU serves to the anonymous public, and it authenticates people into WHU applications — it fronts no public data API. The discovery document is the Wisedu product's standard shape, not WHU engineering, so no OpenAPI has been derived from it. Three weaknesses it declares about itself: id_token_signing_alg_values_supported includes "none", grant_types_supported includes the deprecated resource-owner password grant, and no PKCE support is advertised. The SAML metadata carries the vendor's unedited defaults — shibmd:Scope "wisedu.com" instead of whu.edu.cn, ContactPerson addresses jsmith@example.org and support@example.org — and its entityID host auth.whu.edu.cn does not resolve.

## Machine-readable artifacts (5)

- **OpenIDConnectDiscovery** — https://cas.whu.edu.cn/authserver/oidc/.well-known/openid-configuration
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/wuhan/refs/heads/main/authentication/wuhan-authentication.yml
- **Scopes** — https://raw.githubusercontent.com/api-evangelist/wuhan/refs/heads/main/scopes/wuhan-scopes.yml
- **Metadata** — https://raw.githubusercontent.com/api-evangelist/wuhan/refs/heads/main/identity-federation/wuhan-cas-saml-idp-metadata.xml
- **Conformance** — https://raw.githubusercontent.com/api-evangelist/wuhan/refs/heads/main/conformance/wuhan-conformance.yml

## Other Wuhan University APIs (7)

- [Wuhan University Shibboleth Identity Provider (SAML 2.0)](https://apis.io/apis/wuhan/shibboleth-idp/)
- [IGS Data Center at Wuhan University (GNSS archive)](https://apis.io/apis/wuhan/igs-data-center/)
- [CARSI membership (CERNET Authentication and Resource Sharing Infrastructure)](https://apis.io/apis/wuhan/carsi/)
- [ROR registry entry (Research Organization Registry)](https://apis.io/apis/wuhan/ror/)
- [Wuhan University Library catalog (Ex Libris Aleph tenant)](https://apis.io/apis/wuhan/opac/)
- [Wuhan University academic affairs / registrar system (SSO-gated)](https://apis.io/apis/wuhan/jwgl/)
- [Geomatics and Information Science of Wuhan University (journal platform)](https://apis.io/apis/wuhan/journal-platform/)

## Tags

Single Sign-On, OpenID Connect, OAuth, CAS, SAML, Identity

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/wuhan/cas-sso/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/wuhan/.