HKU AD FS OpenID Provider Metadata

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/hku/refs/heads/main/json-schema/hku-openid-configuration.schema.json",
  "title": "HKU AD FS OpenID Provider Metadata",
  "description": "Schema for the OpenID Connect discovery document served by the University of Hong Kong at https://adfs.hku.hk/adfs/.well-known/openid-configuration. Every property and every enumerated value is present in the live response captured on 2026-08-19 (well-known/hku-adfs-openid-configuration.json); no property was added speculatively.",
  "x-provenance": {
    "generated": "2026-08-19",
    "method": "derived",
    "source": "https://adfs.hku.hk/adfs/.well-known/openid-configuration",
    "source_saved": "well-known/hku-adfs-openid-configuration.json",
    "x-operator": "institution"
  },
  "type": "object",
  "required": ["issuer", "authorization_endpoint", "token_endpoint", "jwks_uri", "scopes_supported", "response_types_supported"],
  "additionalProperties": true,
  "properties": {
    "issuer": { "type": "string", "format": "uri", "const": "https://adfs.hku.hk/adfs" },
    "authorization_endpoint": { "type": "string", "format": "uri" },
    "token_endpoint": { "type": "string", "format": "uri" },
    "userinfo_endpoint": { "type": "string", "format": "uri" },
    "end_session_endpoint": { "type": "string", "format": "uri" },
    "device_authorization_endpoint": { "type": "string", "format": "uri" },
    "jwks_uri": { "type": "string", "format": "uri" },
    "access_token_issuer": { "type": "string" },
    "scopes_supported": {
      "type": "array",
      "items": { "type": "string", "enum": ["user_impersonation", "email", "winhello_cert", "logon_cert", "aza", "profile", "vpn_cert", "openid", "allatclaims"] }
    },
    "response_types_supported": {
      "type": "array",
      "items": { "type": "string", "enum": ["code", "id_token", "code id_token", "id_token token", "code token", "code id_token token"] }
    },
    "response_modes_supported": {
      "type": "array",
      "items": { "type": "string", "enum": ["query", "fragment", "form_post"] }
    },
    "grant_types_supported": {
      "type": "array",
      "items": { "type": "string", "enum": ["authorization_code", "refresh_token", "client_credentials", "urn:ietf:params:oauth:grant-type:jwt-bearer", "implicit", "password", "srv_challenge", "urn:ietf:params:oauth:grant-type:device_code", "device_code"] }
    },
    "subject_types_supported": { "type": "array", "items": { "type": "string", "enum": ["pairwise"] } },
    "id_token_signing_alg_values_supported": { "type": "array", "items": { "type": "string", "enum": ["RS256"] } },
    "token_endpoint_auth_methods_supported": {
      "type": "array",
      "items": { "type": "string", "enum": ["client_secret_post", "client_secret_basic", "private_key_jwt", "windows_client_authentication"] }
    },
    "token_endpoint_auth_signing_alg_values_supported": { "type": "array", "items": { "type": "string", "enum": ["RS256"] } },
    "claims_supported": { "type": "array", "items": { "type": "string" } },
    "capabilities": { "type": "array", "items": { "type": "string" } },
    "frontchannel_logout_supported": { "type": "boolean" },
    "frontchannel_logout_session_supported": { "type": "boolean" },
    "microsoft_multi_refresh_token": { "type": "boolean" },
    "as_access_token_token_binding_supported": { "type": "boolean" },
    "as_refresh_token_token_binding_supported": { "type": "boolean" },
    "resource_access_token_token_binding_supported": { "type": "boolean" },
    "op_id_token_token_binding_supported": { "type": "boolean" },
    "rp_id_token_token_binding_supported": { "type": "boolean" }
  }
}