University Of The Witwatersrand Authentication

generated: '2026-08-30'
method: probed
source: live probes of https://wiredspace.wits.ac.za/server/api/authn and /authn/status
x-operator: institution
provider: University of the Witwatersrand
providerId: university-of-the-witwatersrand
description: >-
  Authentication posture of the institution-operated WIReDSpace surfaces only. The previous version
  of this file was derived from the Figshare v2 OAuth contract (authorizationUrl
  https://figshare.com/account/applications/authorize, tokenUrl https://api.figshare.com/v2/token)
  and therefore described the vendor's authorization server, not the university's — it was removed
  on 2026-08-30 together with the vendor spec it came from. WIReDSpace read access is anonymous:
  the DSpace 9.2 REST API and the OAI-PMH 2.0 endpoint both answer unauthenticated GETs. A login
  surface exists for deposit, workflow and administrative operations, which are not part of the
  public read contract catalogued here.
summary:
  types:
  - none
  - session
  anonymous_read: true
  oauth2_flows: []
schemes:
- name: Anonymous read
  type: none
  description: >-
    Public read of communities, collections, items, discovery/browse and every OAI-PMH verb requires
    no credential. Verified live 2026-08-30.
  evidence:
  - url: https://wiredspace.wits.ac.za/server/api/authn/status
    status: 200
    note: '"authenticated": false, "okay": true on an unauthenticated call'
  - url: https://wiredspace.wits.ac.za/server/api/core/communities
    status: 200
    note: paginated HAL collection returned with no credential
  - url: https://wiredspace.wits.ac.za/server/oai/request?verb=Identify
    status: 200
    note: OAI-PMH Identify answered anonymously
- name: DSpace session login
  type: session
  description: >-
    DSpace login/logout endpoints for authenticated deposit and administration. Not self-serve —
    accounts are issued through Wits institutional identity, not a developer signup.
  endpoints:
    login: https://wiredspace.wits.ac.za/server/api/authn/login
    logout: https://wiredspace.wits.ac.za/server/api/authn/logout
    status: https://wiredspace.wits.ac.za/server/api/authn/status
  evidence:
  - url: https://wiredspace.wits.ac.za/server/api/authn
    status: 200
    note: HAL document advertising login, logout and status
notes: >-
  Institutional SSO for Wits staff and students runs on the university's own SimpleSAMLphp identity
  provider registered in SAFIRE (see conformance/ and the IdentityFederation pointer in apis.yml).
  That is a SAML 2.0 federation surface, not an API authorization server, and it does not issue
  tokens for the WIReDSpace REST API.
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com