How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

King Saud University Identity API

OAuth 2.0 and OpenID Connect endpoints of the King Saud University authorization server.

King Saud University Identity API is one of 6 APIs that King Saud University publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 1 JSON Schema definition.

Tagged areas include Identity. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, authentication docs, and 1 JSON Schema.

This API exposes 13 operations across 13 paths, and defines 6 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against a single base URL, https://iam.ksu.edu.sa.

13 operations 13 paths 6 schemas 7 GET6 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://data.ksu.edu.sa
Authentication
HTTP Bearer, OAuth 2.0
Resource Areas
1

Authentication & Security 2

King Saud University Identity API declares 2 security schemes for authenticating requests. It accepts HTTP bearer tokens (JWT) (bearerAuth). It supports OAuth 2.0 (oauth2) using the authorizationCode and clientCredentials flows, exposing 6 scopes. By default, every request must be authenticated.

  • bearerAuth — An OAuth 2.0 access token issued by https://iam.ksu.edu.sa.
  • oauth2 — There is no public client registration — the advertised registrationendpoint returned 404 anonymously on 2026-09-01. Client credentials are issued by the unive…

Paths & Operations 13

Across 13 paths, the API surfaces 13 operations — 7 GET, 6 POST. Each is listed below with its method, path, parameters, and response codes.

Identity 13

OAuth 2.0 and OpenID Connect endpoints of the King Saud University authorization server.

GET
/.well-known/openid-configuration
OpenID Connect discovery document
getOpenIdConfiguration → 200
GET
/.well-known/oauth-authorization-server
OAuth 2.0 authorization server metadata (RFC 8414)
getAuthorizationServerMetadata → 200
GET
/pf/JWKS
JSON Web Key Set
getJwks → 200
GET
/as/authorization.oauth2
Authorization endpoint
authorize 10 params → 302400
POST
/as/par.oauth2
Pushed authorization request endpoint (RFC 9126)
pushAuthorizationRequest → 201400
POST
/as/token.oauth2
Token endpoint
token body → 200400405
POST
/as/introspect.oauth2
Token introspection endpoint (RFC 7662)
introspect → 200401
POST
/as/revoke_token.oauth2
Token revocation endpoint (RFC 7009)
revokeToken → 200400
POST
/as/device_authz.oauth2
Device authorization endpoint (RFC 8628)
deviceAuthorization → 200400
POST
/as/bc-auth.ciba
CIBA backchannel authentication endpoint
backchannelAuthenticate → 200400
GET
/idp/userinfo.openid
UserInfo endpoint
getUserInfo → 200401
GET
/idp/init_logout.openid
RP-initiated logout endpoint
endSession → 302
GET
/idp/startSSO.ping
SP-initiated SAML 2.0 single sign-on
startSamlSso 1 param → 302500

Schemas 6

The contract defines 6 schemas that model the data the API accepts and returns. The most detailed are UserInfo (15 properties), ProviderMetadata (10 properties), TokenResponse (6 properties), OAuthError (2 properties). Each schema is shown below with its type and property counts.

PingError
object
The error shape actually returned by this deployment.
2 properties 2 required
TokenResponse
object
6 properties 2 required
Jwks
object
1 property 1 required
UserInfo
object
Claim names below are exactly the claimssupported array from the university's own discovery document, including its Active Directory passthrough claims.
15 properties
ProviderMetadata
object
OpenID Connect / RFC 8414 provider metadata.
10 properties 4 required
OAuthError
object
2 properties 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

king-saud-university-identity-api-openapi.yml Raw ↑

Other APIs King Saud University publishes across the network.

King Saud University identity provider in eduGAIN (via Maeen)
Crossref membership and DOI prefix
Research Organization Registry identifier
KSU learning management system (Blackboard Learn SaaS tenancy)
King Saud University Datasets API
Where this information came from

This is an independent, third-party profile of King Saud University Identity API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.