generated: '2026-08-30'
method: probed
source: >-
  Live probes of HKBU-operated hosts on 2026-08-30, plus the eduGAIN entity registry and the
  Crossref members API. No conformance is asserted from prose; every entry below names the URL
  and the status code it was read from.
regime: education
note: >-
  Domain standards are read against the education regime's standards[] list — scim, lti,
  oneroster, ed-fi, caliper, qti, oai-pmh, shibboleth, saml, orcid, datacite, crossref.
  Reward-only: an absent standard is recorded as conforms false with the negative probe that
  established it, never left blank and never invented. Where a standard is met by a surface
  HKBU does not operate, the operator is stated and the conformance is NOT credited to the
  institution.
standards:
- id: shibboleth
  conforms: true
  operator: institution
  evidence: >-
    https://buidp01.hkbu.edu.hk/idp/shibboleth returns HTTP 200, application/xml, 12,306 bytes.
    The IDPSSODescriptor advertises protocolSupportEnumeration including urn:mace:shibboleth:1.0
    with a urn:mace:shibboleth:1.0:profiles:AuthnRequest endpoint at
    https://buidp01.hkbu.edu.hk/idp/profile/Shibboleth/SSO, and the metadata carries
    <shibmd:Scope>hkbu.edu.hk</shibmd:Scope>. A Shibboleth IdP operated by HKBU on HKBU's domain.
- id: saml
  conforms: true
  operator: institution
  evidence: >-
    The same metadata document declares SAML 2.0 and SAML 1.1 support across nine endpoints:
    SAML2 HTTP-POST (/idp/profile/SAML2/POST/SSO), HTTP-POST-SimpleSign, HTTP-Redirect
    (/idp/profile/SAML2/Redirect/SSO), SOAP ArtifactResolution and AttributeQuery on port 8443,
    SAML1 SOAP ArtifactResolution and AttributeQuery, and SingleLogout via HTTP-Redirect. Both an
    IDPSSODescriptor and an AttributeAuthorityDescriptor are present. The entity is registered in
    eduGAIN by the Hong Kong Access Federation (regauth https://hkaf.edu.hk, code HKAF),
    first seen 2018-03-14, displayName "Hong Kong Baptist University".
- id: lti
  conforms: true
  operator: institution
  evidence: >-
    HKBU's self-hosted Moodle at buelearning.hkbu.edu.hk publishes an IMS LTI 1.3 Advantage
    tool-platform key set at https://buelearning.hkbu.edu.hk/mod/lti/certs.php (HTTP 200, one RSA
    RS256 JWK, kid 233f84e26d75aa18234e, use sig) and an OAuth2 client-credentials token endpoint
    at https://buelearning.hkbu.edu.hk/mod/lti/token.php (HTTP 400 {"error":"invalid_request"}
    when called without a grant, i.e. present and validating). The signing key is HKBU's.
- id: crossref
  conforms: true
  operator: institution
  evidence: >-
    HKBU is Crossref member 10204 (https://api.crossref.org/members/10204, HTTP 200) with DOI
    prefix 10.24112, located Kowloon, Hong Kong SAR China, and 1,763 deposited DOIs
    (139 current, 1,624 backfile). The institution is the depositor of record.
- id: oai-pmh
  conforms: partial
  operator: tenant
  credited: false
  evidence: >-
    https://scholars.hkbu.edu.hk/ws/oai?verb=Identify returns HTTP 401, not 404 — the OAI-PMH
    verb interface exists but is access-restricted, so no Identify response could be read to
    confirm the protocol version or repository identity. The host is an Elsevier Pure tenancy
    (scholars.hkbu.edu.hk is a CNAME to hkbu.elsevierpure.com), so the endpoint is Pure's
    implementation running under HKBU's name. Recorded for completeness and explicitly NOT
    credited to the institution.
- id: scim
  conforms: false
  evidence: >-
    /scim/v2/Users returns HTTP 404 on both genai.hkbu.edu.hk and buelearning.hkbu.edu.hk, and no
    SCIM endpoint was found on any HKBU host. HKBU's account provisioning is described on
    ito.hkbu.edu.hk as an internal SSOid process (User Account (SSOid) Management Policy) with no
    external provisioning interface.
- id: orcid
  conforms: false
  evidence: >-
    No ORCID surface was found. The HKBU Scholars landing page (https://scholars.hkbu.edu.hk/,
    HTTP 200) contains zero occurrences of the string "orcid", and the Pure Web Service API that
    would expose ORCID identifiers is 401-gated and is Elsevier's contract in any case.
- id: datacite
  conforms: false
  evidence: >-
    The DataCite REST API returns zero results for HKBU as either a provider
    (https://api.datacite.org/providers?query=baptist, meta.total 0) or a repository client
    (https://api.datacite.org/clients?query=hkbu, meta.total 0). HKBU mints DOIs through Crossref,
    not DataCite.
- id: oneroster
  conforms: false
  evidence: >-
    No IMS OneRoster endpoint was found on any HKBU host, and the Moodle deployment advertises
    only LTI 1.3 and Moodle Web Services. HKBU publishes no roster interchange surface.
- id: ed-fi
  conforms: false
  evidence: >-
    Ed-Fi is a US K-12 data standard with no adoption path for a Hong Kong UGC-funded university;
    no Ed-Fi ODS or API surface was found on any HKBU host.
- id: caliper
  conforms: false
  evidence: >-
    No IMS Caliper Analytics event store or sensor endpoint was found. The Moodle deployment
    exposes no /caliper path and no Caliper endpoint is advertised in its LTI configuration.
- id: qti
  conforms: false
  evidence: >-
    No QTI import/export or assessment-interchange endpoint is publicly reachable; Moodle's QTI
    handling, if enabled, sits behind institutional login at buelearning.hkbu.edu.hk.