SSO SDS

Single Sign On Sumber Daya Sekolah (SSO SDS) merupakan sistem autentikasi yang dapat digunakan untuk masuk ke beberapa sistem Kemendikbudristek dan dapat menggabungkan identitas dari sistem autentikasi pihak ketiga salah satu diantaranya SSO Dapodik. SSO SDS digunakan untuk autentikasi pengguna Satuan Pendidikan (Sekolah) ke sistem yang dikembangkan oleh Penyelenggara Perdagangan melalui Sistem Elektronik (PPMSE).

Persyaratan

Sebelum PPMSE dapat menggunakan SSO SDS, PPMSE harus mengirimkan informasi redirect_uri yang akan nantinya digunakan oleh SSO SDS untuk me-redirect pengguna Satuan Pendidikan (Sekolah) setelah berhasil melakukan autentikasi dengan memasukkan username dan password. PPMSE mengirimkan informasi redirect_uri kepada Tim SDS SIPLah Kemdikbudristek melalui surat elektronik ke sds.siplah@kemdikbud.go.id dengan subject “Request Akses SSO SDS {Nama PPMSE}”. Apabila PPMSE telah mengirimkan informasi redirect_uri, maka Tim SDS SIPLah Kemdikbudristek akan mengirimkan surat elektronik yang berisi informasi sebagai berikut:

Client ID: client_id
Client Secret: client_secret
Credentials pengguna Satuan Pendidikan (Sekolah) SSO Dapodik:
1. Username: username
2. Password: password

Base URL API SSO SDS

Base URL API SSO SDS versi development/UAT adalah https://sds-sso-ppmse.staging.belajar.id.

Alur Untuk Mendapatkan Access Token

SSO SDS sudah mengikuti standar spesifikasi OAuth 2.0 sehingga dapat menggunakan client library yang mengikuti spesifikasi OAuth 2.0. Salah satu contoh client library yang sudah mengikuti spesifikasi OAuth 2.0 adalah https://github.com/golang/oauth2. Untuk melihat konfigurasi yang terdapat pada SSO SDS dapat melalui tautan berikut:

GET {base_url_sso_sds}/.well-known/openid-configuration

Apabila tidak menggunakan client library OAuth 2.0, PPMSE dapat mengikuti langkah-langkah di bawah untuk autentikasi pengguna Satuan Pendidikan (Sekolah) melalui SSO SDS. Berikut langkah-langkah yang harus dilakukan:

1. Halaman Autentikasi SSO SDS

PPMSE mengarahkan pengguna Satuan Pendidikan (Sekolah) ke halaman ini untuk melakukan login menggunakan akun Dapodik.

Endpoint

GET {base_url_sso_sds}/login/oauth/authorize?client_id={clientId}&response_type=code&redirect_uri={redirectUri}&scope={scope}&state={state}

Query Parameter

Nama	Tipe Data	Mandatori	Keterangan
`client_id`	string	Ya	ID client berupa alphanumeric yang diberikan oleh Tim SDS SIPLah Kemdikbudristek kepada setiap PPMSE
`response_type`	string	Ya	Gunakan nilai `code`
`redirect_uri`	string	Ya	Uri yang diajukan oleh setiap PPMSE kepada Tim SDS SIPLah Kemdikbudristek
`scope`	string	Ya	Gunakan nilai `read`
`state`	string	Ya	State yang dikirimkan oleh setiap sistem PPMSE pada request login akan dikembalikan oleh SSO SDS saat redirect pengguna kembali ke sistem setiap PPMSE. State dapat dipakai oleh sistem PPMSE untuk melakukan verifikasi bahwa request login memang berasal dari sistem PPMSE RFC

Contoh halaman autentikasi PPMSE

Misalkan client_id PPMSE adalah fb03b2da7564ddd7b667 maka URL autentikasinya adalah https://sds-sso-ppmse.staging.belajar.id/login/oauth/authorize?client_id=fb03b2da7564ddd7b667&response_type=code&redirect_uri=https%3A%2F%2Fsiplah.ppmse.id%2Fcallback&scope=read&state=y6lwrvg38w

sso-landing-page

2. Redirect Pengguna ke Halaman PPMSE

Apabila pengguna Satuan Pendidikan (Sekolah) telah memasukkan username dan password dengan benar, maka SSO SDS akan mengarahkan pengguna kembali ke halaman PPMSE ke redirect_uri yang telah dikirimkan oleh PPMSE kepada Tim SDS Kemdikbudristek beserta dengan query parameter code dan state.

Endpoint

GET {redirect_url_calon_ppmse}/callback?code={code}&state={state}

Query Parameter

Nama	Tipe Data	Mandatori	Keterangan
`code`	string	Ya	Kode autentikasi yang diberikan kepada pengguna Satuan Pendidikan (Sekolah) setelah memasukkan username dan password yang benar
`state`	string	Ya	State yang dikirimkan oleh setiap sistem PPMSE pada request login akan dikembalikan oleh SSO SDS saat redirect pengguna kembali ke sistem setiap PPMSE. State dapat dipakai oleh sistem PPMSE untuk melakukan verifikasi bahwa request login memang berasal dari sistem PPMSE RFC

Contoh redirect pengguna ke halaman PPMSE disertai dengan query parameter code dan state

Misalkan redirect_uri PPMSE adalah https://siplah.ppmse.id/callback, maka pengguna akan diarahkan ke halaman https://siplah.ppmse.id/callback?code=ddc05f366fad9581c204&state=7fphen66bh9 setelah berhasil memasukkan username dan password.

3. Request Access Token

Setelah mendapatkan code pada langkah sebelumnya, selanjutnya PPMSE melakukan request access token yang nantinya akan digunakan untuk mendapatkan data Pengguna Satuan Pendidikan (Sekolah).

Endpoint

POST {base_url_sso_sds}/api/login/oauth/access_token?grant_type=authorization_code&client_id={clientId}&client_secret={clientSecret}&code={code}

Query Parameter

Nama	Tipe Data	Mandatori	Keterangan
`grant_type`	string	Ya	Gunakan nilai `authorization_code`
`client_id`	string	Ya	ID client berupa alphanumeric yang diberikan oleh Tim SDS SIPLah Kemdikbudristek kepada setiap PPMSE
`client_secret`	string	Ya	Secret client berupa alphanumeric yang diberikan oleh Tim SDS SIPLah Kemdikbudristek kepada setiap PPMSE
`code`	string	Ya	Kode autentikasi yang diberikan kepada pengguna Satuan Pendidikan (Sekolah) pada langkah 2

Response

Apabila PPMSE telah menyertakan query parameter berupa grant_type, client_id, client_secret dan code dengan benar, maka SSO SDS akan mengembalikan response application/json diantaranya access_token yang nantinya akan digunakan untuk mendapatkan data pengguna Satuan Pendidikan (Sekolah) dan refresh_token yang nantinya dapat digunakan untuk melakukan Refresh Access Token.

Contoh Response

{
  "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImNlcnQtc2RzIiwidHlwIjoiSldUIn0.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.Jh5B8Z8r-9wrUaxUK5SUWtdbcw97T_Eh_uc5oXQNirvgAEpb-_13sJomxSu1mdOYPurAtCJYbip3vNFU3_BqaU7mj2CBBAED3slUBZpbj42YHIA0eTfkt90XxTAZIEzKo7TrxT6QYtq37RrVdEb_MI2zD0YDOslBlmuddLgcbq6_WjYatVBhv29Mt2TNfmOOaHjQRmtd--nLR-AWTurTezQCCjtmp26NVFofnkZpI-zpYcwT9wHIZvh4pWi0bsQOSDTYL_9340nr40bHW1mFCLneRlAIC59MyWqcAIuLPeGXjCVZNgzIf4wyLn5KcDoVNJBYN8jeGahMnBsVgd4u203QxGpqlZibZDogrsbOZFza15mmjBoGTUdJNAig6zuTI6jGdR95NV4cmXaS2eM5Hq3UeO9tGr2O5XcI1boFvFW1ZP4EETwiJQzjtQWkVMKRZZ23lEJ1uSgQ9fyAMOKQ7A-TtmaItYSwM6ENURhHXs9JYTm9Thy91JZjFqEiTJsO9iov-mzHBZtJJdL8iasO4ZQFFNt7ckAvwNtFCa3tCfmfystfrfE_Vfplfxkd-0J7-45h2w-SueWXhkJYODbKaY523NPTpbVD1VDsfDP4bGksP_PpKlDTXR6hgts7Wo-gGw1r24JxIRrzW0V28pDIwMxw7icxWS_uA9Eon5Jp1IY",
  "id_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImNlcnQtc2RzIiwidHlwIjoiSldUIn0.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.Jh5B8Z8r-9wrUaxUK5SUWtdbcw97T_Eh_uc5oXQNirvgAEpb-_13sJomxSu1mdOYPurAtCJYbip3vNFU3_BqaU7mj2CBBAED3slUBZpbj42YHIA0eTfkt90XxTAZIEzKo7TrxT6QYtq37RrVdEb_MI2zD0YDOslBlmuddLgcbq6_WjYatVBhv29Mt2TNfmOOaHjQRmtd--nLR-AWTurTezQCCjtmp26NVFofnkZpI-zpYcwT9wHIZvh4pWi0bsQOSDTYL_9340nr40bHW1mFCLneRlAIC59MyWqcAIuLPeGXjCVZNgzIf4wyLn5KcDoVNJBYN8jeGahMnBsVgd4u203QxGpqlZibZDogrsbOZFza15mmjBoGTUdJNAig6zuTI6jGdR95NV4cmXaS2eM5Hq3UeO9tGr2O5XcI1boFvFW1ZP4EETwiJQzjtQWkVMKRZZ23lEJ1uSgQ9fyAMOKQ7A-TtmaItYSwM6ENURhHXs9JYTm9Thy91JZjFqEiTJsO9iov-mzHBZtJJdL8iasO4ZQFFNt7ckAvwNtFCa3tCfmfystfrfE_Vfplfxkd-0J7-45h2w-SueWXhkJYODbKaY523NPTpbVD1VDsfDP4bGksP_PpKlDTXR6hgts7Wo-gGw1r24JxIRrzW0V28pDIwMxw7icxWS_uA9Eon5Jp1IY",
  "refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.aDH9F0untelDUzVlMV-xIDQdllflkaoaABZn0kb4XhBN7rln-n4_Zodfayr-vgztK86SaKzcjQ04Bw3cbErsw3Ttb2-AopuPxXVKjNDldJMaeEOOoLD7vFwe3u-FLo5vkCTSu0LiX9HnbGkysD0b9eRi27fe1DGdmJMU_hsXuTTpHnVx8ubcqDOQ8mtHSlmJZtvMoPak-_ZDWUFu3X-WD9F0VkBPxHTCcoEGiNb8FXuiIPqZ1udXPSCc5Kkj5mARHpG2xfid1EWS32LwsDcJpzAkoqUpB_ODP-2LvpjMKtiqu3WQEo-7LX7lrRPXIEBr8C4x1L5dydlf-Ti2XejmYLsEkEsVAFZqIy2u8qdH_-pVftENOlwy-Lo1iw51hyV8q8UhD8m7jmneWL2-iAiz3qSC-UaMZubJ2dleeeUC-aj2hhXpWMEqhXh0Rl5-mA-uWMAS_VquWjIiCUn2e0wMJydVQhBEDQd5aFn7jun7_CZsHHIyHgbBt3KRy5FKc99bWDE4JcREdL9teij_SgPirlE9uBXkG_WwqSpItjX0gwFeH3_YYt87dWiVjAH6v2jUHIB0FjRpgN-knJsm2iyMX2d4szUtD9UBh7yVFNLh0DYQ1UfsImjVpvnfKbwNKZIrSxOE27NOTjMaKPBkroJV5vdvdqVs662zpLuC-Bv0Wu8",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "read"
}

Contoh Postman

request-access-token-postman

4. Refresh Token

Setelah mendapatkan refresh_token pada langkah sebelumnya, selanjutnya PPMSE dapat melakukan refresh access token untuk memperpanjang durasi dari access token dan mendapatkan refresh token yang baru.

Endpoint

POST {base_url_sso_sds}/api/login/oauth/refresh_token?grant_type=refresh_token&refresh_token={refreshToken}&scope={scope}&client_id={clientId}

Query Parameter

Nama	Tipe Data	Mandatori	Keterangan
`grant_type`	string	Ya	Gunakan nilai `refresh_token`
`refresh_token`	string	Ya	Kode berupa JWT yang didapat pada langkah 3 atau langkah 4
`scope`	string	Ya	Gunakan nilai `read`
`client_id`	string	Ya	ID client berupa alphanumeric yang diberikan oleh Tim SDS SIPLah Kemdikbudristek kepada setiap PPMSE

Response

Apabila PPMSE telah menyertakan query parameter berupa grant_type, refresh_token, scope, dan client_id dengan benar, maka SSO SDS akan mengembalikan response application/json diantaranya access_token yang nantinya akan digunakan untuk mendapatkan data pengguna Satuan Pendidikan (Sekolah) dan refresh_token yang nantinya dapat digunakan untuk melakukan Refresh Token.

Contoh Response

{
  "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImNlcnQtc2RzIiwidHlwIjoiSldUIn0.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.ixvwtxkfROLhm_pMBb_IvPQViO5yiiTO6hfLZmisfTaet-rSlKSUjRfUJf4nYltTjmQk_LzTPlIBZysBuSqbpgmqHclBdciwQ1lvRzn48LMZvCJ706T8xyr-p9CXrJlRjVQjCF5qAFlZITocSbGQZ3pxLNZVgozplAr9sTp7kmtFIUUhmuvAx1sa2_9h1noio7LgUgmkIWxevU-K58cXI-KFJ8uPQQE1Dw-6KVCQbA9V2e1icNqNqcUq8bydlfZ6Wuoz7ZmogfVw23Lyw8azFOT8tzqdCt2HwQjp_XYdUEIiTOmHnzA6ZIDpSyGr5MmTpk_H9dDKr5hYZwNAYjlhGU9GP2E5VV3G53STn1Cfs82QUZ20vSIjOAyweZGTn8NONsODkb-4GQtLjTArlf-CwAOjCLXUSU_4ta4rgt4RMTbaO85hhfXHIYMuNwDorAYs0g84wlbQ_JYnIolll-WLq7wzsdH96GJmLGUN1FEJu3XBYVharh7I86hkfkT-XFf9J-sUoGaYwbKVFW-bu-TUK52H-4KqqnNO37pgstpEVOP_jPCu1UVDtrMCGqCnQSdjQVetk4ICjwoaPNO6ViT2NjlJoOvpnErO_A4pSE4UvDzkPT7OOAqzpoQd_AD10kk2Ev_pQrFwr8qp5FF5TZ7Y4F6Pg4TLNPQ-m97RvOh-5jo",
  "id_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6ImNlcnQtc2RzIiwidHlwIjoiSldUIn0.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.ixvwtxkfROLhm_pMBb_IvPQViO5yiiTO6hfLZmisfTaet-rSlKSUjRfUJf4nYltTjmQk_LzTPlIBZysBuSqbpgmqHclBdciwQ1lvRzn48LMZvCJ706T8xyr-p9CXrJlRjVQjCF5qAFlZITocSbGQZ3pxLNZVgozplAr9sTp7kmtFIUUhmuvAx1sa2_9h1noio7LgUgmkIWxevU-K58cXI-KFJ8uPQQE1Dw-6KVCQbA9V2e1icNqNqcUq8bydlfZ6Wuoz7ZmogfVw23Lyw8azFOT8tzqdCt2HwQjp_XYdUEIiTOmHnzA6ZIDpSyGr5MmTpk_H9dDKr5hYZwNAYjlhGU9GP2E5VV3G53STn1Cfs82QUZ20vSIjOAyweZGTn8NONsODkb-4GQtLjTArlf-CwAOjCLXUSU_4ta4rgt4RMTbaO85hhfXHIYMuNwDorAYs0g84wlbQ_JYnIolll-WLq7wzsdH96GJmLGUN1FEJu3XBYVharh7I86hkfkT-XFf9J-sUoGaYwbKVFW-bu-TUK52H-4KqqnNO37pgstpEVOP_jPCu1UVDtrMCGqCnQSdjQVetk4ICjwoaPNO6ViT2NjlJoOvpnErO_A4pSE4UvDzkPT7OOAqzpoQd_AD10kk2Ev_pQrFwr8qp5FF5TZ7Y4F6Pg4TLNPQ-m97RvOh-5jo",
  "refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.BzdMk-AdBI4YWdASsECIXVroFthZAh2-X9WczCnQ7AMJ7LhXSTuWlMPqdUXi4oi5qdrDjcugAl4iTWmV8vzYI1t4PXri4BCVuh7e7f9a-dMEMDae-hoeaUjLrh22h7MWHOew8WeJJoOmxGvSl-A_kfZOOGyA9y-zS5vku9W0Tnq6ztAoSi7SG3Zr3gLl3Ylh5czbYyKy16ivET64l_6P5YMgnmMKnoCateM-k_XE5Bg4bLuQEcghYS3SOHG_vnMnmMwi5I5nbqI2L2Z9RRYvW9vBHiAbyySl6hbkp-xdxlFyf2qgxocFx2QYa6waYMYwG4fAJbXX6PHkeUEjkUYWCN91HKijFMDqZj95LOutIfGGAMPevh8qxD5cPzWbl55UOm3heCn6M3qKlBNGmeU06cP-lbNHWk2OYWkqUCNBtMLHo1vzxY2Ww5fxE30O6uog2n4skGnxjryZbZgGAJgRZhCT0XdEGYf9TyKXXR--x428o0LWQFUH2jxSiDrVy4gqfW27h-koCjQpL7Qi6ZyL4ueeAndJ-tIxYpNZOzPgkiRzWibRo6WO8IP7fNJYSF-lMAlmxh5SDusV_JLjeFSRaxOjm7uQkDWu7Cb_vzH1r8rxMTmkHQSxrhFBeBrpuOBZ203aN7SCPgOPslpmezdUgyro-t_h6zR_fZ7GKo0KkX4",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "read"
}

Contoh Postman

refresh-token-postman

Data Pengguna Satuan Pendidikan (Sekolah)

PPMSE bisa mendapatkan data pengguna Satuan Pendidikan (Sekolah) melalui endpoint ini.

Endpoint

GET {base_url_sso_sds}/api/get-account

Request Header

Nama	Tipe Data	Mandatori	Keterangan
`Authorization`	string	Ya	Menggunakan tipe Bearer dengan format sebagai berikut: `Bearer {access_token}` Untuk `access_token` didapat dari Alur Untuk Mendapatkan Token pada langkah 3 atau langkah 4

Contoh Response

{
    "status": "ok",
    "msg": "",
    "sub": "c601fb0f-76df-41bc-9d45-6a96959296fb",
    "name": "User Test 2022",
    "data": {
        "owner": "sds",
        "name": "User Test 2022",
        "createdTime": "2023-09-19T09:04:51Z",
        "updatedTime": "",
        "id": "c601fb0f-76df-41bc-9d45-6a96959296fb",
        "type": "normal-user",
        "password": "***",
        "passwordSalt": "",
        "passwordType": "bcrypt",
        "displayName": "batam01@datadik.id",
        "firstName": "",
        "lastName": "",
        "avatar": "https://casbin.org/img/casbin.svg",
        "avatarType": "",
        "permanentAvatar": "",
        "email": "batam01@datadik.id",
        "emailVerified": false,
        "phone": "",
        "countryCode": "",
        "region": "",
        "location": "",
        "address": [],
        "affiliation": "",
        "title": "",
        "idCardType": "",
        "idCard": "",
        "homepage": "",
        "bio": "",
        "tag": "",
        "language": "",
        "gender": "",
        "birthday": "",
        "education": "",
        "score": 0,
        "karma": 0,
        "ranking": 705,
        "isDefaultAvatar": false,
        "isOnline": false,
        "isAdmin": false,
        "isForbidden": false,
        "isDeleted": false,
        "signupApplication": "rencana-belanja",
        "hash": "",
        "preHash": "",
        "accessKey": "",
        "accessSecret": "",
        "createdIp": "",
        "lastSigninTime": "",
        "lastSigninIp": "",
        "github": "",
        "google": "",
        "qq": "",
        "wechat": "",
        "facebook": "",
        "dingtalk": "",
        "weibo": "",
        "gitee": "",
        "linkedin": "",
        "wecom": "",
        "lark": "",
        "gitlab": "",
        "adfs": "",
        "baidu": "",
        "alipay": "",
        "casdoor": "",
        "infoflow": "",
        "apple": "",
        "azuread": "",
        "slack": "",
        "steam": "",
        "bilibili": "",
        "okta": "",
        "douyin": "",
        "line": "",
        "amazon": "",
        "auth0": "",
        "battlenet": "",
        "bitbucket": "",
        "box": "",
        "cloudfoundry": "",
        "dailymotion": "",
        "deezer": "",
        "digitalocean": "",
        "discord": "",
        "dropbox": "",
        "eveonline": "",
        "fitbit": "",
        "gitea": "",
        "heroku": "",
        "influxcloud": "",
        "instagram": "",
        "intercom": "",
        "kakao": "",
        "lastfm": "",
        "mailru": "",
        "meetup": "",
        "microsoftonline": "",
        "naver": "",
        "nextcloud": "",
        "onedrive": "",
        "oura": "",
        "patreon": "",
        "paypal": "",
        "salesforce": "",
        "shopify": "",
        "soundcloud": "",
        "spotify": "",
        "strava": "",
        "stripe": "",
        "tiktok": "",
        "tumblr": "",
        "twitch": "",
        "twitter": "",
        "typetalk": "",
        "uber": "",
        "vk": "",
        "wepay": "",
        "xero": "",
        "yahoo": "",
        "yammer": "",
        "yandex": "",
        "zoom": "",
        "metamask": "",
        "web3onboard": "",
        "custom": "9978B89A-CE17-4F1C-BFAF-DCC42D85A37D",
        "webauthnCredentials": null,
        "preferredMfaType": "",
        "recoveryCodes": null,
        "totpSecret": "",
        "mfaPhoneEnabled": false,
        "mfaEmailEnabled": false,
        "multiFactorAuths": [
            {
                "enabled": false,
                "isPreferred": false,
                "mfaType": "sms"
            },
            {
                "enabled": false,
                "isPreferred": false,
                "mfaType": "email"
            },
            {
                "enabled": false,
                "isPreferred": false,
                "mfaType": "app"
            }
        ],
        "ldap": "",
        "properties": {
            "no": "706",
            "oauth_Custom_avatar_url": "https://casbin.org/img/casbin.svg",
            "oauth_Custom_display_name": "batam01@datadik.id",
            "oauth_Custom_email": "batam01@datadik.id",
            "oauth_Custom_id": "9978B89A-CE17-4F1C-BFAF-DCC42D85A37D",
            "oauth_Custom_infosp_alamat": "Komplek Perumahan Sei Panas",
            "oauth_Custom_infosp_bentuk_pendidikan": "SMP",
            "oauth_Custom_infosp_bujur": "104.031400000000",
            "oauth_Custom_infosp_desa": "Sungai Panas",
            "oauth_Custom_infosp_email": "smp10btm@gmail.com",
            "oauth_Custom_infosp_email_kepsek": "afridal66@gmail.com",
            "oauth_Custom_infosp_hp_kepsek": "081212002427",
            "oauth_Custom_infosp_kab": "Kota Batam",
            "oauth_Custom_infosp_kd_kab": "316000  ",
            "oauth_Custom_infosp_kd_kec": "316012  ",
            "oauth_Custom_infosp_kd_prov": "310000  ",
            "oauth_Custom_infosp_kec": "Kec. Batam Kota",
            "oauth_Custom_infosp_kode_pos": "29432",
            "oauth_Custom_infosp_lintang": "1.136300000000",
            "oauth_Custom_infosp_nama_bendahara_bos": "Ospriyanti Puswita",
            "oauth_Custom_infosp_nama_kepsek": "Afridal",
            "oauth_Custom_infosp_nama_sekolah": "SMP NEGERI 10 BATAM",
            "oauth_Custom_infosp_nip_bendahara_bos": "197210252006042026",
            "oauth_Custom_infosp_nip_kepsek": "196604011994121005",
            "oauth_Custom_infosp_nomor_telepon": "0778429093",
            "oauth_Custom_infosp_npsn": "11000377",
            "oauth_Custom_infosp_npwp": "003928876215000",
            "oauth_Custom_infosp_prov": "Prov. Kepulauan Riau",
            "oauth_Custom_infosp_sekolah_id": "A08560BD-31F5-E011-B806-A187FEE25058",
            "oauth_Custom_infosp_status": "Negeri",
            "oauth_Custom_infosp_zona": "4",
            "oauth_Custom_profile_jabatan": "Kepala Sekolah",
            "oauth_Custom_profile_jenis": "Kepala Sekolah",
            "oauth_Custom_profile_nik": "2171110104669002",
            "oauth_Custom_profile_nip": "196604011994121005",
            "oauth_Custom_profile_pengguna_id": "9978B89A-CE17-4F1C-BFAF-DCC42D85A37D",
            "oauth_Custom_profile_peran": "PTK",
            "oauth_Custom_profile_peran_id": "53",
            "oauth_Custom_profile_ptk_id": "3908B575-680F-E211-BBB1-830F0E9FA7FC",
            "oauth_Custom_username": "User Test 2022"
        },
        "roles": [],
        "permissions": [],
        "groups": [],
        "lastSigninWrongTime": "",
        "signinWrongTimes": 0,
        "managedAccounts": null
    },
    "data2": {
        "owner": "admin",
        "name": "sds",
        "createdTime": "2023-04-27T14:45:04+07:00",
        "displayName": "SDS",
        "websiteUrl": "https://door.casdoor.com",
        "favicon": "https://cdn.casbin.org/img/favicon.png",
        "passwordType": "bcrypt",
        "passwordSalt": "",
        "passwordOptions": null,
        "countryCodes": [
            "ID"
        ],
        "defaultAvatar": "https://cdn.casbin.org/img/casbin.svg",
        "defaultApplication": "",
        "tags": [],
        "languages": [
            "id"
        ],
        "themeData": {
            "themeType": "default",
            "colorPrimary": "#5734d3",
            "borderRadius": 2,
            "isCompact": true,
            "isEnabled": true
        },
        "masterPassword": "",
        "initScore": 0,
        "enableSoftDeletion": true,
        "isProfilePublic": true,
        "mfaItems": null,
        "accountItems": [
            {
                "name": "Organization",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Admin"
            },
            {
                "name": "ID",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Immutable"
            },
            {
                "name": "Name",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Admin"
            },
            {
                "name": "Display name",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Avatar",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "User type",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Admin"
            },
            {
                "name": "Password",
                "visible": true,
                "viewRule": "Self",
                "modifyRule": "Self"
            },
            {
                "name": "Email",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Phone",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Country/Region",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Location",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Affiliation",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Title",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Homepage",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Bio",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Self"
            },
            {
                "name": "Tag",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Admin"
            },
            {
                "name": "Signup application",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Admin"
            },
            {
                "name": "Roles",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Immutable"
            },
            {
                "name": "Permissions",
                "visible": true,
                "viewRule": "Public",
                "modifyRule": "Immutable"
            },
            {
                "name": "3rd-party logins",
                "visible": true,
                "viewRule": "Self",
                "modifyRule": "Self"
            },
            {
                "name": "Properties",
                "visible": false,
                "viewRule": "Admin",
                "modifyRule": "Admin"
            },
            {
                "name": "Is admin",
                "visible": true,
                "viewRule": "Admin",
                "modifyRule": "Admin"
            },
            {
                "name": "Is global admin",
                "visible": true,
                "viewRule": "Admin",
                "modifyRule": "Admin"
            },
            {
                "name": "Is forbidden",
                "visible": true,
                "viewRule": "Admin",
                "modifyRule": "Admin"
            },
            {
                "name": "Is deleted",
                "visible": true,
                "viewRule": "Admin",
                "modifyRule": "Admin"
            }
        ]
    }
}

Contoh Postman

get-account-postman

Logout Pengguna Satuan Pendidikan (Sekolah)

PPMSE dapat menggunakan endpoint ini untuk logout pengguna Satuan Pendidikan (Sekolah)

Endpoint

POST {base_url_sso_sds}/api/logout-all

Request Header

Nama	Tipe Data	Mandatori	Keterangan
`Authorization`	string	Ya	Menggunakan tipe Bearer dengan format sebagai berikut: `Bearer {access_token}` Untuk `access_token` didapat dari Alur Untuk Mendapatkan Token pada langkah 3 atau langkah 4

Contoh Response

{
    "status": "ok",
    "msg": "",
    "sub": "",
    "name": "",
    "data": null,
    "data2": null
}

Contoh Postman

get-account-postman

Daftar Pesan Error

Pesan Error	Keterangan
Access token has expired	Menggunakan Access Token yang telah kedaluwarsa saat mengakses API yang membutuhkan Access Token
Please login first	Tidak menggunakan Access Token saat mengakses API yang membutuhkan Access Token
URI pengalihan: {redirect uri} tidak ada dalam daftar URI Pengalihan yang diizinkan	Aplikasi dengan `app_id` tersebut telah dibatasi atau tidak diizinkan menggunakan SSO Dapodik.
Invalid client_id = ID klien tidak valid	Aplikasi membutuhkan pengguna dapodik dengan peran yang berbeda. Misal aplikasi yang membutuhkan akses dengan jenis pengguna Kepala Sekolah, namun pengguna tersebut adalah Guru Mata Pelajaran atau jenis lainnya.
Authorization code has been used	Menggunakan code yang telah dipakai sebelumnya untuk me-request access token
Refresh token is invalid, expired or revoked	Menggunakan refresh_token yang telah dipakai atau telah kedaluwarsa untuk me-request token baru
Not Found	Beberapa hal yang mungkin terjadi: 1. Jenis request ke alamat tersebut tidak sesuai, misal membutuhkan method POST tapi aplikasi menggunakan GET. 2. Alamat yang diakses tidak valid.
Gagal melakukan proses autentikasi, username dan password yang anda masukkan tidak cocok	Kombinasi username dan password yang digunakan oleh user tidak cocok, beberapa hal yang mungkin terjadi: 1. password tidak sesuai (case-sensitive). 2. pengguna tidak aktif. 3. pengguna telah dihapus. 4. untuk tingkat sekolah data pengguna belum tersinkron dengan server dapodik.

11 Desember 2023

Perubahan URL SSO SDS Sandbox dari https://sds-sso.staging.belajar.id menjadi https://sds-sso-ppmse.staging.belajar.id).
Perubahan path URL SSO SDS Sandbox dari .../api/oauth/... menjadi .../api/login/oauth/...).

Persyaratan​

Base URL API SSO SDS​

Alur Untuk Mendapatkan Access Token​

1. Halaman Autentikasi SSO SDS​

2. Redirect Pengguna ke Halaman PPMSE​

3. Request Access Token​

4. Refresh Token​

Data Pengguna Satuan Pendidikan (Sekolah)​

Logout Pengguna Satuan Pendidikan (Sekolah)​

Daftar Pesan Error​

11 Desember 2023​