Agent Wranglers

Standard addresses Optional

Publish identity provider settings

If you are an OpenID identity provider, publish discovery data at /.well-known/openid-configuration.

By Erik Bergstedt, Agent Wranglers. Updated .

How to do it

Serve the provider's details (issuer, endpoints, keys) as JSON.

Example

{
  "issuer": "https://example.com",
  "authorization_endpoint": "https://example.com/oauth/authorize",
  "token_endpoint": "https://example.com/oauth/token",
  "jwks_uri": "https://example.com/.well-known/jwks.json",
  "response_types_supported": ["code"],
  "subject_types_supported": ["public"],
  "id_token_signing_alg_values_supported": ["RS256"]
}

How to check

An OIDC client finds the provider from the issuer URL.

For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/standard-addresses/openid-configuration.