---
title: "Publish identity provider settings · Agent Wranglers"
url: https://agentwranglers.se/playbook/website/standard-addresses/openid-configuration
updated: 2026-10-20
licence: "All rights reserved"
---

# Publish identity provider settings

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Optional
- Chapter: [Standard addresses](https://agentwranglers.se/playbook/website/standard-addresses)
- Rule: If you are an OpenID identity provider, publish discovery data at `/.well-known/openid-configuration`.
- How: Serve the provider's details as JSON, as OpenID Connect Discovery 1.0 sets out. Include at least the fields in the example. The `issuer` must equal the URL the file is fetched from, minus `/.well-known/openid-configuration`.
- Check: Fetch the file. The `issuer` matches the host exactly, and the `jwks_uri` answers 200 with a JSON key set. An OIDC client library finds the provider from the issuer URL.

Example:

```json
{
  "issuer": "https://example.com",
  "authorization_endpoint": "https://example.com/oauth/authorize",
  "token_endpoint": "https://example.com/oauth/token",
  "jwks_uri": "https://example.com/.well-known/jwks.json",
  "response_types_supported": ["code"],
  "subject_types_supported": ["public"],
  "id_token_signing_alg_values_supported": ["RS256"]
}
```

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers website playbook: https://agentwranglers.se/playbook/website/standard-addresses/openid-configuration`.

- Previous: [Point to the passkey pages](https://agentwranglers.se/playbook/website/standard-addresses/passkey-endpoints)
- Next: [Publish OAuth server settings](https://agentwranglers.se/playbook/website/standard-addresses/oauth-authorization-server)
- [Standard addresses](https://agentwranglers.se/playbook/website/standard-addresses)