Discovery OpenID Configuration

GET {{authPath}}/{{envID}}/as/.well-known/openid-configuration

The following sample shows the discovery endpoint, GET /{{envID}}/as/.well-known/openid-configuration, which returns the OpenID Connect provider metadata document for the issuer, https://auth.pingone.com.

The response is a set of claims about the OpenID provider's configuration, including all necessary endpoints and public key location information.

RESPONSES

status: OK

{"issuer":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as","authorization_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/authorize","pushed_authorization_request_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/par","token_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/token","userinfo_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/userinfo","jwks_uri":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/jwks","end_session_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/signoff","introspection_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/introspect","revocation_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/revoke","device_authorization_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/device_authorization","claims_parameter_supported":false,"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_pushed_authorization_requests":false,"scopes_supported":["openid","profile","email","address","phone"],"response_types_supported":["code","id_token","token id_token","code id_token","code token","code token id_token"],"response_modes_supported":["pi.flow","query","fragment","form_post"],"grant_types_supported":["authorization_code","implicit","client_credentials","refresh_token","urn:ietf:params:oauth:grant-type:device_code"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256"],"userinfo_signing_alg_values_supported":["none"],"request_object_signing_alg_values_supported":["none","HS256","HS384","HS512","RS256","RS384","RS512"],"token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post","client_secret_jwt","private_key_jwt"],"token_endpoint_auth_signing_alg_values_supported":["HS256","HS384","HS512","RS256","RS384","RS512"],"claim_types_supported":["normal"],"claims_supported":["sub","iss","auth_time","acr","name","given_name","family_name","middle_name","preferred_username","profile","picture","zoneinfo","phone_number","updated_at","address","email","locale"],"code_challenge_methods_supported":["plain","S256"]}