Discover OpenID Provider Metadata

POST {{apiPath}}/environments/{{envID}}/identityProviders

The OpenID Connect identity provider discovery endpoint takes an OIDC well-known endpoint URL in the request body and returns identity provider metadata. The POST /environments/{{envID}}/identityProviders operation uses the application/vnd.pingidentity.openid-configuration.discover+json custom media type as the content type in the request header.

Identity provider discovery settings data model

PropertyDescription
urlA string that specifies the OpenID Connect (OIDC) well-known endpoint for the identity provider.

Request Body

{"url"=>"https://Identity_Provider_oidc_well_known_endpoint"}

HEADERS

KeyDatatypeRequiredDescription
Content-Typestring

RESPONSES

status: OK

{"issuer":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as","authorization_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/authorize","claim_types_supported":["normal"],"claims_parameter_supported":false,"claims_supported":["sub","iss","auth_time","acr","name","given_name","family_name","middle_name","preferred_username","profile","picture","zoneinfo","phone_number","updated_at","address","email","locale"],"end_session_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/signoff","id_token_signing_alg_values_supported":["RS256"],"jwks_uri":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/jwks","request_object_signing_alg_values_supported":["none"],"response_types_supported":["code","id_token","token id_token"],"scopes_supported":["openid","profile","email","address","phone"],"subject_types_supported":["public"],"token_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/token","token_endpoint_auth_methods_supported":["client_secret_basic","client_secret_post"],"userinfo_endpoint":"https://auth.pingone.com/abfba8f6-49eb-49f5-a5d9-80ad5c98f9f6/as/userinfo","userinfo_signing_alg_values_supported":["none"]}