Reference
OIDC discovery document
Says who this issuer is and where its public keys live.
GET
/.well-known/openid-configurationSays who this issuer is and where its public keys live. Entra, Google and your own Vault fetch it to verify the workload tokens we mint, so it is public and holds nothing secret.
Response Body
application/json
application/json
curl -X GET "https://example.com/.well-known/openid-configuration"{ "issuer": "http://example.com", "jwks_uri": "http://example.com", "response_types_supported": [ "string" ], "subject_types_supported": [ "string" ], "id_token_signing_alg_values_supported": [ "string" ], "claims_supported": [ "string" ]}