OpenID Connect Discovery

What is OpenID Connect Discovery ?

The main purposes of OpenID Connect Discovery are to,

Issuer discovery

OpenID Provider issuer discovery refers to the process of determining the location of the OpenID Provider. Following information is required when making a request to discover the issuer's location.

Parameter Description Sample Value
Resource Identifier for the target end user that is the subject of the discovery request. acct:[email protected]
HostServer Where the WebFinger service is hosted. localhost
rel URI identifying the type of service whose location is being requested.

The following endpoint is responsible for revealing the OpenID Provider's issuer after validating the required parameters (Resource, Host and rel).


Expose metadata

The OpenID provider exposes a JSON document listing all the metadata of the server. This document contains standard endpoints and other server supported metadata values. The target audience of this file are the client application developers who send requests to the server.

The following endpoint is responsible for exposing the server's metadata.


A sample JSON file that containing the server metadata is shown below.

        "scopes_supported": [
        "check_session_iframe": "https://localhost:9443/oidc/checksession",
        "issuer": "https://localhost:9443/oauth2/token",
        "authorization_endpoint": "https://localhost:9443/oauth2/authorize",
        "claims_supported": [
        "token_endpoint": "https://localhost:9443/oauth2/token",
        "response_types_supported": [
            "id_token token",
        "end_session_endpoint": "https://localhost:9443/oidc/logout",
        "userinfo_endpoint": "https://localhost:9443/oauth2/userinfo",
        "jwks_uri": "https://localhost:9443/oauth2/jwks",
        "subject_types_supported": [
        "id_token_signing_alg_values_supported": [
        "registration_endpoint": "https://localhost:9443/identity/connect/register"