/oauth2/.well-known/openid-configuration
Lets relying parties retrieve the OpenID provider configuration by HTTP GET as specified by OpenID Connect Discovery 1.0.
When the OpenID Connect provider is configured in a realm,
relying parties can get the configuration by passing in the full path to the realm in the URL.
For example, if the OpenID Connect provider is configured in a realm named alpha
,
the URL would resemble the following:
https://openam.example.com:8443/openam/oauth2/realms/root/realms/alpha/.well-known/openid-configuration
.
For more information about OpenID Connect discovery, see OpenID Connect Discovery. |
After the relying party has discovered who the provider for the end user is, they can discover the provider’s configuration:
$ [${resources.dir}/endpoints/oidc1.bash:#.well-known_openid-configuration-Relying-Party]
[${resources.dir}/endpoints/oidc1.bash:#.well-known_openid-configuration-Relying-Party-OUT]