---
title: Discovery document URI
description: Use the Discovery document URI in PingOne is a discovery endpoint that identifies the location of the OpenID Provider and configuration metadata.
component: pingone
page_id: pingone:integrations:p1_discovery_document_uri
canonical_url: https://docs.pingidentity.com/pingone/integrations/p1_discovery_document_uri.html
revdate: April 23, 2025
---

# Discovery document URI

The Discovery document URI is a discovery endpoint that identifies the location of the OpenID Provider (OP) *(tooltip: \<div class="paragraph">
\<p>In OAuth terms, an authorization server (AS). The OP/AS issues access tokens to protected resources for approved clients (relying parties). The clients use the access token to access the protected resources hosted by the OAuth resource server.\</p>
\</div>)*, as well as metadata about its configuration. You can use the Discovery document URI to populate the configuration for the OP in PingOne.

The Discovery document URI has the following format:

`<OpenID Provider's issuer value>/.well-known/openid-configuration`

The URL must start with https\:// according to the OpenID Connect (OIDC) *(tooltip: \<div class="paragraph">
\<p>An authentication protocol built on top of OAuth that authenticates users and enables clients (relying parties) of all types to request and receive information about authenticated sessions and users. OIDC is extensible, allowing clients to use optional features such as encryption of identity data, discovery of OpenID Providers (OAuth authorization servers), and session management.\</p>
\</div>)* Discovery 1.0 specification. Learn more in the [OIDC documentation](https://openid.net/specs/openid-connect-discovery-1_0.html).

For example:

`https://www.example.com/.well-known/openid-configuration`

`<----- OP issuer -----><------ Spec defined path ------>`

|   |                                                                                                                                                                                                                                                                                                                                                                    |
| - | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|   | If you're connecting to PingOne DaVinci as an external identity provider, the discovery endpoint is one of the following, depending on whether you have a custom domain:- Custom domain

  `https://<customDomain>/davinci/.well-known/openid-configuration`

- Default domain

  `https://auth.pingone.<region>/<envID>/davinci/.well-known/openid-configuration` |

Learn more in [Domains](../settings/p1_domains.html).