Jump to

• Request
• Response
• Examples

Retrieve OpenID Discovery Doc

get

/.well-known/openid-configuration

Request

There are no request parameters for this operation.

Back to Top

Response

Supported Media Types

• application/json

200 Response

OpenID configuration.

Body

Example Response (application/json)

{
    "response_types_supported":[
        "code",
        "token",
        "id_token",
        "code token",
        "code id_token",
        "token id_token",
        "code token id_token"
    ],
    "id_token_signing_alg_values_supported":[
        "RS256"
    ],
    "scopes_supported":[
        "openid",
        "profile",
        "offline_access",
        "email",
        "address",
        "phone",
        "groups",
        "get_groups",
        "approles",
        "get_approles"
    ],
    "issuer":"https://identity.oraclecloud.com/",
    "userinfo_signing_alg_values_supported":[
        "none"
    ],
    "revocation_endpoint":"/oauth2/v1/revoke",
    "claims_supported":[
        "aud",
        "exp",
        "iat",
        "iss",
        "jti",
        "sub"
    ],
    "token_endpoint_auth_signing_alg_values_supported":[
        "RS256"
    ],
    "request_parameter_supported":false,
    "introspect_endpoint":"/oauth2/v1/introspect",
    "subject_types_supported":[
        "public"
    ],
    "authorization_endpoint":"/oauth2/v1/authorize",
    "token_endpoint_auth_methods_supported":[
        "client_secret_basic",
        "client_secret_jwt"
    ],
    "request_uri_parameter_supported":false,
    "claims_parameter_supported":false,
    "end_session_endpoint":"/oauth2/v1/userlogout",
    "ui_locales_supported":[
        "en"
    ],
    "userinfo_endpoint":"/oauth2/v1/userinfo",
    "token_endpoint":"/oauth2/v1/token",
    "jwks_uri":"/admin/v1/SigningCert/jwk",
    "logout_session_supported":false,
    "require_request_uri_registration":false,
    "http_logout_supported":true,
    "grant_types_supported":[
        "client_credentials",
        "password",
        "refresh_token",
        "authorization_code",
        "urn:ietf:params:oauth:grant-type:jwt-bearer"
    ]
}

Back to Top

Examples

The following example shows how to retrieve the Identity Cloud Service OpenID discovery documentation by submitting a GET request on the REST resource using cURL. For more information about cURL, see Use cURL

cURL Command

Note:

The command in this example uses the URL structure https://tenant-base-url/resource-path, where tenant-base-url represents the Identity Service URL, and the resource path represents the Identity Service API. See Send Requests for the appropriate URL structure to use.

curl
-X GET
-H "Content-Type:text/html"
-H "Authorization: Bearer <Access Token Value>"
https://tenant-base-url/.well-known/openid-configuration

Example of Response Body

The following example shows the contents of the response body in JSON format:

{
  "issuer": "https://identity.oraclecloud.com/",
  "authorization_endpoint": "<idcs-base-url>/oauth2/v1/authorize",
  "token_endpoint": "<idcs-base-url>/oauth2/v1/token",
  "userinfo_endpoint": "<idcs-base-url>/oauth2/v1/userinfo",
  "revocation_endpoint": "<idcs-base-url>/oauth2/v1/revoke",
  "introspect_endpoint": "<idcs-base-url>/oauth2/v1/introspect",
  "end_session_endpoint": "<idcs-base-url>/oauth2/v1/userlogout",
  "jwks_uri": "<idcs-base-url>/admin/v1/SigningCert/jwk",
  "scopes_supported": [
    "openid",
    "profile",
    "offline_access",
    "email",
    "address",
    "phone",
    "groups",
    "get_groups",
    "approles",
    "get_approles"
  ],
  "response_types_supported": [
    "code",
    "token",
    "id_token",
    "code token",
    "code id_token",
    "token id_token",
    "code token id_token"
  ],
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "claims_supported": [
    "aud",
    "exp",
    "iat",
    "iss",
    "jti",
    "sub"
  ],
  "grant_types_supported": [
    "client_credentials",
    "password",
    "refresh_token",
    "authorization_code",
    "urn:ietf:params:oauth:grant-type:jwt-bearer",
    "urn:ietf:params:oauth:grant-type:saml2-bearer"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_jwt"
  ],
  "token_endpoint_auth_signing_alg_values_supported": [
    "RS256"
  ],
  "userinfo_signing_alg_values_supported": [
    "none"
  ],
  "ui_locales_supported": [
    "en"
  ],
  "claims_parameter_supported": false,
  "http_logout_supported": true,
  "logout_session_supported": false,
  "request_parameter_supported": false,
  "request_uri_parameter_supported": false,
  "require_request_uri_registration": false
}

Back to Top