OpenID Connect Discovery

Auto-configuration mechanism that allows Relying Parties to discover the OpenID Provider's endpoints, supported features, and cryptographic capabilities (OIDC Discovery §4). Essential for dynamic client registration and multi-provider support.

Try in Looking Glass
ID Token

Sequence Diagram

Click any step for details

ClientAuth Server1Discovery Document Request2Configuration Response3JWKS Request4JWKS Response
Request
Response
Redirect
Internal

Step-by-Step Breakdown

1
Discovery Document Request
ClientOpenID Provider
2
Configuration Response
OpenID ProviderClient
3
JWKS Request
ClientOpenID Provider
4
JWKS Response
OpenID ProviderClient

Token Inspector

Specs for this flow

Sections of the protocol that normatively define this flow, plus the security considerations that apply to it.

Core specs

· The specifications that define this protocol.

Security & privacy

· Dedicated security and privacy considerations.