OpenID Provider (Sandbox organisation)

Discovery endpoint

GET/v4/service/platform/extension/oidc/{organisationId}/{sandboxOrgId}/.well-known/openid-configuration

The endpoint of the OpenID Provider of a sandbox organisation. It works like the endpoint of the main organisation; the path holds the ID of the sandbox organisation after the ID of the organisation.

Returns the OpenID Provider metadata of a sandbox organisation (OpenID Connect Discovery). Give this URL to your identity and access management system: it finds the authorisation, token, UserInfo and JWKS endpoints here. The list of extensions shows the same URL as metadataUrl.

The endpoint is public. It answers once Passwordless Login was turned on for the sandbox organisation.

Discovery endpoint

Language of the request sample

curl 'https://demo-api.igrant.io/v4/service/platform/extension/oidc/{organisationId}/{sandboxOrgId}/.well-known/openid-configuration'

{
  "authorization_endpoint": "https://demo-api.igrant.io/v4/service/platform/extension/oidc/6ae2bf741c3dadfeb27982ec/6af081c738e8f33dcf799629/auth",
  "authorization_response_iss_parameter_supported": true,
  "code_challenge_methods_supported": [
    "S256"
  ],
  "grant_types_supported": [
    "authorization_code"
  ],
  "id_token_signing_alg_values_supported": [
    "ES256",
    "RS256"
  ],
  "issuer": "https://demo-api.igrant.io",
  "jwks_uri": "https://demo-api.igrant.io/v4/service/platform/extension/oidc/6ae2bf741c3dadfeb27982ec/6af081c738e8f33dcf799629/.well-known/jwks.json",
  "response_types_supported": [
    "code"
  ],
  "scopes_supported": [
    "openid"
  ],
  "subject_types_supported": [
    "public"
  ],
  "token_endpoint": "https://demo-api.igrant.io/v4/service/platform/extension/oidc/6ae2bf741c3dadfeb27982ec/6af081c738e8f33dcf799629/token",
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic"
  ],
  "userinfo_endpoint": "https://demo-api.igrant.io/v4/service/platform/extension/oidc/6ae2bf741c3dadfeb27982ec/6af081c738e8f33dcf799629/userinfo"
}

Authorizations

Public. The operation takes no credentials.

Path parameters

organisationIdstringrequired
The ID of the organisation
sandboxOrgIdstringrequired
Unique identifier of the sandbox organisation.

Response

application/json

The provider metadata.

issuerstring
The issuer, the base URL of the API. The tokens carry it in iss.
authorization_endpointstring
The authorisation endpoint of the organisation.
token_endpointstring
The token endpoint of the organisation.
userinfo_endpointstring
The UserInfo endpoint of the organisation.
jwks_uristring
The JWKS endpoint of the organisation.
scopes_supportedstring[]
Only openid.
response_types_supportedstring[]
Only code.
grant_types_supportedstring[]
Only authorization_code.
subject_types_supportedstring[]
Only public.
id_token_signing_alg_values_supportedstring[]
ES256 for your clients, RS256 for the system-managed client of the platform login.
code_challenge_methods_supportedstring[]
The PKCE methods. Only S256.
token_endpoint_auth_methods_supportedstring[]
Only client_secret_basic.
authorization_response_iss_parameter_supportedboolean
true: the redirect with the code carries iss (RFC 9207).