.well-known/openid-configuration should be supported [Documentation]

[ip6li]

Some OIDC providers are supporting .well-known/openid-configuration to retrieve all endpoints.

[julianlam]

Don't we support this already, if you enter the domain?

[ip6li]

How does field "domain" work? Keycloak e.g. expects such an URL to openid-configuration:

https://keycloak.example.com/realms/example-realm/.well-known/openid-configuration

Does this field need a full URL or a realm, only?

[julianlam]

Domain expects a bare hostname, so in your example you would enter keycloak.example.com

This plugin will fill in the rest of the URL to retrieve the openid configuration.

https://keycloak.example.com/realms/example-realm/.well-known/openid-configuration

This is not a valid well-known URL. The .well-known path must be at root level, otherwise it is not well known 🙂

[ip6li]

Tell this some OpenID providers ;-) Ok, in my case a Nginx location statement may solve it, so such a URL also works:

https://keycloak.example.com/.well-known/realms/example-realm/openid-configuration

Keycloak supports multiple realms, so where in URL places sso-oauth2-multiple the realm in .well-known URL?