Endpoint map
Resolve standard OAuth and OpenID Connect endpoints from discovery. The table records the current stable route families for operational reference; the API reference documents requests, authorization and responses.
| Surface | Route |
|---|---|
| OpenID Provider discovery | /.well-known/openid-configuration |
| Authorization | /oauth2/authorize |
| Token | /oauth2/token |
| JWKS | /oauth2/jwks |
| UserInfo | /oauth2/userinfo |
| Browser SSO logout | /identity/session/logout |
| Native interaction | /oauth2/native/interactions |
| Tenant directory management | /identity/directory |
| Identity Management API | /identity/admin |
Tenant protocol routes are relative to the exact tenant issuer. Management API routes are served on the control issuer and require its administration resource, scopes and live operator permissions.
Use the detailed references for OAuth and OpenID Connect, native authentication, the Management API and the tenant directory API.