---

By Marone: February 2020 | last update: March 2020

---

Keycloak openid connect discovery

Goal

In this short article we will have a look into OpenID Connect discovery document. Keycloak provides this document from which clients can obtain all necessary information to interact with Keycloak.

Used technologies

Keycloak 8.0.1
curl 7.65
jq 1.5

Response Body

The response body is a metadata listing(JSON) of OAuth2/OpenID Connect endpoints, public keys, supported scopes and claims, and other informations

• Issuer (OpenID Connect provider, here REALM)
• Endpoints:
  • Authorization Endpoint
  • Token Endpoint
  • Introspection Endpoint
  • UserInfo Endpoint
  • JWKS URI
• Supported grant types
• Supported response types
• Supported signing algorithms for ID token
• Supported scopes
• Supported claims
• ...

References

• Well-Known specification
• Keycloak documentation

• security
• keycloak