[Openid-specs-ab] .well-known in OIDC Discovery

Torsten Lodderstedt torsten at lodderstedt.net
Mon Jul 29 12:22:04 UTC 2013


Hi all,

I just took a look on the OIDC discovery spec. Why does it use 
.well-known? I'm asking since it deviates from the RFC in that it allows 
for path components (in order to support multi-tenancy) and the URL 
itself is either discovered via WebFinger or obtained out of band. Why 
not just obtain the connect config base URL that way and directly 
request the metadata. What is the value of adding "/.well-known" to the 
URL?

regards,
Torsten.


More information about the Openid-specs-ab mailing list