[Openid-specs-risc] Conformance Iss/JWKS_URl and Discovery

Phillip Hunt phil.hunt at independentid.com
Mon Jun 22 21:41:26 UTC 2026


Hi,

I see in the conformance tests that the SSF Transmitters assign values iss/aud/jwks url values and cannot be suggested by the receivers. Also, that iss and jwks_url must be the same value.  

If “iss” is now a URL, how does well-known discovery work given the format is:
GET /.well-known/ssf-configuration/issuer1
Is issuer1 an encoded URL value?   Am I reading this wrong?

Phil
phil.hunt at independentid.com






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20260622/278f45ec/attachment.htm>


More information about the Openid-specs-risc mailing list