OpenID Connect endpoint URLs

Learn about OpenID Connect endpoint URLs that are available for communicating with the OpenID Connect provider.

After OpenID Connect is configured, several endpoint URLs are available on Liberty so that OpenID Connect clients can communicate with the OpenID Connect provider before accessing protected resources. By default, all communications must be over Transport Layer Security (TLS).

The following endpoint URLs are available for communicating with the OpenID Connect provider:

Authorization endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/authorize

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the Authorization Endpoint for OpenID Connect.

Coverage map endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/coverage_map

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the coverage map service.

Discovery endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/.well-known/openid-configuration

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Configuring an OpenID Connect Provider to accept discovery requests.

Introspection endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/introspect

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the Introspection Endpoint for OpenID Connect.

JSON Web Key (JWK) endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/jwk

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

Logout endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/logout

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the logout endpoint for OpenID Connect.

Registration endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/registration

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Configuring an OpenID Connect Provider to accept client registration requests.

Revocation endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/revoke

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the Revocation Endpoint for OpenID Connect.

Token endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/token

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the Token Endpoint for OpenID Connect.

UserInfo endpoint URL

https://<host_name>:<port_number>/oidc/endpoint/<provider_name>/userinfo

where

host_name
The host name of the OpenID Connect provider.
port_number
The secure port number that is configured on the Liberty server.
provider_name
The OpenID Connect provider name.

For more information, see Invoking the UserInfo Endpoint for OpenID Connect.