---
title: "Get OP Discovery Configuration"
method: POST
path: "/get-discovery"
tags: ["developers"]
---

# Get OP Discovery Configuration

`POST /get-discovery`

Get OP Discovery Configuration

## Request body

- object
  - `op_configuration_endpoint` string, required — The openid configuration endpoint URL. If missing, then `op_host` must be defined.
  - `op_host` string — Deprecated in favor of `op_configuration_endpoint`. It will be removed in future version(s). Provide the URL of OpenID Provider (OP) in this field. If missing, then `op_configuration_endpoint` must be defined.
  - `op_discovery_path` string — Deprecated in favor of `op_configuration_endpoint`. It will be removed in future version(s). Provide path to the OpenID Connect Provider's discovery document in this field. For example, if it is 'https://example.com/.well-known/openid-configuration' then the path is blank. But if it is 'https://example.com/oxauth/.well-known/openid-configuration' then the path is '/oxauth'

## Response `200`

OK

- object
  - `issuer` string
  - `authorization_endpoint` string
  - `token_endpoint` string
  - `token_revocation_endpoint` string
  - `user_info_endpoint` string
  - `client_info_endpoint` string
  - `check_session_iframe` string
  - `end_session_endpoint` string
  - `jwks_uri` string
  - `registration_endpoint` string
  - `id_generation_endpoint` string
  - `introspection_endpoint` string
  - `scopes_supported` string[]
  - `response_types_supported` string[]
  - `grant_types_supported` string[]
  - `acr_values_supported` string[]
  - `subject_types_supported` string[]
  - `user_info_signing_alg_values_supported` string[]
  - `user_info_encryption_alg_values_supported` string[]
  - `user_info_encryption_enc_values_supported` string[]
  - `id_token_signing_alg_values_supported` string[]
  - `id_token_encryption_alg_values_supported` string[]
  - `id_token_encryption_enc_values_supported` string[]
  - `request_object_signing_alg_values_supported` string[]
  - `request_object_encryption_alg_values_supported` string[]
  - `request_object_encryption_enc_values_supported` string[]
  - `token_endpoint_auth_methods_supported` string[]
  - `token_endpoint_auth_signing_alg_values_supported` string[]
  - `display_values_supported` string[]
  - `claim_types_supported` string[]
  - `claims_supported` string[]
  - `id_token_token_binding_cnf_values_supported` string[]
  - `service_documentation` string
  - `claims_locales_supported` string[]
  - `ui_locales_supported` string[]
  - `claims_parameter_supported` boolean
  - `request_parameter_supported` boolean
  - `request_uri_parameter_supported` boolean
  - `require_request_uri_registration` boolean
  - `tls_client_certificate_bound_access_tokens` boolean
  - `front_channel_logout_supported` boolean
  - `front_channel_logout_session_supported` boolean
  - `op_policy_uri` string
  - `op_tos_uri` string
  - `scope_to_claims_mapping` object

## Other responses

- `400` — Invalid parameters are provided to endpoint.
- `403` — Forbidden. Invalid access token provided in Authorization header.
- `500` — Internal error occured. Please check oxd-server.log file for details (usually located in /var/log/oxd-server/oxd-server.log).

---

[API](https://skmtc.net/gluufederation/apis/oxd-server.md) · [All operations](https://skmtc.net/gluufederation/apis/oxd-server/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gluufederation/oxd-server/versions/33ca9e18c54b/schema)