---
title: "Retrieve Open ID Connect configuration"
method: GET
path: "/oidc/.well-known/openid-configuration"
tags: ["auth"]
---

# Retrieve Open ID Connect configuration

`GET /oidc/.well-known/openid-configuration`

Returns the OpenID Connect configuration

## Response `200`

A successful Open ID config response

- OidcConfig
  - `authorization_endpoint` string, required — URL of the OP's OAuth 2.0 Authorization Endpoint
  - `claims_parameter_supported` boolean, required — Boolean value specifying whether the OP supports use of the claims parameter, with true indicating support
  - `claims_supported` string[], required — A list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for. Note that for privacy or other reasons, this might not be an exhaustive list
  - `code_challenge_methods_supported` string[], required — A list of Proof Key for Code Exchange (PKCE) code challenge methods supported by this authorization server
  - `end_session_endpoint` string, required — Endpoint to trigger single sign-out
  - `grant_types_supported` string[], required — A list of the OAuth 2.0 Grant Type values that Moneyhub supports
  - `id_token_signing_alg_values_supported` string[], required — A list of the JWS signing algorithms (alg values) supported for the ID Token to encode the Claims in a JWT
  - `issuer` string, required — URL using the https scheme assert as the Issuer identifier. This also MUST be identical to the iss Claim value in ID Tokens issued from this Issuer
  - `jwks_uri` string, required — URL of the Moneyhub APIs JSON Web Key Set document
  - `registration_endpoint` string, required — URL of the OP's Dynamic Client Registration Endpoint
  - `authorization_response_iss_parameter_supported` boolean, required — Indicates whether the authorization server provides the iss parameter in the authorization response
  - `response_modes_supported` string[], required — A list of the OAuth 2.0 response_mode values supported
  - `response_types_supported` string[], required — A list of the OAuth 2.0 response_types values supported
  - `scopes_supported` string[], required — A list of the OAuth 2.0 [RFC6749] scope values that this server supports
  - `subject_types_supported` string[], required — A list of Subject Identifier types supported by this provider
  - `token_endpoint_auth_methods_supported` string[], required
  - `token_endpoint_auth_signing_alg_values_supported` string[], required — A list of Client Authentication methods supported by this Token Endpoint
  - `token_endpoint` string, required — URL of the OAuth 2.0 Token Endpoint
  - `pushed_authorization_request_endpoint` string, required — URL of the pushed authorization request endpoint
  - `request_object_signing_alg_values_supported` string[], required — a list of the JWS signing algorithms (alg values) supported for Request Objects
  - `request_parameter_supported` boolean, required — Boolean value specifying whether the provider supports use of the request parameter
  - `request_uri_parameter_supported` boolean, required — Boolean value specifying whether the OP supports use of the request_uri parameter
  - `require_request_uri_registration` boolean, required — Boolean value specifying whether the OP requires any request_uri values used to be pre-registered using the request_uris registration parameter
  - `userinfo_endpoint` string, required — URL of the UserInfo Endpoint
  - `introspection_endpoint` string, required — The token introspection URL
  - `introspection_endpoint_auth_methods_supported` string[], required — Auth methods support on the introspection endpoint
  - `introspection_endpoint_auth_signing_alg_values_supported` string[], required — A list of the JWS signing algorithms supported by the introspection endpoint for the signature on the JWT
  - `dpop_signing_alg_values_supported` string[], required — A list of the JWS alg values supported by the authorization server for DPoP proof JWTs
  - `revocation_endpoint` string, required — URL to revoke token
  - `revocation_endpoint_auth_methods_supported` string[], required — A list of client authentication methods supported by this revocation endpoint
  - `revocation_endpoint_auth_signing_alg_values_supported` string[], required — a list of the JWS signing algorithms supported by the revocation endpoint for the signature on the JWT
  - `id_token_encryption_alg_values_supported` string[], required — A list of the JWE encryption algorithms (alg values) supported for the ID Token to encode the Claims in a JWT
  - `id_token_encryption_enc_values_supported` string[], required — A list of the JWE encryption algorithms (enc values) supported for the ID Token to encode the Claims in a JWT
  - `request_object_encryption_alg_values_supported` string[], required — A list of the JWE encryption algorithms (alg values) supported for Request Objects
  - `request_object_encryption_enc_values_supported` string[], required — A list of the JWE encryption algorithms (enc values) supported for Request Objects
  - `claim_types_supported` string[], required — A list of the Claim Types supported
  - `all_connections_endpoint` string, required — URL to retrieve metadata for all connections
  - `api_connections_endpoint` string, required — URL to retrieve metadata for api (Open Banking) connections
  - `legacy_connections_endpoint` string, required — URL to retrieve metadata for legacy connections
  - `test_connections_endpoint` string, required — URL to retrieve metadata for test connections
  - `beta_connections_endpoint` string, required — URL to retrieve metadata for connections still in beta
  - `zoopla_connections_endpoint` string, required — URL to retrieve metadata for the zoopla connection
  - `mouseprice_connections_endpoint` string, required — URL to retrieve metadata for the mouseprice connection
  - `autotrader_connections_endpoint` string, required — URL to retrieve metadata for the autotrader connection

---

[API](https://skmtc.net/moneyhubenterprise/apis/moneyhub-identity-service.md) · [All operations](https://skmtc.net/moneyhubenterprise/apis/moneyhub-identity-service/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/moneyhubenterprise/moneyhub-identity-service/revisions/8841721f7aae/schema)