The Open API Specs document the .well-known endpoints for default and custom authorization server(s):
- https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/oauth-authorization-server
- https://{yourOktaDomain}/oauth2/{authorizationServerId}/.well-known/openid-configuration
What's missing is the .well-known endpoints for the Org authorization server thats present in every Okta instance:
- https://{yourOktaDomain}/.well-known/oauth-authorization-server
- https://{yourOktaDomain}/.well-known/openid-configuration
The Open API Specs document the
.well-knownendpoints fordefaultandcustomauthorization server(s):What's missing is the
.well-knownendpoints for theOrgauthorization server thats present in every Okta instance: