Discovery Endpoint

This endpoint provides information about Singpass's endpoints and other configuration details. The endpoint URL is located at /.well-known/openid-configuration on the Singpass's domain.

Discovery endpoint for different environments:

Staging	Production
https://api.stg-auth.singpass.gov.sg/.well-known/openid-configuration	https://api.auth.singpass.gov.sg/.well-known/openid-configuration

GEThttps://api.dev-auth.singpass.gov.sg/.well-known/openid-configuration

Response

200

The OIDC Discovery Document has been successfully retrieved.

Body

application/json

object

Request

JavaScriptCurlPython

const response = await fetch('https://api.dev-auth.singpass.gov.sg/.well-known/openid-configuration', {
    method: 'GET',
    headers: {},
});
const data = await response.json();

Path	Type	Description
issuer	String	URL (identity) of the issuer
authorization_endpoint	String	URL of the OP’s OAuth 2.0 Authorization Endpoint
jwks_uri	String	URL of the OP’s JSON Web Key Set
response_types_supported	Array	JSON array containing a list of the OAuth 2.0 response_type values that OP supports
scopes_supported	Array	JSON array containing a list of the OAuth 2.0 scope values that OP supports
subject_types_supported	Array	JSON array containing a list of the Subject Identifier types that this OP supports
claims_supported	Array	JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for
grant_types_supported	Array	JSON array containing a list of the OAuth 2.0 Grant Type values that this OP supports.
token_endpoint	String	URL of the OP’s OAuth 2.0 Token Endpoint. This contains the signing key(s) the RP uses to validate signatures from the OP.
token_endpoint_auth_methods_supported	Array	JSON array containing a list of Client Authentication methods supported by this Token Endpoint.
token_endpoint_auth_signing_alg_values_supported	Array	JSON array containing a list of the JWS signing algorithms (alg values) supported by the Token Endpoint for the signature on the JWT used to authenticate the Client at the Token Endpoint for the private_key_jwt authentication methods
id_token_signing_alg_values_supported	Array	JSON array containing a list of the JWS signing algorithms (alg values) supported bythe OP for the ID Token to encode the Claims in a JWT.
id_token_encryption_alg_values_supported	Array	JSON array containing a list of the JWE encryption algorithms (alg values) supportedby the OP for the ID Token to encode the Claims in a JWT.
id_token_encryption_enc_values_supported	Array	JSON array containing a list of the JWE encryption algorithms (enc values) supportedby the OP for the ID Token to encode the Claims in a JWT.
backchannel_token_delivery_modes_supported	Array	JSON array containing supported backchannel delivery modes
backchannel_authentication_endpoint	String	URL of the OP’s Backchannel Authentication Endpoint