New OIDC IdP

Your sandbox is only tied to this browser's cookie. If you clear cookies or switch browsers you'll lose access to your saved configs. Save your recovery URL to restore it later.

Name

Notes

Issuer

Authorization endpoint

Token endpoint

JWKS URI

Scopes

Use PKCE (S256)

Redirect URI (register this with the IdP)

Client ID

Token endpoint auth method

Client secret

Client JWK (private, JSON)

Some IdPs require different client credentials for the Token Exchange request that returns the ID-JAG than for the original code exchange. Enable this only if your IdP needs it.

Use a different client for the ID-JAG request

Token endpoint (optional — leave blank to reuse the main IdP token endpoint)

Client ID

Token endpoint auth method

Client secret

Client JWK (private, JSON)

Cancel