---
schema_version: "1"
id: 45c85327470fe94d2bb18ea07b18bb59cc12a380ec9880937ef1c2894986e0c2
title: Query for the OpenID Connect Configuration
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/remoteaccess_using_openid_discovery_endpoint.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.remoteaccess_using_openid_discovery_endpoint.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0d9e396e690fe1ba579781c096fb8b342fc69de88274067198542f30f9fcc2e6
description: Use the OpenID Connect discovery endpoint to query for information about the Salesforce OpenID Connect configuration. Salesforce returns basic information about endpoints, supported scopes, and other values used for OpenID Connect authorization.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Query for the OpenID Connect Configuration

Use the OpenID Connect discovery endpoint to query for information about the Salesforce OpenID Connect configuration. Salesforce returns basic information about endpoints, supported scopes, and other values used for OpenID Connect authorization.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All</strong> Editions</td></tr></tbody></table>

A session isn’t required to access this endpoint.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note If your org has CORS enabled, users can still access the OpenID Connect discovery endpoint. For all other OAuth endpoints, you must pass an OAuth token with requests that require it.

The format of the URL is https://MyDomainName.my.salesforce.com/.well-known/openid-configuration.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-identity-264-0-0-production-enus/699dab6f-8f1a-4662-b24f-6521d5b747f7/images/icon_note.png)

Note

For sandboxes and Experience Cloud sites, the URL format is different.

For a [sandbox](https://help.salesforce.com/s/articleView?id=platform.create_test_instance.htm&type=5&language=en_US), you can find your org’s My Domain login URL on the My Domain Setup page.

For an Experience Cloud site, if it’s an authenticated LWR site created after Winter ’23, the URL structure has the format MyDomainName.my.site.com/mycommunityurlvforcesite/.well-known/openid-configuration. To find the value for your URL up to /openid-configuration, go to **Setup** | **Custom URLs** and find the full URL of the community with the same name as your Experience Cloud site.

For all other types of Experience Cloud sites, MyDomainName.my.salesforce.com is replaced with the site’s URL, such as MyDomainName.my.site.com/mycommunityurl/.well-known/openid-configuration.

For all scenarios, the URL must use the HTTPS protocol.

## OpenID Connect Discovery Endpoint Response

The OpenID Connect Discovery endpoint returns the information in JSON format.

```
{"issuer":"https://login.salesforce.com", 
"authorization_endpoint":"https://login.salesforce.com/services/oauth2/authorize",  
"token_endpoint":"https://login.salesforce.com/services/oauth2/token",  
"revocation_endpoint":"https://login.salesforce.com/services/oauth2/revoke",  
"userinfo_endpoint":"https://login.salesforce.com/services/oauth2/userinfo",  
"jwks_uri":"https://login.salesforce.com/id/keys",  
"registration_endpoint": "https://login.salesforce.com/services/oauth2/register", 
"introspection_endpoint": "https://login.salesforce.com/services/oauth2/introspect", 
"scopes_supported":["id","api","web","full","chatter_api",
"visualforce","refresh_token","openid","profile","email",
"address","phone","offline_access", "custom_permissions",
"wave_api", "eclair_api"],  
"response_types_supported":["code","token","token id_token"],  
"subject_types_supported":["public"],  
"id_token_signing_alg_values_supported":["RS256"],  
"display_values_supported":["page","popup","touch"], 
"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic",
"private_key_jwt"] 
"claims_supported": ["active","address","email","email_verified","family_name",
"given_name","is_app_installed","language","locale","name","nickname",
"organization_id","phone_number","phone_number_verified","photos",
"picture","preferred_username","profile","sub","updated_at","urls","user_id",
"user_type","zoneinfo"], }                
```