{"schema_version":2,"registry_id":"oauth_registry","dataset_id":"oauth_authorization_server_metadata","name":"OAuth Authorization Server Metadata","metadata":{"datasource_url":"https://www.iana.org/assignments/oauth-parameters/authorization-server-metadata.csv","required_specifications":["RFC8414"],"last_updated_iso":"2026-03-23T05:38:11.548Z"},"entries":[{"entry_id":"acr_values_supported","metadata_name":"acr_values_supported","metadata_description":"JSON array containing a list of the Authentication Context Class References that this OP supports","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"authorization_details_types_supported","metadata_name":"authorization_details_types_supported","metadata_description":"JSON array containing the authorization details types the AS supports","change_controller":"IETF","reference":"RFC9396 - Section 10"},{"entry_id":"authorization_endpoint","metadata_name":"authorization_endpoint","metadata_description":"URL of the authorization server's authorization endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"authorization_response_iss_parameter_supported","metadata_name":"authorization_response_iss_parameter_supported","metadata_description":"Boolean value indicating whether the authorization server provides the iss parameter in the authorization response.","change_controller":"IETF","reference":"RFC9207 - Section 3"},{"entry_id":"backchannel_authentication_endpoint","metadata_name":"backchannel_authentication_endpoint","metadata_description":"CIBA Backchannel Authentication Endpoint","change_controller":"OpenID_Foundation_MODRNA_WG","reference":"OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0 - Section 4"},{"entry_id":"backchannel_authentication_request_signing_alg_values_supported","metadata_name":"backchannel_authentication_request_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS signing algorithms supported for validation of signed CIBA authentication requests","change_controller":"OpenID_Foundation_MODRNA_WG","reference":"OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0 - Section 4"},{"entry_id":"backchannel_logout_session_supported","metadata_name":"backchannel_logout_session_supported","metadata_description":"Boolean value specifying whether the OP can pass a sid (session ID) Claim in the Logout Token to identify the RP session with the OP","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Back-Channel Logout 1.0 - Section 2"},{"entry_id":"backchannel_logout_supported","metadata_name":"backchannel_logout_supported","metadata_description":"Boolean value specifying whether the OP supports back-channel logout, with true indicating support","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Back-Channel Logout 1.0 - Section 2"},{"entry_id":"backchannel_token_delivery_modes_supported","metadata_name":"backchannel_token_delivery_modes_supported","metadata_description":"Supported CIBA authentication result delivery modes","change_controller":"OpenID_Foundation_MODRNA_WG","reference":"OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0 - Section 4"},{"entry_id":"backchannel_user_code_parameter_supported","metadata_name":"backchannel_user_code_parameter_supported","metadata_description":"Indicates whether the OP supports the use of the CIBA user_code parameter.","change_controller":"OpenID_Foundation_MODRNA_WG","reference":"OpenID Connect Client-Initiated Backchannel Authentication Flow - Core 1.0 - Section 4"},{"entry_id":"check_session_iframe","metadata_name":"check_session_iframe","metadata_description":"URL of an OP iframe that supports cross-origin communications for session state information with the RP Client, using the HTML5 postMessage API","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Session Management 1.0 - Section 3.3"},{"entry_id":"claim_types_supported","metadata_name":"claim_types_supported","metadata_description":"JSON array containing a list of the Claim Types that the OpenID Provider supports","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"claims_locales_supported","metadata_name":"claims_locales_supported","metadata_description":"Languages and scripts supported for values in Claims being returned, represented as a JSON array of BCP 47 RFC5646 language tag values","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"claims_parameter_supported","metadata_name":"claims_parameter_supported","metadata_description":"Boolean value specifying whether the OP supports use of the \"claims\" parameter","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"claims_supported","metadata_name":"claims_supported","metadata_description":"JSON array containing a list of the Claim Names of the Claims that the OpenID Provider MAY be able to supply values for","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"client_registration_types_supported","metadata_name":"client_registration_types_supported","metadata_description":"Client Registration Types Supported","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.1.3 of OpenID Federation 1.0"},{"entry_id":"code_challenge_methods_supported","metadata_name":"code_challenge_methods_supported","metadata_description":"PKCE code challenge methods supported by this authorization server","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"contacts","metadata_name":"contacts","metadata_description":"Array of strings representing ways to contact people responsible for this authorization server, typically email addresses","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"description","metadata_name":"description","metadata_description":"Human-readable brief description of this authorization server presentable to the End-User","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"device_authorization_endpoint","metadata_name":"device_authorization_endpoint","metadata_description":"URL of the authorization server's device authorization endpoint","change_controller":"IESG","reference":"RFC8628 - Section 4"},{"entry_id":"display_name","metadata_name":"display_name","metadata_description":"Human-readable name of the authorization server to be presented to the End-User","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"display_values_supported","metadata_name":"display_values_supported","metadata_description":"JSON array containing a list of the \"display\" parameter values that the OpenID Provider supports","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"dpop_signing_alg_values_supported","metadata_name":"dpop_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS algorithms supported for DPoP proof JWTs","change_controller":"IETF","reference":"RFC9449 - Section 5.1"},{"entry_id":"end_session_endpoint","metadata_name":"end_session_endpoint","metadata_description":"URL at the OP to which an RP can perform a redirect to request that the End-User be logged out at the OP","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect RP-Initiated Logout 1.0 - Section 2.1"},{"entry_id":"federation_registration_endpoint","metadata_name":"federation_registration_endpoint","metadata_description":"Federation Registration Endpoint","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.1.3 of OpenID Federation 1.0"},{"entry_id":"frontchannel_logout_supported","metadata_name":"frontchannel_logout_supported","metadata_description":"Boolean value specifying whether the OP supports HTTP-based logout, with true indicating support","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Front-Channel Logout 1.0 - Section 3"},{"entry_id":"grant_types_supported","metadata_name":"grant_types_supported","metadata_description":"JSON array containing a list of the OAuth 2.0 grant type values that this authorization server supports","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"id_token_encryption_alg_values_supported","metadata_name":"id_token_encryption_alg_values_supported","metadata_description":"JSON array containing a list of the JWE \"alg\" values supported by the OP for the ID Token","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"id_token_encryption_enc_values_supported","metadata_name":"id_token_encryption_enc_values_supported","metadata_description":"JSON array containing a list of the JWE \"enc\" values supported by the OP for the ID Token","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"id_token_signing_alg_values_supported","metadata_name":"id_token_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS \"alg\" values supported by the OP for the ID Token","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"information_uri","metadata_name":"information_uri","metadata_description":"URL for documentation of additional information about this authorization server viewable by the End-User","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"introspection_encryption_alg_values_supported","metadata_name":"introspection_encryption_alg_values_supported","metadata_description":"JSON array containing a list of algorithms supported by the authorization server for introspection response content key encryption (alg value)","change_controller":"IETF","reference":"RFC9701 - Section 7"},{"entry_id":"introspection_encryption_enc_values_supported","metadata_name":"introspection_encryption_enc_values_supported","metadata_description":"JSON array containing a list of algorithms supported by the authorization server for introspection response content encryption (enc value)","change_controller":"IETF","reference":"RFC9701 - Section 7"},{"entry_id":"introspection_endpoint","metadata_name":"introspection_endpoint","metadata_description":"URL of the authorization server's OAuth 2.0 introspection endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"introspection_endpoint_auth_methods_supported","metadata_name":"introspection_endpoint_auth_methods_supported","metadata_description":"JSON array containing a list of client authentication methods supported by this introspection endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"introspection_endpoint_auth_signing_alg_values_supported","metadata_name":"introspection_endpoint_auth_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS signing algorithms supported by the introspection endpoint for the signature on the JWT used to authenticate the client at the introspection endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"introspection_signing_alg_values_supported","metadata_name":"introspection_signing_alg_values_supported","metadata_description":"JSON array containing a list of algorithms supported by the authorization server for introspection response signing","change_controller":"IETF","reference":"RFC9701 - Section 7"},{"entry_id":"issuer","metadata_name":"issuer","metadata_description":"Authorization server's issuer identifier URL","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"jwks","metadata_name":"jwks","metadata_description":"JSON Web Key Set document, passed by value","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.1 of OpenID Federation 1.0"},{"entry_id":"jwks_uri","metadata_name":"jwks_uri","metadata_description":"URL of the authorization server's JWK Set document","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"keywords","metadata_name":"keywords","metadata_description":"JSON array with one or more strings representing search keywords, tags, categories, or labels that apply to this authorization server","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"logo_uri","metadata_name":"logo_uri","metadata_description":"URL that references a logo for the organization owning this authorization server","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"mtls_endpoint_aliases","metadata_name":"mtls_endpoint_aliases","metadata_description":"JSON object containing alternative authorization server endpoints, which a client intending to do mutual TLS will use in preference to the conventional endpoints.","change_controller":"IESG","reference":"RFC8705 - Section 5"},{"entry_id":"nfv_token_encryption_alg_values_supported","metadata_name":"nfv_token_encryption_alg_values_supported","metadata_description":"JSON array containing a list of the JWE encryption algorithms (alg values) supported by the server to encode the JWT used as NFV Token","change_controller":"ETSI","reference":"ETSI GS NFV-SEC 022 V2.7.1"},{"entry_id":"nfv_token_encryption_enc_values_supported","metadata_name":"nfv_token_encryption_enc_values_supported","metadata_description":"JSON array containing a list of the JWE encryption algorithms (enc values) supported by the server to encode the JWT used as NFV Token","change_controller":"ETSI","reference":"ETSI GS NFV-SEC 022 V2.7.1"},{"entry_id":"nfv_token_signing_alg_values_supported","metadata_name":"nfv_token_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS signing algorithms supported by the server for signing the JWT used as NFV Token","change_controller":"ETSI","reference":"ETSI GS NFV-SEC 022 V2.7.1"},{"entry_id":"op_policy_uri","metadata_name":"op_policy_uri","metadata_description":"URL that the authorization server provides to the person registering the client to read about the authorization server's requirements on how the client can use the data provided by the authorization server","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"op_tos_uri","metadata_name":"op_tos_uri","metadata_description":"URL that the authorization server provides to the person registering the client to read about the authorization server's terms of service","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"organization_name","metadata_name":"organization_name","metadata_description":"Human-readable name representing the organization owning this authorization server","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"organization_uri","metadata_name":"organization_uri","metadata_description":"URL of a Web page for the organization owning this authorization server","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.2 of OpenID Federation 1.0"},{"entry_id":"protected_resources","metadata_name":"protected_resources","metadata_description":"JSON array containing a list of resource identifiers for OAuth protected resources","change_controller":"IETF","reference":"RFC9728 - Section 4"},{"entry_id":"pushed_authorization_request_endpoint","metadata_name":"pushed_authorization_request_endpoint","metadata_description":"URL of the authorization server's pushed authorization request endpoint","change_controller":"IESG","reference":"RFC9126 - Section 5"},{"entry_id":"registration_endpoint","metadata_name":"registration_endpoint","metadata_description":"URL of the authorization server's OAuth 2.0 Dynamic Client Registration Endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"request_object_encryption_alg_values_supported","metadata_name":"request_object_encryption_alg_values_supported","metadata_description":"JSON array containing a list of the JWE \"alg\" values supported by the OP for Request Objects","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"request_object_encryption_enc_values_supported","metadata_name":"request_object_encryption_enc_values_supported","metadata_description":"JSON array containing a list of the JWE \"enc\" values supported by the OP for Request Objects","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"request_object_signing_alg_values_supported","metadata_name":"request_object_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS \"alg\" values supported by the OP for Request Objects","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"request_parameter_supported","metadata_name":"request_parameter_supported","metadata_description":"Boolean value specifying whether the OP supports use of the \"request\" parameter","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"request_uri_parameter_supported","metadata_name":"request_uri_parameter_supported","metadata_description":"Boolean value specifying whether the OP supports use of the \"request_uri\" parameter","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"require_pushed_authorization_requests","metadata_name":"require_pushed_authorization_requests","metadata_description":"Indicates whether the authorization server accepts authorization requests only via PAR.","change_controller":"IESG","reference":"RFC9126 - Section 5"},{"entry_id":"require_request_uri_registration","metadata_name":"require_request_uri_registration","metadata_description":"Boolean value specifying whether the OP requires any \"request_uri\" values used to be pre-registered","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"require_signed_request_object","metadata_name":"require_signed_request_object","metadata_description":"Indicates where authorization request needs to be protected as Request Object and provided through either request or request_uri parameter.","change_controller":"IETF","reference":"RFC9101 - Section 10.5"},{"entry_id":"response_modes_supported","metadata_name":"response_modes_supported","metadata_description":"JSON array containing a list of the OAuth 2.0 \"response_mode\" values that this authorization server supports","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"response_types_supported","metadata_name":"response_types_supported","metadata_description":"JSON array containing a list of the OAuth 2.0 \"response_type\" values that this authorization server supports","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"revocation_endpoint","metadata_name":"revocation_endpoint","metadata_description":"URL of the authorization server's OAuth 2.0 revocation endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"revocation_endpoint_auth_methods_supported","metadata_name":"revocation_endpoint_auth_methods_supported","metadata_description":"JSON array containing a list of client authentication methods supported by this revocation endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"revocation_endpoint_auth_signing_alg_values_supported","metadata_name":"revocation_endpoint_auth_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS signing algorithms supported by the revocation endpoint for the signature on the JWT used to authenticate the client at the revocation endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"scopes_supported","metadata_name":"scopes_supported","metadata_description":"JSON array containing a list of the OAuth 2.0 \"scope\" values that this authorization server supports","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"service_documentation","metadata_name":"service_documentation","metadata_description":"URL of a page containing human-readable information that developers might want or need to know when using the authorization server","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"signed_jwks_uri","metadata_name":"signed_jwks_uri","metadata_description":"URL referencing a signed JWT having this authorization server's JWK Set document as its payload","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"Section 5.2.1 of OpenID Federation 1.0"},{"entry_id":"signed_metadata","metadata_name":"signed_metadata","metadata_description":"Signed JWT containing metadata values about the authorization server as claims","change_controller":"IESG","reference":"RFC8414 - Section 2.1"},{"entry_id":"subject_types_supported","metadata_name":"subject_types_supported","metadata_description":"JSON array containing a list of the Subject Identifier types that this OP supports","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"tls_client_certificate_bound_access_tokens","metadata_name":"tls_client_certificate_bound_access_tokens","metadata_description":"Indicates authorization server support for mutual-TLS client certificate-bound access tokens.","change_controller":"IESG","reference":"RFC8705 - Section 3.3"},{"entry_id":"token_endpoint","metadata_name":"token_endpoint","metadata_description":"URL of the authorization server's token endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"token_endpoint_auth_methods_supported","metadata_name":"token_endpoint_auth_methods_supported","metadata_description":"JSON array containing a list of client authentication methods supported by this token endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"token_endpoint_auth_signing_alg_values_supported","metadata_name":"token_endpoint_auth_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS signing algorithms supported by the token endpoint for the signature on the JWT used to authenticate the client at the token endpoint","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"ui_locales_supported","metadata_name":"ui_locales_supported","metadata_description":"Languages and scripts supported for the user interface, represented as a JSON array of language tag values from BCP 47 RFC5646","change_controller":"IESG","reference":"RFC8414 - Section 2"},{"entry_id":"userinfo_encryption_alg_values_supported","metadata_name":"userinfo_encryption_alg_values_supported","metadata_description":"JSON array containing a list of the JWE \"alg\" values supported by the UserInfo Endpoint","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"userinfo_encryption_enc_values_supported","metadata_name":"userinfo_encryption_enc_values_supported","metadata_description":"JSON array containing a list of the JWE \"enc\" values supported by the UserInfo Endpoint","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"userinfo_endpoint","metadata_name":"userinfo_endpoint","metadata_description":"URL of the OP's UserInfo Endpoint","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"},{"entry_id":"userinfo_signing_alg_values_supported","metadata_name":"userinfo_signing_alg_values_supported","metadata_description":"JSON array containing a list of the JWS \"alg\" values supported by the UserInfo Endpoint","change_controller":"OpenID_Foundation_Artifact_Binding_WG","reference":"OpenID Connect Discovery 1.0 - Section 3"}]}