OpenID Connect

This service provides OpenID Connect 1.0 functionality. The following specifications are supported:

Configuration details

Issuer

https://id.trivore.com

Authorisation endpoint

https://id.trivore.com/openid/auth

Token endpoint

https://id.trivore.com/openid/token

Userinfo endpoint

https://id.trivore.com/openid/userinfo

JWKS endpoint

https://id.trivore.com/openid/jwks.json

Supported scopes

More details about these scopes can be found by logging in to Management UI and selecting "OpenID Connect", then "Scopes and Claims".

Scope
address
clientscope
clientscope.readonly
custom.field.models
custom.field.models.readonly
dvv.lookup
email
externalpermissions.grant
externalpermissions.query
ftn_hetu
ftn_satu
grouppolicies
grouppolicies.readonly
https://oneportal.trivore.com/scope/accesscontrol
https://oneportal.trivore.com/scope/accesscontrol.readonly
https://oneportal.trivore.com/scope/accessrights
https://oneportal.trivore.com/scope/accessrights.readonly
https://oneportal.trivore.com/scope/address.update
https://oneportal.trivore.com/scope/authorisation.grant.rights
https://oneportal.trivore.com/scope/authorisation.grant.rights.readonly
https://oneportal.trivore.com/scope/authorisations
https://oneportal.trivore.com/scope/authorisations.readonly
https://oneportal.trivore.com/scope/authorisations.sources
https://oneportal.trivore.com/scope/authorisations.sources.readonly
https://oneportal.trivore.com/scope/authorisations.types
https://oneportal.trivore.com/scope/authorisations.types.readonly
https://oneportal.trivore.com/scope/commerce.product.suppliers.read
https://oneportal.trivore.com/scope/commerce.product.suppliers.write
https://oneportal.trivore.com/scope/commerce.sales.products.query
https://oneportal.trivore.com/scope/commerce.wallet.read
https://oneportal.trivore.com/scope/commerce.wallet.transfer
https://oneportal.trivore.com/scope/commerce.wallet.write
https://oneportal.trivore.com/scope/consent
https://oneportal.trivore.com/scope/consent.readonly
https://oneportal.trivore.com/scope/contract.read
https://oneportal.trivore.com/scope/contract.sign
https://oneportal.trivore.com/scope/contract.terminate
https://oneportal.trivore.com/scope/contract.write
https://oneportal.trivore.com/scope/datastorage
https://oneportal.trivore.com/scope/datastorage.admin
https://oneportal.trivore.com/scope/datastorage.readonly
https://oneportal.trivore.com/scope/email.update
https://oneportal.trivore.com/scope/email.verify
https://oneportal.trivore.com/scope/filestorage
https://oneportal.trivore.com/scope/filestorage.readonly
https://oneportal.trivore.com/scope/groups
https://oneportal.trivore.com/scope/groups.readonly
https://oneportal.trivore.com/scope/legalinfo.readonly
https://oneportal.trivore.com/scope/mfa
https://oneportal.trivore.com/scope/mgmt.api.client
https://oneportal.trivore.com/scope/mgmt.api.client.readonly
https://oneportal.trivore.com/scope/mydata.download
https://oneportal.trivore.com/scope/mydata.request
https://oneportal.trivore.com/scope/namespace
https://oneportal.trivore.com/scope/namespace.readonly
https://oneportal.trivore.com/scope/other.app.access
https://oneportal.trivore.com/scope/other.app.access.readonly
https://oneportal.trivore.com/scope/password
https://oneportal.trivore.com/scope/paycards
https://oneportal.trivore.com/scope/paycards.number
https://oneportal.trivore.com/scope/paycards.number.readonly
https://oneportal.trivore.com/scope/paycards.readonly
https://oneportal.trivore.com/scope/phone.update
https://oneportal.trivore.com/scope/products.catalog.read
https://oneportal.trivore.com/scope/products.catalog.write
https://oneportal.trivore.com/scope/products.pricingplan.read
https://oneportal.trivore.com/scope/products.pricingplan.write
https://oneportal.trivore.com/scope/products.product.read
https://oneportal.trivore.com/scope/products.product.write
https://oneportal.trivore.com/scope/profile
https://oneportal.trivore.com/scope/profile.update
https://oneportal.trivore.com/scope/sms.verify
https://oneportal.trivore.com/scope/sso.consume
https://oneportal.trivore.com/scope/studentinfo.readonly
https://oneportal.trivore.com/scope/user.custom.fields
https://oneportal.trivore.com/scope/user.custom.fields.readonly
https://oneportal.trivore.com/scope/user.invite
https://oneportal.trivore.com/scope/user.tokens
https://oneportal.trivore.com/scope/user.tokens.readonly
https://oneportal.trivore.com/scope/users
https://oneportal.trivore.com/scope/users.readonly
logentry
logentry.read
offline_access
oidc.client
oidc.client.readonly
openid
phone
photo
photo.readonly
profile
sms.readonly
sms.send
sshkeys
sshkeys.readonly
strongidentification
strongidentification.readonly
user.files
user.files.readonly
webhooks

Supported claims

More details about these claims can be found by logging in to Management UI and selecting "OpenID Connect", then "Scopes and Claims".

Claim
address
birthdate
commerce/product-supplier-sales-history-access
domicile
email
email_verified
family_name
gender
given_name
https://oneportal.trivore.com/claims/active_external_permissions
https://oneportal.trivore.com/claims/consents
https://oneportal.trivore.com/claims/custom_fields
https://oneportal.trivore.com/claims/domicile_classes
https://oneportal.trivore.com/claims/dynamic_custom_fields
https://oneportal.trivore.com/claims/group_ids
https://oneportal.trivore.com/claims/groupmembership
https://oneportal.trivore.com/claims/groups
https://oneportal.trivore.com/claims/legal_locality
https://oneportal.trivore.com/claims/legal_names
https://oneportal.trivore.com/claims/locality
https://oneportal.trivore.com/claims/minor
https://oneportal.trivore.com/claims/namespace
https://oneportal.trivore.com/claims/personal_id_code
https://oneportal.trivore.com/claims/screen_name
https://oneportal.trivore.com/claims/strong_identification
https://oneportal.trivore.com/claims/student
https://oneportal.trivore.com/claims/tags
https://oneportal.trivore.com/claims/user_namespace
locale
middle_name
name
nickname
phone_number
phone_number_verified
picture
preferred_username
profile
sub
updated_at
urn:oid:1.2.246.21
urn:oid:1.2.246.22
urn:oid:1.2.246.517.3002.111.17
urn:oid:1.2.246.575.1.10
urn:oid:1.2.246.575.1.14
urn:oid:1.2.246.575.1.15
urn:oid:1.2.246.575.1.16
urn:oid:1.2.246.575.1.3
urn:oid:1.2.246.575.1.4
urn:oid:1.2.246.575.1.7
urn:oid:1.2.246.575.1.8
urn:oid:1.2.246.575.1.9
urn:oid:1.3.6.1.5.5.7.9.1
urn:oid:1.3.6.1.5.5.7.9.2
urn:oid:2.5.4.10
urn:oid:2.5.4.4
urn:oid:2.5.4.42
website
zoneinfo

Discover

The discovery document is located in the path .well-known/openid-configuration.