{
  "issuer": "https://www.boldbi.com",
  "authorization_endpoint": "https://boldbi.com/account",
  "token_endpoint": "https://www.boldbi.com/account/claim-license-key",
  "userinfo_endpoint": "https://www.boldbi.com/account/my-profile",
  "end_session_endpoint": "https://www.boldbi.com/account/logout",
  "jwks_uri": "https://login.boldid.net/.well-known/jwks",
  "grant_types_supported": [
    "refresh_token",
    "authorization_code"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_modes_supported": [
    "query",
    "form_post",
    "fragment"
  ],
  "scopes_supported": [
    "openid",
    "offline_access",
    "email",
    "profile",
    "roles"
  ],
  "claims_supported": [
    "aud",
    "exp",
    "iat",
    "iss",
    "sub"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "code_challenge_methods_supported": [
    "plain",
    "S256"
  ],
  "subject_types_supported": [
    "public"
  ],
  "prompt_values_supported": [
    "consent",
    "login",
    "none",
    "select_account"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_post",
    "private_key_jwt",
    "client_secret_basic"
  ],
  "agent_auth": {
  "skill": "https://www.boldbi.com/auth.md",
  "identity_endpoint": "https://www.boldbi.com/register/",
  "identity_types_supported": ["service_auth"],
  "protected_resource_metadata_uri": "https://www.boldbi.com/.well-known/oauth-protected-resource",
  "note": "Bold BI does not currently provide dynamic agent registration. Agents must complete the standard OAuth 2.0 / OpenID Connect authorization flow through BoldID; anonymous and auto-provisioned access are not supported."
},
  "require_pushed_authorization_requests": false,
  "claims_parameter_supported": false,
  "request_parameter_supported": false,
  "request_uri_parameter_supported": false,
  "tls_client_certificate_bound_access_tokens": false,
  "authorization_response_iss_parameter_supported": true
}