OpenID Connect 組態的查詢
您可以使用 OpenID Connect 探索端點查詢 Salesforce OpenID Connect 組態的相關資訊。Salesforce會傳回端點、支援的範圍和用於 OpenID Connect 授權的其他值相關的基本資訊。
必要版本
| 提供版本:Salesforce Classic 與 Lightning Experience |
| 提供版本:所有版本 |
不需要工作階段即可存取此端點。
備註 如果組織已啟用 CORS,使用者仍可以存取 OpenID Connect 探索端點。針對所有其他 OAuth 端點,您必須使用需要 OAuth 權杖的要求來傳遞該權杖。
URL 的格式是 https://MyDomainName.my.salesforce.com/.well-known/openid-configuration。
備註
若是 Sandbox 與 Experience Cloud 網站,URL 的格式會有所不同。
針對 sandbox,您可在「我的網域設定」頁面上找到貴組織的「我的網域」登入 URL。
針對 Experience Cloud 網站,如果是在 Winter ’23 之後建立的已驗證 LWR 網站,URL 結構的格式為 MyDomainName.my.site.com/mycommunityurlvforcesite/.well-known/openid-configuration。若要尋找 URL 的值 (最多 /openid-configuration),請移至 設定 | 自訂 URL 並尋找與您 Experience Cloud 網站名稱相同的社群完整 URL。
針對所有其他類型的 Experience Cloud 網站,MyDomainName.my.salesforce.com 會以網站 URL 取代,例如:MyDomainName.my.site.com/.well-known/openid-configuration。
針對所有情況,URL 必須使用 HTTPS 通訊協定。
OpenID Connect 探索端點回應
OpenID Connect 會傳回 JSON 格式的資訊。
{"issuer":"https://login.salesforce.com",
"authorization_endpoint":"https://login.salesforce.com/services/oauth2/authorize",
"token_endpoint":"https://login.salesforce.com/services/oauth2/token",
"revocation_endpoint":"https://login.salesforce.com/services/oauth2/revoke",
"userinfo_endpoint":"https://login.salesforce.com/services/oauth2/userinfo",
"jwks_uri":"https://login.salesforce.com/id/keys",
"registration_endpoint": "https://login.salesforce.com/services/oauth2/register",
"introspection_endpoint": "https://login.salesforce.com/services/oauth2/introspect",
"scopes_supported":["id","api","web","full","chatter_api",
"visualforce","refresh_token","openid","profile","email",
"address","phone","offline_access", "custom_permissions",
"wave_api", "eclair_api"],
"response_types_supported":["code","token","token id_token"],
"subject_types_supported":["public"],
"id_token_signing_alg_values_supported":["RS256"],
"display_values_supported":["page","popup","touch"],
"token_endpoint_auth_methods_supported":["client_secret_post","client_secret_basic",
"private_key_jwt"]
"claims_supported": ["active","address","email","email_verified","family_name",
"given_name","is_app_installed","language","locale","name","nickname",
"organization_id","phone_number","phone_number_verified","photos",
"picture","preferred_username","profile","sub","updated_at","urls","user_id",
"user_type","zoneinfo"], } 此文章是否解決您的問題?
請讓我們知道,以便我們改進!

