Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Validate trust marks
    Use tools like jwt.io to decode and verify trust marks using the Trust Anchor's public keys.

  2. Retrieve metadata
    Ensure the .well-known/openid-federation endpoint correctly serves the entity’s entity configuration:

    Code Block
    languagebash
    curl -X GET https://your-entity.example.com/.well-known/openid-federation
  3. Check authority hints
    Verify that authority_hints points to the correct Superior

  4. Validate public keys
    Confirm that the Trust Anchor’s public keys match those provided in your local configuration.

...