local_sso oidc provider
health: /healthz
discovery: /.well-known/openid-configuration
jwks: /jwks.json