OpenID Connect (OIDC) is a superset of OAuth 2.0 - if a platform is OIDC
compliant, it’s OAuth 2.0 compliant.
OpenID Connect (OIDC) compliant Providers
These providers are popular IdPs compliant with OpenID Connect. You can use them as identity pools for your MCP server (meaning you don’t have to own yourself a database of users, you can instead simply gate access to your MCP server with these identity providers).None of these providers have Dynamic Client Registration enabled. You’ll need to use Alpic DCR proxy in order to use them as valid identity providers for your MCP server.
Identity Management Platforms
You’ll find below the most popular IdPs compliant with OAuth 2.1. You can use them to provision your own user pools for your MCP server.| Identity Management Platform | OpenID Connect Configuration Well-Known Endpoint |
|---|---|
| Auth0 | https://{tenant}.us.auth0.com/.well-known/openid-configuration |
| Amazon Cognito | https://cognito-idp.{region}.amazonaws.com/{user-pool-id}/.well-known/openid-configuration |
| Clerk | https://{tenant}.clerk.accounts.dev/.well-known/openid-configuration |
| Google Identity Platform (formerly Firebase Authentication) | https://securetoken.google.com/{tenant}/.well-known/openid-configuration |
| Logto | https://{tenant}.logto.app/.well-known/openid-configuration |
| Microsoft Entra ID (formerly Azure AD) | https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration |
| Okta | https://{tenant}.okta.com/.well-known/openid-configuration |
| Stytch | https://{tenant}.customers.stytch.com/.well-known/openid-configuration |
| WorkOS | https://{tenant}.authkit.app/.well-known/openid-configuration |
You might want to try
https://{your-domain}/.well-known/openid-configuration instead of the provider specific URL if a custom domain has been setup on your Identity Management Platform.Other Identity Providers
You can use any IdP to configure authorization on your MCP server. Use the login page domain to discover/.well-known/oauth-authorization-server endpoint.
For exemple, you can login to Box using https://account.box.com/login. Box’s OAuth Authorization Server metadata endpoint is https://account.box.com/.well-known/oauth-authorization-server