Matthew Scanlon
04/23/2026, 4:26 PMMarvin
04/23/2026, 4:26 PMMarvin
04/23/2026, 4:26 PMhttps://<your-idp-domain>/.well-known/openid-configuration
- The issuer field in that JSON is the value you want
Examples:
- Okta: https://<your-okta-domain>/oauth2/default
- Auth0: https://<your-tenant>.<http://auth0.com/|auth0.com/>
- Azure AD: <https://login.microsoftonline.com/<tenant-id>/v2.0>
If you’re asking specifically for Prefect Cloud SSO / OIDC setup, the issuer comes from your identity provider, not from Prefect.
If you tell me which provider you’re using (Okta, Auth0, Azure AD, Google, etc.), I can point you to the exact screen/path.Matthew Scanlon
04/23/2026, 4:27 PMMarvin
04/23/2026, 4:27 PMMarvin
04/23/2026, 4:27 PM<https://accounts.google.com>
You can confirm it in Google’s OIDC discovery document:
Google OpenID configuration
In that document, look for the issuer field.
If you want, I can also give you the matching authorization endpoint, token endpoint, and JWKS URI for Google.