generated: '2026-08-30'
method: probed
source: >-
  https://auth1.customerpltfm.aig.com/oauth2/aus1aaqj1zvwVDL2n5d7/.well-known/oauth-authorization-server
  (HTTP 200) and https://auth1.customerpltfm.aig.com/.well-known/openid-configuration (HTTP 200)
note: >-
  Read from AIG's own anonymously-served OAuth 2.0 / OpenID Connect discovery documents. AIG
  publishes no scopes reference page, so descriptions below are the standard OIDC/Okta meanings
  for the standard scopes and are left null for the two AIG-specific scopes rather than guessed.
docs: null
schemes:
  - name: AIG Customer Platform authorization server
    issuer: https://auth1.customerpltfm.aig.com/oauth2/aus1aaqj1zvwVDL2n5d7
    source: well-known/aig-oauth-authorization-server.json
    scopes:
      - name: emeasme
        description: null
        note: AIG-specific scope; no published definition. Name suggests the EMEA SME book of business.
      - name: interclient_access
        description: null
        note: AIG-specific scope; no published definition.
      - name: openid
        description: Request an ID token (OpenID Connect).
      - name: profile
        description: Standard OIDC profile claims.
      - name: email
        description: Standard OIDC email claims.
      - name: address
        description: Standard OIDC address claim.
      - name: phone
        description: Standard OIDC phone claims.
      - name: offline_access
        description: Issue a refresh token.
      - name: device_sso
        description: Okta device single sign-on.
      - name: okta.myAccount.appAuthenticator.read
        description: Okta platform scope — read the end user's app authenticator enrollment.
      - name: okta.myAccount.appAuthenticator.manage
        description: Okta platform scope — manage the end user's app authenticator enrollment.
      - name: okta.myAccount.appAuthenticator.maintenance.read
        description: Okta platform scope — read app authenticator maintenance state.
      - name: okta.myAccount.appAuthenticator.maintenance.manage
        description: Okta platform scope — manage app authenticator maintenance state.
  - name: AIG Okta org issuer
    issuer: https://auth1.customerpltfm.aig.com
    source: well-known/aig-openid-configuration.json
    scopes:
      - name: openid
        description: Request an ID token (OpenID Connect).
      - name: email
        description: Standard OIDC email claims.
      - name: profile
        description: Standard OIDC profile claims.
      - name: address
        description: Standard OIDC address claim.
      - name: phone
        description: Standard OIDC phone claims.
      - name: offline_access
        description: Issue a refresh token.
      - name: groups
        description: Group memberships of the authenticated user.
scope_count: 20