generated: '2026-07-18'
method: searched
source: https://auth.blackore.ai/.well-known/openid-configuration
docs: https://blackore.ai/security
summary:
  types: [oauth2, openIdConnect]
  oauth2_flows: [authorizationCode, clientCredentials, deviceCode, tokenExchange]
  identity_provider: Auth0
  mfa: true
  sso: true
schemes:
- name: OpenIDConnect
  type: openIdConnect
  openIdConnectUrl: https://auth.blackore.ai/.well-known/openid-configuration
  issuer: https://auth.blackore.ai/
  endpoints:
    authorization: https://auth.blackore.ai/authorize
    token: https://auth.blackore.ai/oauth/token
    userinfo: https://auth.blackore.ai/userinfo
    device_authorization: https://auth.blackore.ai/oauth/device/code
    mfa_challenge: https://auth.blackore.ai/mfa/challenge
    jwks_uri: https://auth.blackore.ai/.well-known/jwks.json
    revocation: https://auth.blackore.ai/oauth/revoke
    registration: https://auth.blackore.ai/oidc/register
  grant_types:
  - client_credentials
  - authorization_code
  - refresh_token
  - urn:ietf:params:oauth:grant-type:device_code
  - urn:ietf:params:oauth:grant-type:token-exchange
  response_types: [code, token, id_token]
  token_endpoint_auth_methods: [client_secret_basic, client_secret_post, private_key_jwt, none]
  code_challenge_methods: [S256, plain]
  scopes_supported:
  - openid
  - profile
  - offline_access
  - email
  - phone
  - address
notes: >-
  Black Ore delegates identity to an Auth0 tenant. Standard OpenID Connect scopes are advertised
  (identity/profile scopes only) — no product/resource authorization scopes are published, and
  there is no public developer API or OpenAPI to derive resource scopes from. Enterprise SSO and
  MFA are documented on the security page.