generated: '2026-07-18'
method: searched
source: https://secure.blueleaf.com/.well-known/openid-configuration
standards:
- id: oauth2
  conforms: true
  evidence: OAuth 2.0 authorization_code + refresh_token grants advertised at secure.blueleaf.com/oauth/authorize and /oauth/token
- id: oidc
  conforms: true
  evidence: OpenID Connect discovery document served at /.well-known/openid-configuration with issuer, userinfo, jwks_uri, RS256 id_token signing
- id: oauth2-pkce
  conforms: true
  evidence: code_challenge_methods_supported includes S256
- id: rfc7009-token-revocation
  conforms: true
  evidence: revocation_endpoint https://secure.blueleaf.com/oauth/revoke
- id: rfc7662-token-introspection
  conforms: true
  evidence: introspection_endpoint https://secure.blueleaf.com/oauth/introspect
- id: rfc8414-oauth-authorization-server-metadata
  conforms: false
  evidence: /.well-known/oauth-authorization-server returned 404 (OIDC discovery present instead)
- id: soc2
  conforms: true
  evidence: https://www.blueleaf.com/security/ states SOC 2 compliance
- id: pci-dss
  conforms: true
  evidence: https://www.blueleaf.com/security/ states PCI compliance
- id: iso27001
  conforms: true
  evidence: https://www.blueleaf.com/security/ cites ISO 27001 controls