generated: '2026-07-25'
method: searched
source: https://icab2cprod.b2clogin.com/04c7fa07-b168-495f-9dcc-bcfceb1a274e/b2c_1_signin/v2.0/.well-known/openid-configuration
note: |
  The only OAuth/OIDC surface on the Insurance Council of Australia estate is the
  Azure AD B2C tenant that fronts the member portal sign-in. Its discovery document
  advertises a single scope — openid — which is the bare OIDC authentication scope
  and carries no API authorization semantics. There is no scopes or permissions
  reference page on insurancecouncil.com.au, no delegated data scopes, and no
  client-credentials surface, so this artifact records the full (and minimal) real
  scope catalogue rather than a curated one.
docs: null
schemes:
- name: azure-ad-b2c-signin
  type: openIdConnect
  source: well-known/insurance-council-australia-openid-configuration.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://icab2cprod.b2clogin.com/04c7fa07-b168-495f-9dcc-bcfceb1a274e/b2c_1_signin/oauth2/v2.0/authorize
    tokenUrl: https://icab2cprod.b2clogin.com/04c7fa07-b168-495f-9dcc-bcfceb1a274e/b2c_1_signin/oauth2/v2.0/token
  - flow: implicit
    authorizationUrl: https://icab2cprod.b2clogin.com/04c7fa07-b168-495f-9dcc-bcfceb1a274e/b2c_1_signin/oauth2/v2.0/authorize
    note: id_token / token response types are advertised in response_types_supported.
scopes:
- scope: openid
  description: |
    Standard OpenID Connect authentication scope. Returns an id_token for a member
    portal user; grants no access to any ICA data API.
  flows:
  - authorizationCode
  - implicit
  sources:
  - well-known/insurance-council-australia-openid-configuration.json
coverage:
  scope_count: 1
  data_scopes: 0
  client_credentials_scopes: 0