Arist Identity (OIDC)

aid: arist:identity
name: Arist Identity (OIDC)
description: Arist runs its customer-facing authentication on an Auth0 tenant at auth.arist.app. The tenant
  publishes an RFC 8414 / OpenID Connect Discovery document anonymously, describing the authorization,
  token, device-authorization, userinfo, revocation, dynamic-registration and backchannel-authentication
  endpoints, the supported grant types (authorization_code, client_credentials, refresh_token, device_code,
  password, implicit), PKCE methods and DPoP algorithms, plus the standard OIDC scope set. This is the
  only machine-readable contract Arist publishes without credentials. Enterprise customers federate into
  it with SAML or OIDC from Entra ID, Okta, Google Workspace, ADFS or PingFederate; organizations without
  SSO sign in with a one-time passcode delivered by email.
humanURL: https://help.arist.co/article/1027-arist-application-sso-single-sign-on-integration-guide
baseURL: https://auth.arist.app
tags:
- Authentication
- OpenID Connect
- OAuth
- Single Sign On
properties:
- type: WellKnown
  url: well-known/arist-well-known.yml
- type: OpenIDConnect
  url: well-known/arist-openid-configuration.json
- type: Authentication
  url: authentication/arist-authentication.yml
- type: OAuthScopes
  url: scopes/arist-scopes.yml