CCC Identity (OpenID Connect)
The Okta-hosted identity service behind CCC Connect and the CCC customer and partner portals, running on the custom domain auth.cccis.com (cccis.customdomains.okta.com). This is the only CCC surface that serves machine-readable discovery anonymously - an OpenID Connect Discovery 1.0 document and an RFC 8414 authorization-server metadata document at the org level, plus a second discovery document for the custom authorization server used by CCC Connect. Supports authorization code with PKCE (S256), implicit, password, refresh token and device code grants, token introspection and revocation, and advertises DPoP signing algorithms. connect.cccis.com issues an authorization-code + PKCE request with scope "openid email profile connect:portal". No public or dynamic client registration is offered to third parties.