# Canada Life API Gateway (OAuth 2.0 / OpenID Connect)

**Canonical:** https://apis.io/apis/great-west-lifeco/canada-life-api-gateway/  
**Provider:** Great-West Lifeco — https://apis.io/providers/great-west-lifeco/  
**Base URL:** https://api.canadalife.com  
**Documentation:** https://www.canadalife.com/

Canada Life API Gateway (OAuth 2.0 / OpenID Connect) is one of 3 APIs that [Great-West Lifeco](https://apis.io/providers/great-west-lifeco/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Authentication, OpenID Connect, Authorization, Canada, and Partner Gated. The published artifact set on APIs.io includes authentication docs.

The production API gateway of Canada Life, Great-West Lifeco's Canadian operating brand, at api.canadalife.com. It publishes no documentation, but it does serve a real OpenID Connect discovery document anonymously at /.well-known/openid-configuration (HTTP 200) - the only machine-readable contract published anywhere in the Great-West Lifeco group. The document declares issuer https://api.canadalife.com, a token endpoint at /oauth2/v1/generate, live JWKS at /oauth2/v1/jwks (HTTP 200), revocation at /oauth2/v1/revoke and userinfo at /oauth2/v1/userinfo, with RS256 ID-token signing and client_secret_basic / client_secret_post / client_secret_jwt client authentication. The authorization endpoint is deliberately published as /oauth2/v1/authorize-NOT-SUPPORTED, so the gateway is machine-to-machine only, and scopes_supported is an empty array. Anonymous calls to protected paths return an Apigee error envelope naming the Consumer-Key and pointing to https://apimarketplace.canadalife.com - a digitalML-hosted Canada Life API marketplace whose hostname CNAMEs to canadalife.digitalml.com and does not resolve on the public internet. Entitlement is therefore partner-only, with no public request path.

## Machine-readable artifacts (3)

- **OpenIDConnect** — https://raw.githubusercontent.com/api-evangelist/great-west-lifeco/refs/heads/main/well-known/great-west-lifeco-openid-configuration.json
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/great-west-lifeco/refs/heads/main/authentication/great-west-lifeco-authentication.yml
- **ErrorCatalog** — https://raw.githubusercontent.com/api-evangelist/great-west-lifeco/refs/heads/main/errors/great-west-lifeco-problem-types.yml

## Other Great-West Lifeco APIs (2)

- [Empower Balance API](https://apis.io/apis/great-west-lifeco/empower-balance-api/)
- [Empower OAuth 2.0 API](https://apis.io/apis/great-west-lifeco/empower-oauth-2-0-api/)

## Tags

Authentication, OpenID Connect, Authorization, Canada, Partner Gated

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/great-west-lifeco/canada-life-api-gateway/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/great-west-lifeco/.