Steadfast Group

Steadfast Identity (OpenID Connect)

Steadfast Group's Okta-hosted OpenID Connect provider, issuer https://idp.steadfast.com.au. It fronts the credentialed broker portal used by the Steadfast Network's 414 brokerages and, by inference from the shared estate, internal and partner applications. The discovery document is anonymously readable and advertises authorization, token, userinfo, JWKS, introspection, revocation, device-authorization, dynamic-client-registration and logout endpoints, with PKCE S256 and DPoP proof-of-possession supported. Client credentials are not self-serve - anonymous dynamic client registration returns 403 - so this is a discoverable but commercially gated surface, listed because its contract is genuinely machine-readable.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/steadfast-group/refs/heads/main/authentication/steadfast-group-authentication.yml

Other Resources

🔗
OpenIDConnect
https://raw.githubusercontent.com/api-evangelist/steadfast-group/refs/heads/main/well-known/steadfast-group-openid-configuration.json
🔗
WellKnown
https://raw.githubusercontent.com/api-evangelist/steadfast-group/refs/heads/main/well-known/steadfast-group-well-known.yml
🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/steadfast-group/refs/heads/main/scopes/steadfast-group-scopes.yml

API entry from apis.yml

apis.yml Raw ↑ 
aid: steadfast-group:identity
name: Steadfast Identity (OpenID Connect)
description: Steadfast Group's Okta-hosted OpenID Connect provider, issuer https://idp.steadfast.com.au.
  It fronts the credentialed broker portal used by the Steadfast Network's 414 brokerages and, by inference
  from the shared estate, internal and partner applications. The discovery document is anonymously readable
  and advertises authorization, token, userinfo, JWKS, introspection, revocation, device-authorization,
  dynamic-client-registration and logout endpoints, with PKCE S256 and DPoP proof-of-possession supported.
  Client credentials are not self-serve - anonymous dynamic client registration returns 403 - so this
  is a discoverable but commercially gated surface, listed because its contract is genuinely machine-readable.
humanURL: https://broker.steadfast.com.au/
baseURL: https://idp.steadfast.com.au
tags:
- Identity
- OpenID Connect
- OAuth 2.0
- Single Sign-On
- Partner Gated
properties:
- type: OpenIDConnect
  url: well-known/steadfast-group-openid-configuration.json
  name: OpenID Connect discovery document (harvested verbatim)
- type: WellKnown
  url: well-known/steadfast-group-well-known.yml
- type: OAuthScopes
  url: scopes/steadfast-group-scopes.yml
- type: Authentication
  url: authentication/steadfast-group-authentication.yml