- You must enable the following publicly accessible endpoints: - `https:///_services/token/.well-known/openid-configuration` - `https:///_services/token/.well-known/jwks`