Staging and Production URLs

The domains used in sample requests below may differ from those in your environment. Choose the appropriate domain from the table below based on your testing or production requirements.

NO certificate pinning or dependencies should be implemented on the TLS certificates for Corppass domains. Corppass reserves the right to update or rotate its TLS certificates without prior notice to RPs.

Endpoint	Access Mechanism	Staging URL	Production URL
OpenID Discovery Endpoint	Public TLS	https://stg-id.corppass.gov.sg/.well-known/openid-configuration	https://id.corppass.gov.sg/.well-known/openid-configuration
JWKS Endpoint	Public TLS	https://stg-id.corppass.gov.sg/.well-known/keys	https://id.corppass.gov.sg/.well-known/keys
Authorization Endpoint	Public TLS	https://stg-id.corppass.gov.sg/mga/sps/oauth/oauth20/authorize	https://id.corppass.gov.sg/mga/sps/oauth/oauth20/authorize
Token Endpoint	Public TLS w/ Client Assertions	https://stg-id.corppass.gov.sg/mga/sps/oauth/oauth20/token	https://id.corppass.gov.sg/mga/sps/oauth/oauth20/token
Authorization Info endpoint	Public TLS w/ Access Token	https://stg-id.corppass.gov.sg/authorization-info	https://id.corppass.gov.sg/authorization-info