diff --git a/docs/oauth2-oidc/issuer-url.mdx b/docs/oauth2-oidc/issuer-url.mdx index dfc4d727a..b29889ab4 100644 --- a/docs/oauth2-oidc/issuer-url.mdx +++ b/docs/oauth2-oidc/issuer-url.mdx @@ -4,11 +4,26 @@ title: Change the OAuth2 issuer URL sidebar_label: Change Issuer URL --- -To change the OAuth2 and OpenID Connect Issuer URL, run the following [Ory CLI](../guides/cli/01_installation.mdx) command: +When your OAuth2 or OpenID Connect client complains that the issuer URL is incorrect, this can have the following reasons: + +1. You have misconfigured your OpenID Connect Client. Make sure you are using the correct issuer URL. +2. You connected a custom domain to your Ory Network project before February 20th 2024. In this case, the issuer URL might be + incorrect. +3. You have manually overwritten the issuer URL in your Ory Network Project. +4. You are using more than one custom domain connected to a single Ory Network project. + +You can view the issuer URL of your Ory Network project using the [Ory CLI](../guides/cli/01_installation.mdx): + +```shell +ory get oauth2-config {project-id} --format json | jq '.urls.self.issuer' +``` + +Use this value to understand if the server is incorrectly configured or if the client is using the wrong issuer URL. To change the +issuer URL, you can use the [Ory CLI](../guides/cli/01_installation.mdx): ```shell ory patch oauth2-config {project-id} \ --replace '/urls/self/issuer="https://auth.myexample.org"' ``` -Ideally, this URL is the CNAME domain you have set up for the Ory Network. +Ideally, this URL is the primary custom domain you have set up for the Ory Network.