Subtoken SSO

OIDC discovery: /.well-known/openid-configuration

SAML metadata: /saml/metadata.xml