oauth2(ServerID/reply). It may be left
undefined if the server can find its own location. This URI
is normally registered with the identity provider.url,
followed by /.well-known/openid-configuration. The
discovery URL is used if one of the other required attributes
is not defined by the hook.cert_accept_any, any certificate
is accepted. This can be used to deal with self-signed
certificates in expertimental setups.EDIT: