1. Authentication
  2. Retrieve the well-known OIDC configuration information