ENTRUST OIDC issuer — see /.well-known/openid-configuration