Zonder identity provider. See /.well-known/jwks.json