just checking, could be a bug: there seems to be only one .well-known oidc url for the whole site. However, when using a different cert than the built-in one for an application this does not work, or am I missing something?
Wouldn't each app need its own oidc url endpoint? And isn't it better to create per-app certs instead of using the same cert across apps with potentially different tenants by default? Not an expert, hence asking and looking forward to more knowledgeable input.
