Coveo
OpenID Configuration
https://connect.coveo.com/.well-known/openid-configuration
JWKS URI
https://connect.coveo.com/id/keys
Active Keys
| KID | Use | Alg/Crv | Key Length | Observed |
|---|---|---|---|---|
| 266 | sig | RS256 | 4096 | 2026-10-10 |
| CORE_ATJWT.00D3000000007r2.1791304686230 | sig | RS256 | 2048 | 2026-10-07 |
| 262 | sig | RS256 | 4096 | 2026-09-22 |
| 264 | sig | RS256 | 4096 | 2026-09-22 |
| CORE_ATJWT.00D3000000007r2.1786095467152 | sig | RS256 | 2048 | 2026-09-22 |
| CORE_ATJWT.00D3000000007r2.1788712669197 | sig | RS256 | 2048 | 2026-09-22 |
| intellum_prod_260218 | sig | RS256 | 2048 | 2026-09-22 |
Identity Provider Signals
SalesforceChecked boxes mark headers observed on each endpoint during a successful crawl.
Header signals are clues, not proof of the identity platform. Proxies can add or remove headers.
Salesforce headers identify its edge infrastructure; they do not by themselves establish which identity service is behind it.
Recently Deactivated Keys
| KID | Use | Alg/Crv | Key Length | Observed |
|---|---|---|---|---|
| 260 | sig | RS256 | 4096 | 2026-09-22 to 2026-10-10 (17 days) |
| CORE_ATJWT.00D3000000007r2.1783503217893 | sig | RS256 | 2048 | 2026-09-22 to 2026-10-07 (14 days) |