JWKS url for OAuth access in Brightspace?

Kasper.L.5341

We are trying to verify the access token from OAuth. In order to do this, we need a "key identifier" (kid) from Brightspace, but we are not sure how to find it.

There's one endpoint in our environment called:

https://<instance>.brightspace.com/d2l/.well-known/jwks

Here are a set of keys that can be used, but none of them matches the 'kid' value that we have in the access token.

Has anyone come across this problem before? Is there somewhere in the system configuration where the OAuth app should be registered to generate keys to the JWKS (Json Web Keyset)? Or are we looking at a wrong URL?

We have tried to search for it in Brightspace's documentation and in the discussion forum, but without luck.