Issuer URL / discovery fails

Verify that your Issuer URL is correct and publicly accessible. Most providers (Okta, Azure AD) have their issuer listed in their admin console — copy it exactly. Ensure your Lovable workspace can reach the issuer endpoint. Test by pasting the issuer URL in your browser; it should return a JSON discovery document.