diff --git a/oidc/oidc.go b/oidc/oidc.go
index 3e1d80e0..865f6e2c 100644
--- a/oidc/oidc.go
+++ b/oidc/oidc.go
@@ -178,6 +178,11 @@ func NewProvider(ctx context.Context, issuer string) (*Provider, error) {
 			algs = append(algs, a)
 		}
 	}
+	
+	if p.JWKSURL == "" {
+		return nil, fmt.Errorf("oidc: remote keys urls is empty")
+	}
+
 	return &Provider{
 		issuer:       issuerURL,
 		authURL:      p.AuthURL,