Are there any pointers to speedup (or check the bottleneck for) OIDC flows? We do have 3 to 4 seconds for prod environment (Production Plan), which feels too slow:

We typically have to do a couple of calls to the OIDC provider: 1. exchange auth code for tokens 2. call

/me

(or similar) API to get all details about the user 3. apply the jsonnet mapping 4. create all resources on our side I'd guess that a significant amount of time is spend on 1, 2 and 3, which we cannot really improve. We're constantly checking performance of any persistence functionality and work on improving it.

status.ory.sh shows avg times of ~200ms per request. We see ~1000ms per request. Why the difference? Is there anything we can do (net config, auth config) to speed it up or is it perhaps related to cloudflare?

Every API does something different, so the latency varies by what you do.