OIDC Relying Party Authentication Proxy Plugin v2.1.1 Now Available

[Philip Smart]

The Shibboleth Project has released V2.1.1 of the OIDC Relying Party (RP) authentication plugin (see the documentation at [1] and the release notes at [2]).

This update resolves an issue with version 2.1.0 where PKCE support was enabled by default on both the RP and, importantly, OP if installed.

If you’ve already installed RP v2.1.0 alongside the OP and did not intend to enable PKCE support, please ensure that the property "idp.oidc.forcePKCE" is commented out in “conf/authn/oidc-rp.properties”.

-- Phil Smart, on behalf of the team

[1] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3013804089/OIDCRelyingPartyAuthnConfiguration
[2] https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3239968769/OIDCRelyingPartyAuthnConfigurationReleaseNotes


Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/announce/attachments/20240412/272ef079/attachment.htm>