Experience with OIDC plugin
Jim Fox
fox at washington.edu
Mon Nov 19 14:08:15 EST 2018
>
>>> I have to set 'issuer' to be my IdP's entityID or else nothing works.
>
> That suggests there is something funny in your installation or in our beta release. What does nothing works mean in this context?
>
Sorry, really poor wording on my part.
In my shib idp.properties file I set my saml entityID
idp.entityID= urn:mace:incommon:washington.edu:dev
In my idp-oidc.properties I can set either
idp.oidc.issuer = https://idp-dev.u.washington.edu
or
idp.oidc.issuer = urn:mace:incommon:washington.edu:dev
It makes no difference. The response to my SP always has:
OIDC_CLAIM_iss = urn:mace:incommon:washington.edu:dev (mod_auth_openidc)
which seems to come from idp.entityID and not from idp.oidc.issuer
Jim
More information about the dev
mailing list