Experience with OIDC plugin

Jim Fox fox at washington.edu
Mon Nov 19 14:08:15 EST 2018


>
>>> I have to set 'issuer' to be my IdP's entityID or else nothing works.
>
> That suggests there is something funny in your installation or in our beta release. What does nothing works mean in this context?
>

Sorry, really poor wording on my part.

In my shib idp.properties file I set my saml entityID

    idp.entityID= urn:mace:incommon:washington.edu:dev


In my idp-oidc.properties I can set either

    idp.oidc.issuer = https://idp-dev.u.washington.edu

or

    idp.oidc.issuer = urn:mace:incommon:washington.edu:dev

It makes no difference.  The response to my SP always has:

    OIDC_CLAIM_iss = urn:mace:incommon:washington.edu:dev (mod_auth_openidc)

which seems to come from idp.entityID and not from idp.oidc.issuer

Jim






More information about the dev mailing list