Experience with OIDC plugin

[Janne Lauros]

>It makes no difference.  The response to my SP always has:

>    OIDC_CLAIM_iss = urn:mace:incommon:washington.edu:dev (mod_auth_openidc)

>which seems to come from idp.entityID and not from idp.oidc.issuer


That is a bug in our installation instructions. I have updated the instructions. Thanks for noticing that.

In relying party definition there has to be "p:responderIdLookupStrategy-ref="profileResponderIdLookupFunction" set so that oidc profiles use issuer id instead of entity id as responder id. Add that it should work. Sorry for the bad instructions.


.. 
<bean id="shibboleth.DefaultRelyingParty" p:responderIdLookupStrategy-ref="profileResponderIdLookupFunction" parent="RelyingParty">
..


BR Janne 



-- 
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net