Installation of OpenID connect extension in Shibboleth v3

Darren Boss darren.boss at computecanada.ca
Thu Apr 9 11:34:47 EDT 2020


There was an uncommented oidc config in the oidc-metadata-providers.xml
file but I did go in and remove the ExampleStorageClientInformationResolver
from the ClientInformationResolvers. I have created the oidc-client.json
file which is what the example configuration references. Still getting
InvalidProfileConfiguration in the logs when accessing the
https://idp.mit.c3.ca/idp/profile/oidc/discovery url.

On Thu, Apr 9, 2020 at 11:15 AM Mak, Steve <makst at upenn.edu> wrote:

> Did you make sure you added the oidc config file to
> oidc-metadata-providers.xml (new bean) and added that bean ref to the
> ClientInformationResolvers bean?
>
>
>
>     <util:list id="shibboleth.oidc.ClientInformationResolvers"
>
>
> value-type="org.geant.idpextension.oidc.metadata.resolver.ClientInformationResolver">
>
>         <ref bean="newRP" />
>
>     </util:list>
>
>
>
>     <bean id="newRP"
>
>
> class="org.geant.idpextension.oidc.metadata.impl.FilesystemClientInformationResolver"
>
>
>         p:id="whatever_you_want"
>
>         p:remoteJwkSetCache-ref="shibboleth.oidc.RemoteJwkSetCache"
> c:metadata="%{idp.home}/metadata/oidc/newRP.json" />
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal
darren.boss at computecanada.ca
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200409/3b3be852/attachment.html>


More information about the users mailing list