Installation of OpenID connect extension in Shibboleth v3

[Henri Mikkonen]

> I've followed that exact page form the wiki to get the extension configured but I'm stuck now with an error when testing an RP when the client tried to register or when I request the /idp/profile/oidc/discovery url. In the logs I keep seeing InvalidProfileConfiguration errors for both registration and for discovery. What files should I be focusing on to fix this issue?

Check out from the conf/relying-party.xml that you have enabled OIDC.Configuration (corresponds to /idp/profile/oidc/discovery URL) and OIDC.Registration (/idp/profile/oidc/register) for shibboleth.UnverifiedRelyingParty.

The example on the installation instructions [1] only contains OIDC.Keyset, perhaps it should also contain OIDC.Configuration. The dynamic OP configuration (i.e. the OIDC.Configuration profile) is documented in here [2]

BR,
Henri.

[1] https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/Installing-from-archive#profile-configurations <https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/Installing-from-archive#profile-configurations>
[2] https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/DiscoveryAndOPConfiguration#the-discovery-flow-configuration <https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/DiscoveryAndOPConfiguration#the-discovery-flow-configuration>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200416/e56db5e6/attachment.html>