Installation of OpenID connect extension in Shibboleth v3

[Cantor, Scott]

On 4/16/20, 12:54 PM, "users on behalf of Darren Boss" <users-bounces at shibboleth.net on behalf of darren.boss at computecanada.ca> wrote:

> I've been able to test my setup with an OIDC RP using mod_auth_openidc so I know the configuration is working. The
> /idp/profile/oidc/register still is generating that error which is what I'll look at fixing now that I've got a few more tips on
> what to look at.

It should have been self-evident to me, but of course...the registration flow absolutely has to be opened up to the Unverified RP configuration. It makes no sense to enable registration for "recognized RPs", the whole point of the flow is to register them so they can be recognized later.

-- Scott