Installation of OpenID connect extension in Shibboleth v3

Cantor, Scott cantor.2 at
Thu Apr 16 13:07:38 EDT 2020

On 4/16/20, 12:54 PM, "users on behalf of Darren Boss" <users-bounces at on behalf of darren.boss at> wrote:

> I've been able to test my setup with an OIDC RP using mod_auth_openidc so I know the configuration is working. The
> /idp/profile/oidc/register still is generating that error which is what I'll look at fixing now that I've got a few more tips on
> what to look at.

It should have been self-evident to me, but of course...the registration flow absolutely has to be opened up to the Unverified RP configuration. It makes no sense to enable registration for "recognized RPs", the whole point of the flow is to register them so they can be recognized later.

-- Scott

More information about the users mailing list