OIDC claims missing after upgrade to IdP 4.1

Wessel, Keith kwessel at illinois.edu
Tue Jul 20 22:36:09 UTC 2021


Thanks, Scott. Yes, I'm expecting to see them in the userinfo response, not the idtoken. I'll try turning off consent to see if that helps. I am still seeing that strange uncaught exception that I posted to the list last week related to consent. So, that could quite possibly be the issue.

I'll report back.

If that doesn't help, do you know what class I'd turn up logging for if I wanted to see details on the processing for the OIDC attribute filtering?

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Tuesday, July 20, 2021 5:05 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: OIDC claims missing after upgrade to IdP 4.1

Treating this as a nominal support request, I'll say what I said on Slack: the best source of help is on vacation so there really is nobody on the team with any experience with the plugin to speak to how to debug it other than the usual platitudes.

I would probably start by turning off consent and seeing if that affects it.

I assume you mean that you don't see them in the user token, and you're not expecting them to be in the id token.

It's probably something simple or improperly documented as an upgrade issue since people are certainly using it.

-- Scott


-- 
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!DZ3fjg!oDrvSbbz-ov-RUMbOsxy_dyS4UcMhfTXcLQeu6Oy53weUuD10E36XyW5FFdoKaG66A$ 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list