Cannot set idp.oidc.issuer

[Martin Haase]

Hi list,

this is now the second time I seem to be unable to set the OIDC issuer
for the IdP. This is an upgraded IdPv4, and GEANT OIDC plugin installed
along
https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/Installing-from-archive

Although I have set the issuer in idp-oidc.properties...

idp.oidc.issuer= https://portal-dev.example.prj/idp

...the OIDC ID token seems to contain the entityID instead:

[Tue Mar 09 09:08:42.616020 2021] [auth_openidc:error] [pid 18630]
[client 10.0.8.7:44184] oidc_proto_validate_jwt: requested issuer
(https://portal-dev.example.prj/idp) does not match received "iss" value
in id_token (https://portal-dev.example.prj/idp*/**shibboleth*),
referer: https://ubuntu1804sp.daasi.test/dummy-oidc

Any idea why this could happen, and how to fix it?

Regards

Martin



-- 
Dr. Martin Haase, Solutions Engineer

DAASI International GmbH        
Europaplatz 3                   
D-72072 Tübingen                
Germany                    

phone: +49 7071 407109-0
fax:   +49 7071 407109-9  
email: martin.haase at daasi.de
web:   www.daasi.de

Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210309/90431a66/attachment.htm>