OIDC plugin credential validator failed

[David Stava]

Hello there,


I'm using OIDC OP plugin version 4.2.0 with shibboleth idp 5.1.3


I'm trying to setup the first RP and get an error that client authentication failed.


2024-12-19 13:23:41,224 - INFO [net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator:167] - Credential Validator oauth2-clientinfo: Login by 'rp-test' failed
2024-12-19 13:23:41,225 - DEBUG [net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator:168] - Credential Validator oauth2-jwt: OAuth client authentication for 'rp-test' of unsupported type: client_secret_basic

In oidc.properties client_secret_basic is enabled
idp.oidc.tokenEndpointAuthMethods = client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt

I'm using a .json file for the metadata and tried setting token_endpoint_auth_method

[
  {
    "scope":"openid email profile",
    "redirect_uris":["https://rp-test.ista.ac.at/oauth/oidc/callback"],
    "client_id":"rp-test",
    "client_secret":"xxx",
    "response_types":["code"],
    "grant_types":["authorization_code"],
    "token_endpoint_auth_method":"client_secret_basic"
  }
]

Do you maybe know what's causing this? I had a similar issue with Keycloak and I had to set the client to public, but I haven't found a way how to do it in Shibboleth. Thanks in advance!



David Stava
IT system administrator
Institute of Science and Technology Austria (ISTA)
David.Stava at ist.ac.at<mailto:Anastasiia.heurteur at ist.ac.at>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241219/4738942c/attachment.htm>