Authenticating with OAuth2?

[Wessel, Keith]

Hey, all,

I've got a service that wants to connect up with our IdP using OAuth2, not OIDC. I know that OIDC is just a framework on top of OAuth2, but operating outside of the OIDC framework, I don't know much more than that. He tried sending an authorization request to /idp/profile/oidc/authorize, but since it didn't contain a scope parameter in the request, it failed. Since his library is using pure OAuth2, he can't add a scope parameter to the request.

Is there a different endpoint he should be sending to? I can't seem to find any specifics in the OIDC plugin documentation on the wiki about this.

If the IdP's OAuth2 support doesn't work for use cases like this, I'll happily tell him he either needs to use OIDC or switch back to SAML (which he was trying to avoid).

Thanks,
Keith