OIDC Response Type Assistance

[Ryan Rumbaugh]

Hi all,

I’m working with an OIDC relying party that is using a response_type of code and id_token and for the life of me I can’t figure out why Shibboleth returns:

WARN [net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateResponseType:136] - Profile Action ValidateResponseType: The response type code id_token is not registered for this RP

I have verified multiple times that it is in fact registered:

{
     "client_id”:"redacted",
      "client_secret”:”redacted”,
      "grant_types":["authorization_code","implicit"],
      "redirect_uris":["https://redacted/signin-oidc/85bd07df-8b21-4867-a81f-bf3a4a64cd9d"],
      "response_types":["code","id_token"],
      "scope":"email openid profile",
      "token_endpoint_auth_method":"client_secret_basic"
    }

I hope I’m missing something obvious. Any ideas or recommendations on how to proceed? Thanks!


--

Ryan Rumbaugh

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241104/74e82fee/attachment.htm>