OIDC : configure userinfo endpoint to send signed jwt response

Pierre SAGNE pierre.sagne at ac-orleans-tours.fr
Thu Sep 5 11:21:33 UTC 2024


Hello,

Im using Shibboleth IdP 5 with OIDC OP plugin.

One of our clients requires that our userinfo endpoint returns a signed 
response. I guess he means a signed jwt response, as I guess is a 
possibility in the OIDC specs.

I have not found in the documentation how to configure this or whether 
or not it is supported by the OIDC OP plugin.

If it can be configured, i'd very much appreciate if there is a solution 
to configure it by client, ton not disturb our existing clients who use 
the basic unsigned userinfo.

Thanks a lot for any answer.

Best regards,

-- 
Pierre Sagne.



More information about the users mailing list