OIDC help

[Jeffrey J Ramsay]

Hello -

I am in the process of configuring the openid service and need some
assistance. Our member support is still being finalized, so I am unable to
create a project and not sure what I should share on the public forum.

I'm using the openid client with a basic config.

$oidc->setTokenEndpointAuthMethodsSupported(['client_secret_post']);
$oidc->addScope('email profile');

The errors I an recieving are:
DEBUG [PROTOCOL_MESSAGE.OAUTH2:135] -
AuthenticationSuccessResponse{authorizationCode=AApzZWNyZXQxNTAyykyk7qQtshuJSLoRry30CQfwjvpsHhCzpUBq_qtUa6KnQiFhM5A36cQQU2Gu3D4VGOpBLoj-XxiDIOjWISd3aDXGWc2cRAsLYTQ73NstCFsQOfp15z0G8q71mVGOT2o-TY1R4CEo7Fyvd8JPZB5jAAhCdghbIc7tZe-KjK3O98lcaxV5rS2SvD4XJNO9aZGGEbUg7Kp6Bkxv4mdGyXFxJTlXDkqp9DmYBrmDY5m9DQ7z-EeuNO5SsPqYWmCPlIOe_PxtCrjxcrOYgnkwZp_pWFiVqMs0vkaKclXv06GhAvLPZxAjxozhUGwIfwrSZahnkX38rftN9nLTqJB1ysY-2HJPPm42jORPCZfiPop0dZtoEekGi4XLg80Q3WE1R9Ma2XPMwgsh82LvFbxworMEyL-1f0opPdnpm4auJEEFfuddGAjDpzNQxhtqJKKoBbJL4mOwtHHZXHH56fWs4H5tYAqHIIwAUsztW4P9t5fWMuFQ0hNO34OKvfKJ8KE,
redirectionURI=https://idp-dev.cc.binghamton.edu/openid-client/index.php,
state=260bc2b7618ae01cf048b91c135e82fd}
DEBUG [org.opensaml.profile.action.impl.EncodeMessage:158] - Profile Action
EncodeMessage: Outbound message encoded to a message of type
com.nimbusds.openid.connect.sdk.AuthenticationSuccessResponse

DEBUG [PROTOCOL_MESSAGE.OAUTH2:114] -
OIDCTokenRequestDecoder{authorizationGrant=AuthorizationCodeGrant{authorizationCode=AApzZWNyZXQxNTAyykyk7qQtshuJSLoRry30CQfwjvpsHhCzpUBq_qtUa6KnQiFhM5A36cQQU2Gu3D4VGOpBLoj-XxiDIOjWISd3aDXGWc2cRAsLYTQ73NstCFsQOfp15z0G8q71mVGOT2o-TY1R4CEo7Fyvd8JPZB5jAAhCdghbIc7tZe-KjK3O98lcaxV5rS2SvD4XJNO9aZGGEbUg7Kp6Bkxv4mdGyXFxJTlXDkqp9DmYBrmDY5m9DQ7z-EeuNO5SsPqYWmCPlIOe_PxtCrjxcrOYgnkwZp_pWFiVqMs0vkaKclXv06GhAvLPZxAjxozhUGwIfwrSZahnkX38rftN9nLTqJB1ysY-2HJPPm42jORPCZfiPop0dZtoEekGi4XLg80Q3WE1R9Ma2XPMwgsh82LvFbxworMEyL-1f0opPdnpm4auJEEFfuddGAjDpzNQxhtqJKKoBbJL4mOwtHHZXHH56fWs4H5tYAqHIIwAUsztW4P9t5fWMuFQ0hNO34OKvfKJ8KE,
redirectionURI=https://yyyyyyyyyyyyyyy/openid-client/index.php,
type=authorization_code},
clientAuthentication=ClientAuthentication{clientId=xxxxxxxxxxx,
method=client_secret_post}, customParameters={}, endpointURI=
https://yyyyyyyyy/idp/profile/oidc/token}

DEBUG [PROTOCOL_MESSAGE.OAUTH2:135] -
TokenErrorResponse{errorObject=ErrorObject{httpStatusCode=401,
code=invalid_client, description=Client authentication failed}}

Please let me know what else I should post.

Thanks,
-Jeff


-- 
Jeffrey Ramsay
<https://calendar.google.com/calendar/embed?src=jramsay@binghamton.edu&ctz=America/New_York>
Assistant Director of Enterprise Systems
Binghamton University
http://www.binghamton.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240918/eb7c0821/attachment.htm>