[External] Re: OIDC for Mobile App

[Cantor, Scott]

>Scott, There is no client metadata for the OIDC services.
> The extent of the config is below.

That is (JSON format) client metadata and I see it specifies the relevant setting.

The OP I think defaults to global rules that limit what registered client authn methods for the token endpoint are allowed, so the logs should say that clearly and trip up on that. The OAUTH.Token profile config bean has settings we document for the rules it applies.

https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2931327005/OPToken

tokenEndpointAuthMethods

-- Scott