OIDC RP plugin not finding client ID

[Philip Smart]

Hey, Philip,

Funny you should suggest that test. As I was heading to my office this morning, it occurred to me that I should try that exact test of directly adding the client ID as an RP override. Sure enough, that worked. Not sure why the value from oidc-rp.properties file is being ignored. Clearly, it’s picking up the issuer and client secret from that file.

For plugin versions, here’s everything OIDC and OUaht2 related. It’s a fresh Docker build, so everything should be the latest.

/opt/shibboleth-idp/bin/plugin.sh -L |grep oidc
Plugin net.shibboleth.idp.plugin.oidc.config: Installed version 2.2.0: No update available
Plugin net.shibboleth.idp.plugin.oidc.op: Installed version 4.2.1: No update available
Plugin net.shibboleth.idp.plugin.authn.oidc.rp: Installed version 2.1.2: No update available
Plugin net.shibboleth.oidc.common: Installed version 3.2.0: No update available


Thanks for confirming. I have opened an issue to track findings at https://shibboleth.atlassian.net/browse/JOIDCRP-71. I follow it up next week.

Phil



Keith




Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250321/2d5f9077/attachment.htm>