How to load static embedded metadata file on the shibboleth as RP

[Zhang, Jianjun]

Hi,

I have shibboleth v5.2.1 as an OIDC proxy (with oidc rp plugin installed). The shibboleth server has no network connectivity to the upstream OIDC OP, so it has to load the OP's metadata in static json file. I am having trouble getting the json file loaded by conf/authn/oidc-rp-providermetadata-resolvers.xml. The json metadata file (upstream-op.json) provided by the upstream op is like this:

{
               "issuer": "https://upstream-oidc-issuer/idp",
               "authorization_endpoint": https://upstream-oidc-issuer/idp/profile/oidc/authorize",
               "response_types_supported", ["id_token"],
               "response_modes_supported", ["form_post"],
               "subject_types_supported", ["public"],
               "jwks": {
                              "keys": [
                                             {
                                                            "kty": "RSA",
                                                            "e": "AQAB",
                                                            "n": "....... Op key ....",
                                                            "use": "sig",
                                                            "kid": "... kid string..."
                                             }
                              ]
               }
}

I have something like below configured in file conf/authn/oidc-rp-providermetadata-resolvers.xml, but it does not work. Any idea how I should load file upstream-op.json?
<util:list id="shibboleth.authn.oidc.ProviderMetadataResolvers">
                              <ref-bean="upstream-op-metadata"/>
</util:list>
<bean id="upstream-op-metadata" parent="shibboleth.authn.oidc.rp.StaticOIDCMetadataProviderResolver"
                              P:metadataResouce="%{idp.home}/metadata/oidc-op/upstream-op.json" />

The logs say there is no shibboleth.authn.oidc.StaticOIDCMetadataProviderResolver. What is the right tool to load the json metadata?

Thank you very much in advance for any help.

Johnny




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20260409/be069638/attachment.htm>