<div dir="ltr">Hello,<br><div>am trying to setup OIDC plugin, and testing using this sample app : <a href="https://github.com/curityio/example-python-openid-connect-client">https://github.com/curityio/example-python-openid-connect-client</a></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">2023-02-02 13:43:06,648 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - WARN [net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters:258] - Profile Action PopulateOIDCEncryptionParameters: Resolver returned no EncryptionParameters<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:243] - Validation failure: Failed to resolve an encryption key<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - DEBUG [net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver:226] - No algorithm information in client information, falling back to default configuration<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - DEBUG [net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters:291] - Profile Action PopulateOIDCEncryptionParameters: Adding OIDC client information to resolution criteria for encryption algorithms<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - DEBUG [net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters:232] - Profile Action PopulateOIDCEncryptionParameters: Resolving EncryptionParameters for request object decryption</blockquote><div><br></div><div><br></div><div>What could cause this error? <br></div><div><br></div><div>The config for this SP has these settings in it:</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><md:SPSSODescriptor protocolSupportEnumeration="<a href="http://openid.net/specs/openid-connect-core-1_0.html">http://openid.net/specs/openid-connect-core-1_0.html</a>"><br>        <md:Extensions><br>            <oidcmd:OAuthRPExtensions<br>                grant_types="authorization_code implicit refresh_token"<br>                response_types="id_token code"<br>                token_endpoint_auth_method="client_secret_post"<br>                scopes="openid profile offline_access" /><br>        </md:Extensions><br>        <md:KeyDescriptor><br>            <ds:KeyInfo xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a>"><br>                <oidcmd:ClientSecret>the-shared-secret-here</oidcmd:ClientSecret><br>            </ds:KeyInfo><br>        </md:KeyDescriptor><br>        <md:NameIDFormat>urn:mace:shibboleth:metadata:oidc:1.0:nameid-format:public</md:NameIDFormat><br>        <md:AssertionConsumerService<br>                Binding="<a href="https://tools.ietf.org/html/rfc6749#section-3.1.2">https://tools.ietf.org/html/rfc6749#section-3.1.2</a>"<br>                Location="<a href="https://localhost:5443/callback">https://localhost:5443/callback</a>"<br>                index="1"/><br>    </md:SPSSODescriptor></blockquote><div><br></div><div><br></div></div>