<div dir="ltr">In case it helps anyone. my credentials.xml and oidc-credentials.xml were correct, but were in the wrong folder!!!<div><br></div><div>Thanks,</div><div>Mohamed.</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Feb 2, 2023 at 2:23 PM Mohamed Lrhazi <<a href="mailto:lrhazi@cua.edu">lrhazi@cua.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hello,<br><div>am trying to setup OIDC plugin, and testing using this sample app : <a href="https://github.com/curityio/example-python-openid-connect-client" target="_blank">https://github.com/curityio/example-python-openid-connect-client</a></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">2023-02-02 13:43:06,648 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6" target="_blank">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - WARN [net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters:258] - Profile Action PopulateOIDCEncryptionParameters: Resolver returned no EncryptionParameters<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6" target="_blank">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:243] - Validation failure: Failed to resolve an encryption key<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6" target="_blank">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - DEBUG [net.shibboleth.idp.plugin.oidc.op.security.impl.OIDCClientInformationEncryptionParametersResolver:226] - No algorithm information in client information, falling back to default configuration<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6" target="_blank">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - DEBUG [net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters:291] - Profile Action PopulateOIDCEncryptionParameters: Adding OIDC client information to resolution criteria for encryption algorithms<br>2023-02-02 13:43:06,647 - <a href="http://172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6" target="_blank">172.25.0.1/D5F65DA4F127D957EDB2BBFE68C7F0E6</a> - DEBUG [net.shibboleth.idp.plugin.oidc.op.profile.impl.PopulateOIDCEncryptionParameters:232] - Profile Action PopulateOIDCEncryptionParameters: Resolving EncryptionParameters for request object decryption</blockquote><div><br></div><div><br></div><div>What could cause this error? <br></div><div><br></div><div>The config for this SP has these settings in it:</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><md:SPSSODescriptor protocolSupportEnumeration="<a href="http://openid.net/specs/openid-connect-core-1_0.html" target="_blank">http://openid.net/specs/openid-connect-core-1_0.html</a>"><br>        <md:Extensions><br>            <oidcmd:OAuthRPExtensions<br>                grant_types="authorization_code implicit refresh_token"<br>                response_types="id_token code"<br>                token_endpoint_auth_method="client_secret_post"<br>                scopes="openid profile offline_access" /><br>        </md:Extensions><br>        <md:KeyDescriptor><br>            <ds:KeyInfo xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/2000/09/xmldsig#</a>"><br>                <oidcmd:ClientSecret>the-shared-secret-here</oidcmd:ClientSecret><br>            </ds:KeyInfo><br>        </md:KeyDescriptor><br>        <md:NameIDFormat>urn:mace:shibboleth:metadata:oidc:1.0:nameid-format:public</md:NameIDFormat><br>        <md:AssertionConsumerService<br>                Binding="<a href="https://tools.ietf.org/html/rfc6749#section-3.1.2" target="_blank">https://tools.ietf.org/html/rfc6749#section-3.1.2</a>"<br>                Location="<a href="https://localhost:5443/callback" target="_blank">https://localhost:5443/callback</a>"<br>                index="1"/><br>    </md:SPSSODescriptor></blockquote><div><br></div><div><br></div></div>
</blockquote></div>