<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="ltr">
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">Hi all,</span></div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<br>
</div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">I’m working with an OIDC relying party that is using a response_type of code and id_token and for the life of me I can’t figure out why Shibboleth returns:</span><span></span><span></span><span></span></div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<br>
</div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<code style="text-decoration:none"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">WARN [net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateResponseType:136] - Profile Action ValidateResponseType:
The response type code id_token is not registered for this RP</span></code><br>
</div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<br>
</div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">I have verified multip</span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">le times that it is in fact
regi</span><span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">stered:</span></span><span></span></div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span><span><br>
</span></span></div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">{</span></span></div>
<div dir="ltr"><span style="font-size: 12pt; font-family: Aptos, Arial, Helvetica, sans-serif; line-height: normal;"> "client_id</span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">”</span><span style="font-size: 12pt; font-family: Aptos, Arial, Helvetica, sans-serif; line-height: normal;">:"redacted",</span><br>
<span style="font-size: 12pt; font-family: Aptos, Arial, Helvetica, sans-serif; line-height: normal;"> "client_secret</span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">”</span><span style="font-size: 12pt; font-family: Aptos, Arial, Helvetica, sans-serif; line-height: normal;">:”redacted”,</span><br>
</div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> "grant_types":["authorization_code","implicit"],</span><span>
<div><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> "redirect_uris":["https://redacted/signin-oidc/85bd07df-8b21-4867-a81f-bf3a4a64cd9d"],</span></div>
<div><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> "response_types":["code","id_token"],</span></div>
<div><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> "scope":"email openid profile",</span></div>
<div><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> "token_endpoint_auth_method":"client_secret_basic"</span></div>
</span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> }</span><span><br>
</span></span></div>
<div dir="ltr" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 11pt;">
<span><span><br>
</span></span></div>
<div dir="ltr"><span style="font-size: 12pt; font-family: Aptos, Arial, Helvetica, sans-serif; line-height: normal;">I hope I</span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">’</span><span style="font-size: 12pt; font-family: Aptos, Arial, Helvetica, sans-serif; line-height: normal;">m
missing</span><span style="font-size: 11pt;"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> something obvious. Any ideas or reco</span><span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">mmendations
on how to proceed?</span><span><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;"> Thanks!</span></span></span></span></div>
<div dir="ltr"><span style="font-size: 11pt;"><span><span><span><br>
</span></span></span></span></div>
<div id="ms-outlook-mobile-signature">
<div style="page:WordSection1">
<p style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal;">--</span><span style="font-family:"Aptos",sans-serif"><o:p></o:p></span></p>
<p style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif"><span style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; line-height: normal; color: rgb(33, 33, 33);">Ryan Rumbaugh</span><span style="font-family: Aptos, sans-serif; color: rgb(33, 33, 33);"><o:p></o:p></span></p>
<p style="margin:0in;font-size:11pt;font-family:Calibri, sans-serif"><br>
</p>
</div>
</div>
</div>
</body>
</html>