<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p>Hello there,</p>
<p><br>
</p>
<p>I'm using OIDC OP plugin version <span>4.2.0 with shibboleth idp 5.1.3</span></p>
<p><span><br>
</span></p>
<p><span>I'm trying to setup the first RP and get an error that client authentication failed.</span></p>
<p><span><br>
</span></p>
<p><span></p>
<div>2024-12-19 13:23:41,224 - INFO [net.shibboleth.idp.plugin.oidc.op.authn.impl.OIDCClientInfoCredentialValidator:167] - Credential Validator oauth2-clientinfo: Login by 'rp-test' failed<br>
2024-12-19 13:23:41,225 - DEBUG [net.shibboleth.idp.plugin.oidc.op.authn.impl.JWTCredentialValidator:168] - Credential Validator oauth2-jwt: OAuth client authentication for 'rp-test' of unsupported type: client_secret_basic</div>
<div><br>
</div>
<div>In oidc.properties client_secret_basic is enabled</div>
<div><span>idp.oidc.tokenEndpointAuthMethods = client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt</span><br>
</div>
<div><br>
</div>
<div>I'm using a .json file for the metadata and tried setting <span><span>token_endpoint_auth_method</span></span><br>
<span>
<div>[<br>
{<br>
"scope":"openid email profile",<br>
"redirect_uris":["https://rp-test.ista.ac.at/oauth/oidc/callback"],<br>
"client_id":"rp-test",<br>
"client_secret":"xxx",<br>
"response_types":["code"],<br>
"grant_types":["authorization_code"],<br>
"token_endpoint_auth_method":"client_secret_basic"<br>
}<br>
]<br>
<br>
</div>
</span>Do you maybe know what's causing this? I had a similar issue with Keycloak and I had to set the client to public, but I haven't found a way how to do it in Shibboleth. Thanks in advance!<br>
</div>
</span>
<p></p>
<p><br>
</p>
<p><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, "EmojiFont", "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p><span lang="en-US"></span></p>
<div style="margin:0"><font face="Calibri,sans-serif" size="2" style="font-family:Calibri,sans-serif,serif,"EmojiFont""><span style="font-size:11pt"><font size="2"><span style="font-size:8.5pt"><b>David Stava</b></span></font></span></font></div>
<div style="margin:0"><font face="Calibri,sans-serif" size="2" style="font-family:Calibri,sans-serif,serif,"EmojiFont""><span style="font-size:11pt"><font size="2"><span style="font-size:8.5pt">IT system administrator<br>
Institute of Science and Technology Austria (ISTA)</span></font><font size="2"><span style="font-size:8.5pt"><br>
</span></font><a href="mailto:Anastasiia.heurteur@ist.ac.at" target="_blank" rel="noopener noreferrer" id="LPNoLP"><font size="2"><span style="font-size:8.5pt"><font color="#0563C1">David.Stava@ist.ac.at</font></span></font></a><font size="2"><span style="font-size:8.5pt">
</span></font></span></font></div>
<br>
<p></p>
</div>
</div>
</div>
</body>
</html>