<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<br id="lineBreakAtBeginningOfMessage">
<div><br>
<blockquote type="cite">
<div>On 21 Mar 2025, at 10:59, Philip Smart <Philip.Smart@jisc.ac.uk> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
Hi Keith,<br>
<blockquote type="cite">
<pre style="text-wrap-mode: wrap; font-variant-ligatures: normal; orphans: 2; widows: 2; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">I'm obviously overlooking something very basic here.
I've got a fairly vanilla installation of the OIDC RP plugin that I want to use to proxy to a single OP.
I've set idp.authn.oidc.rp.provider.proxyIssuer, and the IdP is successfully fetching OP metadata according to the log.
I've set idp.authn.oidc.rp.client.clientId and idp.authn.oidc.rp.client.clientSecret and even explicitly set idp.authn.oidc.rp.provider.discoveryRequired=false to be sure. And, even though it shouldn't matter, I've removed spaces from the equal signs in any of these properties though I know the IdP will trim whitespace.</pre>
</blockquote>
<blockquote type="cite">
<pre style="text-wrap-mode: wrap; font-variant-ligatures: normal; orphans: 2; widows: 2; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">But still, the log tells me this when I try to authenticate:
ERROR [net.shibboleth.idp.plugin.authn.oidc.rp.impl.InitializeOAuth2ClientContext:156] - Profile Action InitializeOAuth2ClientContext: No client_id found from profile configuration
Any thoughts where else to look? I'm feeling rather silly at the moment that I can't get this working.
</pre>
</blockquote>
<div><br>
</div>
<div>This all looks sensible to me, would you be able to tell me the versions of the <i>net.shibboleth.oidc.common</i> and <i>net.shibboleth.idp.plugin.oidc.config</i> plugins you have installed?</div>
<div><br>
</div>
<div>shibboleth-idp/bin/plugin.sh -l</div>
<div><br>
</div>
<div>Phil</div>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>Also, could you try to add the client_id as a relying party override (should not need this, but just to help understand why it is not being wired up):</div>
<div><br>
</div>
<div>
<div><util:list id="shibboleth.RelyingPartyOverrides"></div>
<div> </div>
<div> <bean id=“openidprovider" parent="RelyingPartyByName" c:relyingPartyIds=“<idp.authn.oidc.rp.provider.proxyIssuer>"></div>
<div> <property name="profileConfigurations"></div>
<div> <list></div>
<div> <bean parent="OIDC.SSO" p:clientId="client_id"/></div>
<div> </list></div>
<div> </property></div>
<div> </bean> </div>
<div> </div>
<div> </util:list></div>
<div><br>
</div>
<div>Phil</div>
</div>
</div>
<div><br>
<blockquote type="cite">
<div>
<div style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<br>
<blockquote type="cite">
<pre style="text-wrap-mode: wrap; font-variant-ligatures: normal; orphans: 2; widows: 2; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;">Thanks,
Keith</pre>
</blockquote>
</div>
</div>
</blockquote>
</div>
<br>
<mc type="body"><font size="1"><font face="Corbel"><br>
<p>Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered
office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice</p>
</font></font>
</body>
</html>