<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Please ignore; I got this working. I had a misconfiguration in my oidc.properties:</div>
<div style="direction: ltr; font-family: Menlo; font-size: 12pt;"><span style="color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); text-transform: none;">idp.oauth2.grantTypes =
</span><span style="color: rgb(42, 0, 255); background-color: rgb(255, 255, 255); text-transform: none;">authorization_code,refresh_token,client_credentials</span></div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Sunil</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="mail-editor-reference-message-container">
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr;">
</div>
<div style="padding: 3pt 0in 0in; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor;">
<div class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; font-family: Aptos; font-size: 12pt; color: black;">
<b>From: </b>users <users-bounces@shibboleth.net> on behalf of Mathew, Sunil via users <users@shibboleth.net><br>
<b>Date: </b>Monday, July 6, 2026 at 6:18 PM<br>
<b>To: </b>Shibbolieth-Users Mailing List <users@shibboleth.net><br>
<b>Cc: </b>Mathew, Sunil <smathew@hbs.edu><br>
<b>Subject: </b>OIDC Unauthorized client error<br>
<br>
</div>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi,</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I am testing the OIDC setup using oidcdebugger.com.</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Here are my configurations:</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<u>oidc-client.json:</u></div>
<div style="background-color: rgb(255, 255, 255); padding-left: 2px;">
<div style="background-color: rgb(255, 255, 255);">
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">{</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">"client_id"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">:
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"oidc-debugger"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">,</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127); text-transform: none;">"client_secret"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); text-transform: none;">:
</span><span style="font-family: Menlo; color: rgb(42, 0, 255);"><i>“</i></span><span style="font-family: Menlo; font-size: 16px; color: rgb(42, 0, 255);"><i>client-secret"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); text-transform: none;">,</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">"scope"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">:
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"openid email profile"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">,</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">"redirect_uris"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">: [</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"https://oidcdebugger.com/debug"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">],</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">"response_types"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">: [</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"code"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">],</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">"grant_types"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">: [</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"authorization_code"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">],</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">"token_endpoint_auth_method"</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">:
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"client_secret_basic"</i></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">}</span></p>
</div>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<u>relying-party.xml:</u></div>
<div style="background-color: rgb(255, 255, 255); padding-left: 2px;">
<div style="background-color: rgb(255, 255, 255);">
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!--</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">Unverified RP configuration, defaults to no support for any profiles. Add
<u><ref></u> elements to the list</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">to enable specific default profile settings (as below), or create new beans
<u>inline</u> to override defaults.</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">"Unverified" typically means the IdP has no metadata, or equivalent way of assuring the identity and</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">legitimacy of a requesting system. To run an "open" IdP, you can enable profiles here.</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">--></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">id</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"shibboleth.UnverifiedRelyingParty"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">parent</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"RelyingParty"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">property</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">name</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"profileConfigurations"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!-- <bean parent="SAML2.SSO" p:encryptAssertions="false" /> --></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">property</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!--</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">Default configuration, with default settings applied for all profiles.</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">Take care with any defaults you apply at this level because you will have to create</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">overrides or apply metadata tags for every single SP that requires a different setting.</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">Changed defaults should be things you really do want to apply to nearly every SP.</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">--></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">id</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"shibboleth.DefaultRelyingParty"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">parent</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"RelyingParty"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">property</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">name</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"profileConfigurations"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!-- SAML 1.1 and SAML 2.0 AttributeQuery are disabled by default. --></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!--</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><ref bean="Shibboleth.SSO" /></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><ref bean="SAML1.AttributeQuery" /></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><ref bean="SAML1.ArtifactResolution" /></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">--></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"SAML2.SSO"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"SAML2.ECP"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"SAML2.Logout"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!--</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><ref bean="SAML2.AttributeQuery" /></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);">--></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"SAML2.ArtifactResolution"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!-- Add OIDC discovery/<u>keyset</u> support --></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OIDC.Configuration"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OIDC.Keyset"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">property</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!-- Container for any overrides you want to add. --></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">util:list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">id</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"shibboleth.RelyingPartyOverrides"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 95, 191);"><!-- OIDC Debugger --></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">parent</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"RelyingPartyByName"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">c:relyingPartyIds</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"oidc-debugger"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">property</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">name</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"profileConfigurations"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OIDC.SSO"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128); background-color: rgb(255, 255, 0);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127); background-color: rgb(255, 255, 0);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127); background-color: rgb(255, 255, 0);">parent</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255); background-color: rgb(255, 255, 0);"><i>"OAUTH2.Token"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127); background-color: rgb(255, 255, 0);">p:authorizationCodeFlowEnabled</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255); background-color: rgb(255, 255, 0);"><i>"true"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128); background-color: rgb(255, 255, 0);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OIDC.UserInfo"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OIDC.Keyset"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OAUTH2.TokenAudience"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OAUTH2.Revocation"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"><</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">ref</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(127, 0, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">=</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(42, 0, 255);"><i>"OAUTH2.Introspection"</i></span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 0, 0);">
</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">/></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">list</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">property</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
<p class="ms-outlook-mobile-reference-message skipProofing" style="text-align: left; text-indent: 0px; text-transform: none; margin: 0px;">
<span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);"></</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(63, 127, 127);">bean</span><span style="font-family: Menlo; font-size: 12pt; color: rgb(0, 128, 128);">></span></p>
</div>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Here is my curl command to exchange code for tokens:</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
curl -X POST https://ssodev.hbsstg.org/idp/profile/oidc/token \</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
-u "oidc-debugger:client-secret" \</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
-d "grant_type=authorization_code" \</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
-d “code=auth-code" \</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
-d "redirect_uri=https://oidcdebugger.com/debug”</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I have also tried OIDC.SSO instead of OAUTH2.Token, but that did not help:</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span style="background-color: rgb(255, 255, 0); text-transform: none;"><bean parent="OIDC.SSO" p:authorizationCodeFlowEnabled="true" /></span></div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Can you please let me know what the issue could be?</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Regards,</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Sunil</div>
<div class="ms-outlook-mobile-reference-message skipProofing" style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</div>
</body>
</html>