Questions tagged [openid-provider]

147 questions
0
votes
1 answer

out of band communication without OIDC CIBA

Our app has an OIDC provider and for our users, we use the standard OAuth redirect flow since user authorization and authentication are performed on the same device. However, now we have mobile users within our app we want to extend authentication…
Decrypter
  • 2,784
  • 12
  • 38
  • 57
0
votes
1 answer

Custom openid connect provider adb2c

I have created a custom identity provider in adb2c for my openid connect server but getting error while running it through User Flow - Setps I did : Created a new openId Connectprovider. Created a new user flow for open-id connect provider…
0
votes
1 answer

Security of the OIDC login page with authorization_code flow

When we use the authorization code flow in the OIDC, I go to /authorization and then it redirect me to the OIDC provider's login page. On this login page there is something like redirectUrl query string, which contains link to /authorization with…
Szyszka947
  • 473
  • 2
  • 5
  • 21
0
votes
0 answers

"Insufficient privileges to complete the operation" again

I'm tring to get data of signed in user from microsoft azure using GraphServiceClient My app registration permissions: Type of registration is: Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft…
Oleg Sh
  • 8,496
  • 17
  • 89
  • 159
0
votes
2 answers

Asp.net core Microsoft OIDC library OnAuthorizedCode recieved event getting fired twice

I have an OIDC application, which was giving me a correlation error for some time. We have managed to resolve it by passing the correlation cookie properly. Our infrastructure has the following network topology. Openshift Container(OIDC App) -> …
Jith123
  • 11
  • 3
0
votes
1 answer

Spring Boot OAuth2/OpenID Connect Client An error occurred while attempting to decode the Jwt: Malformed Jwk set

I'm implementing single sign on authentication for Spring Boot application using OpenID Connect.I have configured Spring Boot Oauth2 client in my application with third party OpenID Connect authorization server. For Spring, I followed configuration…
0
votes
1 answer

OAuth2.0 without OIDC (Plain OAuth2.0)

As far as I understand, applications that we can login with our different accounts use OpenID Connect(A profile of OAuth2.0). OAuth is for Authorization and OIDC is for authentication(It has ID Token-User Info Endpoint). So, was it not possible to…
0
votes
1 answer

How to implement OpenID connect in Node JS using Okta tool

I am not expert in this topic. I referred many documentation, many video for implement OpenID concept in Node JS using Okta. But I couldn't understand. How it's processing and How to use any one explain this topic and share some example code using…
0
votes
0 answers

Update OpenId/SAML2 (WsFederation) after startup

We have an asp.net core website that configures a bunch of database setups for SSO that are OpenId and Saml2 endpoints. These change or are added in a UI for Administrators as necessary. Right now we have to recycle the app pool to update these…
James Hancock
  • 3,348
  • 5
  • 34
  • 59
0
votes
1 answer

Azure B2C openid connecting to AAD

Using the MS documents listed below I have tried repeatedly to authenticate against AAD as an idp and I cannot get it to work. Every time I get the following error: AADSTS50011: The reply url specified in the request does not match the reply urls…
0
votes
1 answer

Bodysnatcher "OpenId Provider" attack question

Okay so basically here's the Bodysnatcher OpenId Provider attack scenario. Bob's Google claimed identifier is the following, ttps://www.google.com/accounts/o8/id?id=AAtawkQvytyBNNuHpRhn36f8MLvFiJvZg8teNE Jane has some how found Bob's "current"…
Thirlan
  • 712
  • 1
  • 8
  • 26
0
votes
1 answer

mitreId openid connect server using in an angular and .net webapi application

I'm working on a project which has angular as Frontend and backend API in asp.net WebAPI. There is an OpenId connect server(mitreid) which is hosted and I have to use that server for authentication and authorization. I am trying to configure OpenId…
0
votes
1 answer

OpenId Connect Relying party implementation in Liferay

I am using Liferay CE 6.2 for my application. My application is a relying party and we want to do openId connect relying party implementation in Liferay. Can someone please guide me on this?
0
votes
1 answer

User is always null when using AspNet.Security.OpenIdConnect.Server

I'm trying to generate access tokens for my aspnet core web app. I created the following provider: public class CustomOpenIdConnectServerProvider : OpenIdConnectServerProvider { public override Task…
0
votes
0 answers

Openid Setup Incomplete issue

I am facing the following problem when setting the openid connect from Janrain. To test I have uploaded this on my server in following folder of my server: /home/xyz/public_html/openid When I run the detect file from example folder…