Skip to content
This repository was archived by the owner on Mar 5, 2025. It is now read-only.

Issuer name does not match authority: Azure as IDP #92

Open
ekhanad opened this issue Mar 3, 2021 · 1 comment
Open

Issuer name does not match authority: Azure as IDP #92

ekhanad opened this issue Mar 3, 2021 · 1 comment
Labels

Comments

@ekhanad
Copy link

ekhanad commented Mar 3, 2021

I am using Azure as IDP and getting following error when calling _oidcClient.LoginAsync() :

Error loading discovery document: Issuer name does not match authority: https://login.microsoftonline.com/{tenantid}/v2.0

I have specified the following client options:

var options = new OidcClientOptions
            {
                Authority = "https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration",
                ClientId = "AzureDemo",
                Scope = "openid",
                RedirectUri = "http://localhost/winforms.client",                                            
                Browser = new WinFormsWebView()
            };

How can I specify Issuer Name without switching off Issuer validation?

@leastprivilege
Copy link
Contributor

you cannot with the common endpoint in AAD since you don't know the issuer upfront.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants