Portals - OpenId Connect - Response Mode (form_post)

(0) Share

Report

Posted on by JasonMcneil

215

I've been trying to get our Portal to authenticate with a couple different OIDC providers, and am running into some challenges. It seems that the Portals Implmentation only supports a callback from Identity Providers through the form_post response_mode as described here:

http://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html

While yes, this appears to be more secure, I'm finding that several providers have not implemented this mechanism and respond with a GET request with the id_token in the query string (which would equate to a response_mode=query).

Is there any way/site setting that would allow the Portal to accept this type of response (GET with query I mean) rather than the form_post method?

*This post is locked for comments