Do not input private or sensitive data. View Qlik Privacy & Cookie Policy.
Skip to main content

Announcements
Q&A with Qlik - Qlik Cloud Migration: Questions about migrating to Qlik Cloud? Catch the latest replay!
cancel
Showing results for 
Search instead for 
Did you mean: 
mariomelo
Contributor
Contributor

Custom idp validation problem

Hello everyone, I'm new here and I'm trying to configure Qlik to use my custom OpenId OICD idp provider. I am following the docs https://help.qlik.com/pt-BR/cloud-services/Subsystems/Hub/Content/Sense_Hub/Admin/mc-creating-idp.ht... , however, I'm stuck in the idp validation step. 

Maybe someone can help me to understand why the validation raises the following problem:

Ocorreu um erro ao validar a configuração do seu provedor de identidade. Reveja suas definições de configuração.

{
  "status": "callbackError",
  "oauth2Error": {
    "errorDescription": "iss missing from the response"
  },
  "error": "An error occurred during the authorization callback"
}

 

It is important to say that this is used by other tools and I have validated that the id_token contains the iss property.

Labels (3)
1 Solution

Accepted Solutions
Benoit_C
Support
Support

Hi @mariomelo,

 

The error message "iss missing from the response" suggests that the identity provider (IdP) is not returning a value for the "iss" claim in the OpenID Connect ID token. 

The "iss" claim is a required claim in the ID token and it specifies the issuer of the token, typically the identity provider.
 

This error can occur if the IdP is not configured properly, or if there is a misconfiguration in the client's OpenID Connect setup with the IdP. To resolve this issue, you should review your IdP's configuration to ensure that it is returning the "iss" claim in the ID token and that the value is correct.

Regards,

Benoit

View solution in original post

1 Reply
Benoit_C
Support
Support

Hi @mariomelo,

 

The error message "iss missing from the response" suggests that the identity provider (IdP) is not returning a value for the "iss" claim in the OpenID Connect ID token. 

The "iss" claim is a required claim in the ID token and it specifies the issuer of the token, typically the identity provider.
 

This error can occur if the IdP is not configured properly, or if there is a misconfiguration in the client's OpenID Connect setup with the IdP. To resolve this issue, you should review your IdP's configuration to ensure that it is returning the "iss" claim in the ID token and that the value is correct.

Regards,

Benoit