World of EUC

image.png

Hi, NetScaler as OAuth IdP. Why is the "issuer" from <https://aaa.customer.com/oauth/idp/.well-known/openid-configuration> not changed when I edit the Issuer-Name in the OAuth IdP Profile? There are SP's who need more than just the FQDN in the issuer field - like <https://aaa.customer.com/oauth/idp> LinkedIn for example had the same problem, there was only the FQDN in the issuer for years, now they changed it to /oauth for better compatibility - see <http://linkedin.com/oauth/.well-known/openid-configuration|linkedin.com/oauth/.well-known/openid-configuration>
Thank you

<@U01HHF2L4MR> any idea or are your OIDC connections with NS working fine when the issuer is the default FQDN without any /oauth/idp URL at the end?

I haven’t ran into any problems with this (yet)… there was one rewrite I needed to do though regading this for PrivX. Let me check.

Just to share if anyone else is interested, we needed to do a redirect from `/.well-known/openid-configuration` to `/oauth/idp/.well-known/openid-configuration` as this was required by PrivX (it's looking for the well-known document directly from the root, but that doesn't apply here