Uploaded image for project: 'Red Hat 3scale API Management'
  1. Red Hat 3scale API Management
  2. THREESCALE-2556

OIDC verification fails or gets stuck

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Blocker Blocker
    • None
    • SaaS
    • Zync
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • Not Started
    • -
    • Hide
      • create a Service with OIDC authentication mode
      • add the value of the OIDC issuer
      • update the staging environment
      • check at the top right corner the messages:
        1) you can see the first message "OIDC verification in progress"
        2) the second message whether the verification is successful or not (green or red message) it doesn't appear.
      Show
      create a Service with OIDC authentication mode add the value of the OIDC issuer update the staging environment check at the top right corner the messages: 1) you can see the first message "OIDC verification in progress" 2) the second message whether the verification is successful or not (green or red message) it doesn't appear.
    • 3scale 2019-05-06, 3scale 2019-05-20

      When configuring a service with OIDC flow the verification of the OIDC issuer is not successful or it takes too long.

      • If you attempt to go to another site, a message in the browser pops up asking if you want to leave the site.
      • If you create an application it doesn't get created in RH-SSO.

      Common factors

      1. All reports were submitted to Support on the same date 8th May stating that the issue was noticed or reoccurred that same day or the day before.
      2. 2 of the 3 reports have confirmed that they have not seen any successful synchronisations of new clients or updated client details since the end of April.

      Troubleshooting steps:
      1) Remove issuer endpoint from a service
      2) Save the staging environment
      3) Add back the issuer endpoint
      4) Save the staging environment
      5) Scroll up the configuration page and check on the top right corner:

      • 1st message "OpenID Connect Issuer verification in progress"
      • 2nd message "OpenID Connect Issuer valid" OR if it doesn't show
        If the 2nd message doesn't show up try to navigate away from the page and see if a popup dialog appears with "Do you want to leave this site? Changes you made may not be saved. Cancel Leave". Click Cancel.

      6) In another "tab", update an existing application for the service modified and/or create a new application.
      7) Check in RH-SSO the application has been created

        1. leave site.png
          31 kB
          Anna Vila Tusell
        2. oidc_verification_progress.png
          10 kB
          Anna Vila Tusell

              Unassigned Unassigned
              rhn-support-avilatus Anna Vila Tusell
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: