Hi, in my scenario, i'm using Keycloak as an IDP broker. It works fine with a lot of configuration. I build keycloak from source 3 weeks ago. However the IDP i'm trying to integrate right now requires a nonce in the first call on the authorization endpoint. https://myidp.com/authorize?scope=openid+profile&state=state&resp... fails but if i manually add "&nonce=1234" in the url it works I could not find an option in the external IDP concerning this nonce generation. Did i miss something ? Should i ask for a feature and i'll wait for someone to look at it ? any help would be appreciated Thanks a lot Amaury _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

You can even download latest Keycloak 4.0.Beta . I think it should be there. No even need to build anything from sources :) Marek On 26/03/18 16:50, Jérôme Blanchard wrote: > Hi triton, > I have submitted a pull request that should fixe that. ( > https://github.com/keycloak/keycloak/pull/5082) > Could you try with the latest sources and confirm that it works now ? > Thanks, > Best regards, Jérôme. > > Le lun. 26 mars 2018 à 15:40, triton oidc <triton.oidc(a)gmail.com&gt; a > écrit : > > Hi, >> >> in my scenario, i'm using Keycloak as an IDP broker. >> It works fine with a lot of configuration. >> >> I build keycloak from source 3 weeks ago. >> >> However the IDP i'm trying to integrate right now requires a nonce in the >> first call on the authorization endpoint. >> >> >> https://myidp.com/authorize?scope=openid+profile&state=state >> &response_type=code&client_id=clientid&redirect_uri=redirect_uri >> fails >> but if i manually add "&nonce=1234" in the url it works >> >> I could not find an option in the external IDP concerning this nonce >> generation. >> Did i miss something ? >> Should i ask for a feature and i'll wait for someone to look at it ? >> >> any help would be appreciated >> >> Thanks a lot >> >> Amaury >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >> >> _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user >