OpenID Connect - Microsoft Entra ID

bbollard3 days ago

Hi folks,
I am attempting to leverage Microsoft Entra ID for Authentication. I have been following this item:

https://www.traccar.org/openid-sso/

however it is geared towards Google ID and I am no OIDC expert.

My setup also leverages Caddy to provide a reverse-proxy HTTPS implementation (port 8083 -> 8082).

At this point I am stuck and hoping someone can guide me on settings or log entries of interest to review.

The repro steps are:

  1. Click the LOGIN WITH OPENID button
  2. I am passed off to Microsoft. Authenticate, MFA challenged, etc.
  3. Redirects back to https://<traccar_url>:8083/api/session/openid/callback with the error:
Unable to authenticate with the OpenID Connect provider. - GeneralSecurityException (OpenIdProvider:145 < *:181 < SessionResource:167 < ... < OverrideFilter:50 < ...)

In the log file I do see the request to https://<traccar_url>:8083/api/session/openid/callback and then a "handle http://localhost:8082/api/session/openid/callback"

and then an HTTP 400 which I assume is the final error response.

Any suggestions on how to continue troubleshooting would be appreciated.

Anton Tananaev3 days ago

Seem like the token verification failed for some reason.