search

Azure-Samples / active-directory-verifiable-credentials

A code sample demonstrating how to use Azure Active Directory's preview functionality to issue and consume verifiable credentials.
107 stars 64 forks source link

Could not retrieve {"keyReference":"#.....","type":"key","remoteKeyReference":"issuerSigningKeyIon... #30

Closed ibLaunch closed 3 years ago

ibLaunch commented 3 years ago

Following the steps from here:

https://docs.microsoft.com/en-us/azure/active-directory/verifiable-credentials/issue-verify-verifiable-credentials-your-tenant

and calling this URL: .../issue-request

But running into following issue:

Could not retrieve {"keyReference":"#.....","type":"key","remoteKeyReference":"issuerSigningKeyIon-..............d"}. Error: RestError: The policy requires the caller 'appid=53.....f;oid=......;iss=https://sts.windows.net/...../' to use on-behalf-of (OBO) flow. For more information on OBO, please see https://go.microsoft.com/fwlink/?linkid=2152310 This seems like a key vault access issue, although proper steps were followed. Maybe the error above gives the proper clue.

I removed the values from the URL in the above response.

ibLaunch commented 3 years ago

Found Solution here: https://github.com/SparebankenVest/azure-key-vault-to-kubernetes/issues/126

srikanthakshay commented 3 years ago

Following steps from Here: https://docs.microsoft.com/en-us/azure/active-directory/verifiable-credentials/issue-verify-verifiable-credentials-your-tenant

while try test the issuer (issue the verifiable credential) , at Add a credential screen -->after sign in to my account, getting below error after Troubleshooting details If you contact your administrator, send this info to them. Copy info to clipboard Copied Request Id: a6bf36d1-28b5-4be0-91f3-e6bfdb6c4900 Correlation Id: 4af1f2ff-5abe-47c6-b5dc-81fcd0b39928 Timestamp: 2021-06-07T14:11:54Z Message: AADSTS500113: No reply address is registered for the application. Flag sign-in errors for review: Enable flagging

johncra commented 3 years ago

Check you have set the reply URI during the app registration in Azure AD

@.***D75BB7.8D32D2E0]

If that is correct, check that the Rules file has a matching URI

"redirect_uri": "vcclient://openid",

Good luck John

From: srikanthakshay @.> Sent: 07 June 2021 15:50 To: Azure-Samples/active-directory-verifiable-credentials @.> Cc: Subscribed @.***> Subject: Re: [Azure-Samples/active-directory-verifiable-credentials] Could not retrieve {"keyReference":"#.....","type":"key","remoteKeyReference":"issuerSigningKeyIon... (#30)

Following steps from Here: https://docs.microsoft.com/en-us/azure/active-directory/verifiable-credentials/issue-verify-verifiable-credentials-your-tenant

while try test the issuer (issue the verifiable credential) , at Add a credential screen -->after sign in to my account, getting below error after Troubleshooting details If you contact your administrator, send this info to them. Copy info to clipboard Copied Request Id: a6bf36d1-28b5-4be0-91f3-e6bfdb6c4900 Correlation Id: 4af1f2ff-5abe-47c6-b5dc-81fcd0b39928 Timestamp: 2021-06-07T14:11:54Z Message: AADSTS500113: No reply address is registered for the application. Flag sign-in errors for review: Enable flagging

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/Azure-Samples/active-directory-verifiable-credentials/issues/30#issuecomment-856002215, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AGFPTB5Z257TIUS5ZRLSXZDTRTL7ZANCNFSM432KEAVA.