search

jumbojett / OpenID-Connect-PHP

Minimalist OpenID Connect client
https://github.com/jumbojett/OpenID-Connect-PHP
Apache License 2.0
614 stars 367 forks source link

ADFS connection configuration #375

Open Tycjann opened 1 year ago

Tycjann commented 1 year ago

Using this configuration:

$oidc->setResponseTypes(['id_token token']); $oidc->addScope(['openid']); $oidc->setAllowImplicitFlow(true); $oidc->addAuthParam(['response_mode' => 'form_post']); $oidc->setRedirectURL('http://localhost:3000/login.php'); $oidc->authenticate();

And I get this error message: "The+authorization+server+does+not+support+the+response+type+%27token%27+for+confidential+clients."

What did I do wrong?

DeepDiver1975 commented 1 year ago

$oidc->setAllowImplicitFlow(true);

wild guess - implicit flow is not supported by adfs? Generally speaking implicit flow is dead as it is considered insecure

Tycjann commented 1 year ago

Thank you, but unfortunately without flow it doesn't work either.