jumbojett / OpenID-Connect-PHP

Minimalist OpenID Connect client

Home Page:https://github.com/jumbojett/OpenID-Connect-PHP

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ADFS connection configuration

Tycjann opened this issue · comments

commented

Using this configuration:

$oidc->setResponseTypes(['id_token token']);
$oidc->addScope(['openid']);
$oidc->setAllowImplicitFlow(true);
$oidc->addAuthParam(['response_mode' => 'form_post']);
$oidc->setRedirectURL('http://localhost:3000/login.php');
$oidc->authenticate();

And I get this error message: "The+authorization+server+does+not+support+the+response+type+%27token%27+for+confidential+clients."

What did I do wrong?

$oidc->setAllowImplicitFlow(true);

wild guess - implicit flow is not supported by adfs?
Generally speaking implicit flow is dead as it is considered insecure

commented

Thank you, but unfortunately without flow it doesn't work either.