Forum Discussion

BinduKoikkal's avatar
BinduKoikkal
Copper Contributor
Nov 22, 2024

Configuring SharePoint SE to trust third party OIDC authentication.

I am following this article to configure SharePoint SE to trust Login.gov OIDC 1.0 authentication.

https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/set-up-oidc-auth-in-sharepoint-server-with-msaad

Following Step 3 to configure using metadata endpoint failed with the error: New-SPTrustedIdentityTokenIssuer : The security token service metadata document could not be parsed.

Can SPSE work with third-party Idp other than Microsoft Entra ID to use metadata endpoint?

The public key of login.gov will be rotated annually, so configuring it manually by hard coding the public key is not a viable solution.

 

 

2 Replies

  • BinduKoikkal's avatar
    BinduKoikkal
    Copper Contributor

    Does anyone have any insight into why it's not working?  I can provide more details on the script used to create the token Issuer, if needed.

    • BinduKoikkal's avatar
      BinduKoikkal
      Copper Contributor

      Can the metadata endpoint url of the third-party Identity provider be in json format? Or does it have to be xml. Looks like the script to create the SPTrustedIdentityTokenIssuer fails at parsing the xml, but the endpoint url is in json format. 

Resources