OIDC Provider validate token using JWKS
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-15-2023 06:52 AM
Hey there,
I'm in the process of setting up my OIDC Provider (I develop it using Duende) for my ServiceNow instance, but I've encountered a bug while ServiceNow attempts to validate the token signature. I'm using JWKS, which means that for ServiceNow to obtain the RSA key necessary to validate the signature, it should call my .well-known/configurations/jwks endpoint. Despite multiple tests, I haven't observed any calls to that endpoint in my Identity Server logs. Hence, I assume that ServiceNow doesn't automatically utilize JWKS for token validation. My question is: How can I configure this or override the token validation process for the OIDC provider?
Thanks.
0 REPLIES 0