OIDC Provider validate token using JWKS

EduAr
Tera Contributor

Hey there,

I'm in the process of setting up my OIDC Provider (I develop it using Duende) for my ServiceNow instance, but I've encountered a bug while ServiceNow attempts to validate the token signature. I'm using JWKS, which means that for ServiceNow to obtain the RSA key necessary to validate the signature, it should call my .well-known/configurations/jwks endpoint. Despite multiple tests, I haven't observed any calls to that endpoint in my Identity Server logs. Hence, I assume that ServiceNow doesn't automatically utilize JWKS for token validation. My question is: How can I configure this or override the token validation process for the OIDC provider?

 

Thanks.

0 REPLIES 0