Assistance Required with OAuth Configuration

Hi dominik krist_59125 ,

I'm using oAuth to authenticate our Angular portal users in Google cloud. The configuration is pretty straightforward. Error 400 in the logs seems to indicate a bad parameter sent in the request. 

In Google cloud we have:

• the oAuth cliend id and the shared secret.
• The authorized redirect URIs

This is our oauth config in Manager:

• The login endpoint: accounts.google.com/.../auth
• Logout endpoint (not required but we have one)
• Token endpoint: https://oauth2.googleapis.com/token
• JSON web key endpoint: https://www.googleapis.com/oauth2/v3/certs
• Issuer: https://accounts.google.com
• Search value: email
• Column to search: GAPUser - PrimaryEmail
• Scope : profile, email, openid

and in applications:

• the display name
• Cliend ID (the oAuth client id)
• the shared secret that is generated when you create the client id

Check your idp documentation.

Hth!

Hi dominik krist_59125 ,

I'm using oAuth to authenticate our Angular portal users in Google cloud. The configuration is pretty straightforward. Error 400 in the logs seems to indicate a bad parameter sent in the request. 

In Google cloud we have:

• the oAuth cliend id and the shared secret.
• The authorized redirect URIs

This is our oauth config in Manager:

• The login endpoint: accounts.google.com/.../auth
• Logout endpoint (not required but we have one)
• Token endpoint: https://oauth2.googleapis.com/token
• JSON web key endpoint: https://www.googleapis.com/oauth2/v3/certs
• Issuer: https://accounts.google.com
• Search value: email
• Column to search: GAPUser - PrimaryEmail
• Scope : profile, email, openid

and in applications:

• the display name
• Cliend ID (the oAuth client id)
• the shared secret that is generated when you create the client id

Check your idp documentation.

Hth!

Hi juancarlos camargo Thanks a lot for your Message: 
We Use Microsoft Azure and this is my Configuration for the IDP (QBMIdentityProvider)

and Application (QBMIdentityClient)

In Azuer, we set in the Authentication Tap  
Web - Redirect URIs to https://dev.url.url.url.de/AppServer

I can create a Bearer Token in Postman using Client ID and Client Secret,

if i analyze the Token with jwt analyzer the oid is matching the AADUser.Id

My Api Call is: 
$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
$headers.Add("Accept", "application/json")
$headers.Add("Authorization", "Bearer abcdef... ")
$body = ""
Invoke-RestMethod 'https://dev.url.url.url.de/AppServer/auth' -Method 'POST' -Headers $headers -Body $body